职称申报系统移动APP的安全性与权限控制研究  

Security and authorization on the mobile APP for professional title application system

作　　者：林良文[1] 黄剑波[1] 康文华 LIN Liangwen;HUANG Jianbo;KANG Wenhua(Network Information Department,Guangdong Provincial Medical Academic Exchange Center(Guangdong Provincial Medical Information Institute),Guangzhou 510000,China)

机构地区：[1]广东省医学学术交流中心//广东省医学情报研究所,广东广州510000

出　　处：《现代医院》2023年第11期1737-1739,共3页Modern Hospitals

基　　金：广东省医学科学技术研究基金(A2021254)。

摘　　要：目的 探讨基于Hybrid技术的广东省卫生系列高级职称申报系统移动端APP的安全性与权限控制。方法 通过分析现有移动应用安全问题和权限管理挑战,设计一套综合性的解决方案,以确保用户数据的保密性和系统功能的安全性。结果 通过集成IdentityServer框架,实现一套基于OAuth2.0协议的单点登录(SSO)系统,并结合一系列安全策略,有效地保证了系统的安全性与权限控制。结论 通过实验和案例分析,验证了所提出解决方案的可行性和有效性。Objective To explore the security and authorization of the Guangdong Provincial Health Series Senior Title Application System's mobile APP based on Hybrid technology.Methods By analyzing existing security issues in mobile applications and challenges in permission management,a comprehensive solution was made to ensure the confidentiality of user data and the security of system functions.Results Through the integration of the Identity Server framework,a Single Sign-On(SSO)system based on the OAuth 2.0 protocol was implemented.Combined with a series of security policies,the security and authorization of the system were effectively ensured.Conclusion The feasibility and effectiveness of the proposed solution arevalidated through the experiments and case studies.

关 键 词：移动APP 安全性 权限控制 单点登录 IdentityServer 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论] TP274.2[自动化与计算机技术—计算机科学与技术]