基于 TLS 和 JWT 远程救助系统安全的 API

为满足用户隐私安全的需求, 设计实现了一套相对安全的 API(Application Programming Interface)。 该安 全接口采用 TLS(Transport Layer Security)安全套接技术和 JSON(Java Script Object Notation) Web Token 验证技 术, 通过在 HTTP 传输层加密和用户权限 token 验证的双层验证机制为用户构筑相对安全的 API 访问模式。 通过相关系统安全性测试与分析, 该系统可在实现监护者和被监护者之间的交流、 信息发布及定位等功能的基 础上, 实现安全的信息传输, 以提高用户隐私的安全性。

Security API for Remote Relief System Based on TLS and JWT

In order to design and develop a real-time and efficient remote rescue system to meet the needs of users in the privacy security, this paper designed and implemented a set of relatively safe API(Application Programming Interface).The safety interface is through the TLS(Transport Layer Security)technology and JSON(Java Script Object Notation)Web socket Token verification technology,through the double authentication mechanism in the HTTP transport layer encryption and user permissions token verification to build relatively safe access mode for API users.Through the related system security testing and analysis,the system can realize the security of information transmission interface based on the function of the communication between the monitor and the monitor,information release and positioning.