Spring安全的用户密码加密处理研究  

Research on users' password encryption processing in Spring security

作　　者：丁振凡[1] 

机构地区：[1]华东交通大学信息工程学院,南昌330013

出　　处：《长春工程学院学报（自然科学版）》2012年第3期108-111,共4页Journal of Changchun Institute of Technology：Natural Sciences Edition

基　　金：江西省自然科学基金(20114BAB201026)

摘　　要：数据加密存储与传输是应用系统设计中的重要问题,文章详细讨论了使用Spring Security进行密码加密和验证处理的实现方法。着重分析了PasswordEncoder接口的2种定义形式和具体实现类的使用,给出了基于XML和数据库存储用户信息的认证配置方法,并对使用SSL实现站点受保护数据的加密传输的配置进行了介绍,从而对用户密码的传输与存储建立了有效的安全防护。Data encryption storage and transmission is an important problem during application system design.In this paper,the author discusses in detail the implementation of password encryption and validation processing in Spring security,mainly focusing on the analysis two kinds of definitions of the Password Encoder interface and the use of implementation forms.An authentication configuration method to store users’ information based on XML and database store has been given in it.The SSL configuration to realize site protected data encryption transmission has also been introduced.Thus it establishes a effective security protection for the user password transmission and storage.

关 键 词：Spring安全 密码加密与验证 用户认证配置 SSL 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]