摘要： 给出了用cookie实现用户认证的步骤，并详细讨论了可用的安全cookie设计方法。对同一域中不同服务器间加密cookie的密钥的管理问题，除传统密钥管理方案外，提出了cookie集中管理的解决方案。最后，应用cookie将Web的安全实现扩展到访问控制。

关键词: Web, Cookie, 安全技术

Abstract: Here the procedures of using cookie to implement Web authentication are given. The methods on designing secure cookies are discussed in detail. Beside the traditional key management method, a new method called centralized cookie management is given out to manage the HMAC keys among servers in the same domain. Finally, the method on how to implement Web access control is presented.

中图分类号: 

• TP393.08