Skip to main content
SpringerLink
Log in

Improvements Based on JWT and RBAC for Spring Security Framework

  • Conference paper
  • First Online:
Security and Privacy in Digital Economy (SPDE 2020)

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 1268))

Included in the following conference series:

  • 1755 Accesses

Abstract

Authentication and authorization are the two aspects of Spring security system, and they are shortcomings. In this paper, we study the spring security mechanism and some improvements and optimizations based on JSON Web Token and RBAC model. Furthermore, a trust RBAC model is proposed, and we expounded its structure from direct trust and indirect trust. The simulation results show that the method we proposed has a good effect.

The paper is partly supported by NSFC No. 61773206, No. 61272420.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Young, T.: Ministers back web security position Author. Computing, pp. 123–143 (2008)

    Google Scholar 

  2. Messmer, E.: Major flaw in Java-based Spring Framework allows remote-code execution by attackers. Network World (Online), pp. 74–91(2013)

    Google Scholar 

  3. Wang, S.-Q., et al.: The web security password authentication based the single-block hash functio. IERI Procedia 4, 13–20 (2013)

    Google Scholar 

  4. Jánoky, L.V., et al.: An analysis on the revoking mechanisms for JSON Web Tokens. Int. J. Distrib. Sensor Netw. 14, 53–66 (2018)

    Article  Google Scholar 

  5. Hsu, F.-H., et al.: Web security in a windows system as privacy defender in private browsing mode. Multimedia Tools Appl. 74(5), 65–78 (2015). https://doi.org/10.1007/s11042-014-2003-5

    Article  Google Scholar 

  6. Moon, C.-J., et al.: Symmetric RBAC model that takes the separation of duty and role hierarchies into consideration. Comput. Secur. 23(2), 85–99 (2003)

    Google Scholar 

  7. Yang, Z., et al.: Model of domain based RBAC and supporting technologies. J. Comput. 8(5), 74–90 (2013)

    Article  Google Scholar 

  8. Kim, K., Lee, K.: Real-time processing of spatial attribute information for mobile web based on standard web framework and HTML5. Spatial Inf. Res. 24(2), 93–101 (2016). https://doi.org/10.1007/s41324-016-0011-4

    Article  Google Scholar 

  9. Ghafoorian, M., et al.: A thorough trust and reputation based RBAC model for secure data storage in the cloud. IEEE Trans. Parallel Distrib. Syst. 30(4), 778–788 (2019)

    Article  Google Scholar 

  10. Zheng, H.: Design and implementation of business process driven fine-grained authority control system. Shandong University (2017)

    Google Scholar 

  11. Kirda, E., et al.: Client-side cross-site scripting protection. Comput. Secur. 28(7), 65–71 (2009)

    Article  Google Scholar 

  12. Liang, L.: Design and implementation of mobile application management system based on RBAC security model. University of Electronic Science and Technology (2016)

    Google Scholar 

  13. Pan, N., et al.: An efficiency approach for RBAC reconfiguration with minimal roles and perturbation. Concurr. Comput.: Pract. Exp. 30(11), 177–185 (2018)

    Article  MathSciNet  Google Scholar 

Download references

Acknowledgements

This research was partly supported by NSFC No. 61773206, No. 61272420.

Author information

Authors and Affiliations

  1. School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, 210094, China

    Gongxuan Zhang, Mingyue Zhang & Xinyi Fan

Authors
  1. Gongxuan Zhang
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Mingyue Zhang
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Xinyi Fan
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Gongxuan Zhang .

Editor information

Editors and Affiliations

  1. University of Technology Sydney, Sydney, NSW, Australia

    Shui Yu

  2. IBM Zurich Research Laboratory, Zurich, Switzerland

    Peter Mueller

  3. Ningbo University, Ningbo, China

    Jiangbo Qian

Rights and permissions

Reprints and permissions

Copyright information

© 2020 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Zhang, G., Zhang, M., Fan, X. (2020). Improvements Based on JWT and RBAC for Spring Security Framework. In: Yu, S., Mueller, P., Qian, J. (eds) Security and Privacy in Digital Economy. SPDE 2020. Communications in Computer and Information Science, vol 1268. Springer, Singapore. https://doi.org/10.1007/978-981-15-9129-7_9

Download citation

  • DOI: https://doi.org/10.1007/978-981-15-9129-7_9

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-15-9128-0

  • Online ISBN: 978-981-15-9129-7

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation