Analysis And Improving Of Authentication And Authorization Modules In Web Application System

With the rapid development of network, systems based on web are also getting more and more popular. Most of the systems which establish on web use B/S architecture. Authentication and Authorization are two important way leading to accomplish a security system.The project motioned in this paper is a value-add management system. There already had an AA model, but not fitful for this project. So the aim of developer is to analyze and modify the existing model, make it can be used in the project. Works completed are blow:1,Introduces the development of web application system, the features of B/S architecture, and limits in authenticate and authorization procedure which appear because of the web. The paper also analyze many kind of encrypt algorithm, typical authenticate technology and authorization models. The project's development environment is .net, so the overview of .net framework is also included in this paper.2,Introduce the requirement of the system which contains two parts: function and performance; analyze the AA model's architecture and the flows of authenticate, make sure what will be modify and what will be added; Describes the design and realization process.3,Give a new model of authenticate which bases on .net architecture, also a more hierarchy RABC model designed by the author.Finally, the page accomplish the analyze of AA model and also modify of it, make it can provide authenticate and authorization service.