Design And Implementation Of Web System Security Module Based On Spring Security

Information becomes the trend in today's society. The implementation of "Research Management Database" has very important significance to improve the current information management status of the scientific management department as a method of information construction."Research Management Database" puts high demands for system security forward which has a wide range of users, complex hierarchy and rich business resource. In order to solve the security issues of "Research Management Database", this paper builds a simple, flexible and scalable security module.This paper follows the Java software architecture, combines with SSH framework, and with reference to Java security-related specifications, in close connection with the security requirements, selects the security framework of Spring Security to design and realize the security module. This paper completes the basic data management functions of account, role and right modules, and extends security authentication, access control and session management, authentication data source in Spring Security. For "Research Management Database" flexible security control feature, it designs a hierarchical account management and automatic role assignment mechanism, and designs a right system of tree structure to enhance the authority application friendly. This paper introduces the framework of SSH and Spring Security, improves application development efficiency of the security module, separates the development of security module and service module and reduces the code coupling. The security module which greatly reduces the volume brought about by the user account maintenance, offers a good usability and scalability, in particular, to achieve near-zero invasive to the system's development has also brought a very Great convenience.