DESIGNING A SECURE AUTHORIZATION SYSTEM FOR AN EVENT PROBABILITY PREDICTION APPLICATION
Authors:
1.
Voronezh State University of Forestry and Technologies named after G.F. Morozov
2.
Voronezh State University of Forestry and Technologies named after G.F. Morozov
(Departtment of Computer Science and Information Systems, assistant professor)
Voronezh, Voronezh, Russian Federation
Voronezh, Voronezh, Russian Federation
Type:
Сonference article
Published:
14.04.2025
Subject area:
004.9
Language:
Russian
Keywords:
data security, authorization system, JSON Web Token (JWT), event prediction, data protection, cryptography, cybersecurity, access tokens
Abstract (English):
This article examines the main approaches and methods for designing a secure authorization system for applications that involve the processing and analysis of sensitive information. The primary focus is on designing a secure authorization system based on JWT for an application that predicts the likelihood of various events. The principles of JWT operation, its advantages and vulnerabilities, as well as recommendations for its secure integration into the system, are discussed. Methods for protecting tokens from forgery, key rotation, the use of cryptographic algorithms, and the implementation of multi-factor authentication to enhance security are also considered.
This article examines the main approaches and methods for designing a secure authorization system for applications that involve the processing and analysis of sensitive information. The primary focus is on designing a secure authorization system based on JWT for an application that predicts the likelihood of various events. The principles of JWT operation, its advantages and vulnerabilities, as well as recommendations for its secure integration into the system, are discussed. Methods for protecting tokens from forgery, key rotation, the use of cryptographic algorithms, and the implementation of multi-factor authentication to enhance security are also considered.
Keywords:
data security, authorization system, JSON Web Token (JWT), event prediction, data protection, cryptography, cybersecurity, access tokens
data security, authorization system, JSON Web Token (JWT), event prediction, data protection, cryptography, cybersecurity, access tokens
1. Oficial'nyy sayt tehnologii JWT. – URL: https://jwt.io/.
2. RFC 7519. JSON Web Token (JWT). – URL: https://tools.ietf.org/html/rfc7519.
3. Rihter, Dzh. CLR via C#. Programmirovanie na platforme Microsoft .NET Framework 4.5 na yazyke C# / Dzh. Rihter. – SPb.: Piter, 2019. – 896 c.
4. Bederdinova, O. I. Programmirovanie na yazykah vysokogo urovnya : ucheb. posobie / O. I. Bederdinova, T. A. Mineeva, Yu. A. Vodovozova. – Moskva : INFRA-M, 2019.– 159 s. – URL: https://znanium.com/catalog/product/1044396. – Rezhim dostupa: po podpiske. EDN: https://elibrary.ru/AELIMF
5. Lerman, J. Programming Entity Framework: Code First/ J. Lerman, R. Miller; O’Reilly Media, Inc, 2011. – 177 p. – ISBN 978-1449312947.
