API KEY Strong Security Application Solution Based on SM9
With the rapid development of information technology,the importance of APIs in various applications and services is becoming in-creasingly prominent.However,traditional API keys have many security risks in applications.Therefore,a strong security application scheme for API KEY based on SM9 is proposed.Firstly,use SM9 to sign and verify the data;Then introduce a trusted third-party to manage user pub-lic and private key pairs,and combine them with random status codes to improve the security and reliability of API KEY;Finally,compare the security of API KEY applications with Baidu Open Platform and FOFA Network Space Surveying Platform.The experiment shows that the API KEY strong security application scheme based on SM9 has advantages such as data integrity,source reliability,resistance to leakage at-tacks,resistance to replay attacks,resistance to CSRF attacks,and resistance to brute force attacks.
API KEYSM9strong securitytrusted third partypublic and private key pairs