The platform ofsecure application based on b / s structure emerges as the times require . it has three main part : security agent client ( sac ) , security proxy server ( sps ) and certificate authority server ( cas ) . security socket layer ( ssl ) protocol is extended between tcp / ip and http to form a security channel to make those three parts be a full and rigorous security system . in addition , many cryptography algorithms are applied in the system to protect web application 基于b s架构的应用安全平台应运而生，它包括安全代理客户端( sac ， securityagentclient ) 、安全代理服务器( sps ， securityproxyserver ) 、 ca服务器( cas ， certificateauthorityserver )三个组成部分，在传统的tcp ip协议和http协议之间通过扩展ssl ( securitysocketlayer )协议形成了一条安全通道，组成了一个完整的、严密的安全体系，并采用密码学中的多种方法，保护web应用安全。
The paper first introduces related knowledge about the platform ofsecure application based on b / s structure which includes protocols and cryptography algorithms ; secondly , introduces the function of components of the platform and how to implement them , particularly of the section that author developed ( htttp interface module , digitalsign module , sac main module and log module ) . in that section , the author describes how to use cryptography algorithms and application protocols to make the message carried by application protocols are absolutely security ; and how to use ssl protocol to build a security channel between sac and sps 其次介绍了平台组成部分的功能及具体实现，着重介绍了作者所开发的模块(包括http接口模块、数字签名模块、安全代理客户端主模块和日志模块) ，其中详细描述了如何将密码学算法与应用协议相结合，使得在应用协议中所传输的信息是绝对安全的；如何利用ssl协议在安全代理客户端和安全代理服务器间建立安全通道。
The database security communication system includes the model of security channel , establishing the security channel realization and improving the rate of translating , the control of accessing of database ; including the security protocol , the algorithm of encrypt and parsing of database technology . the system have especially compatibility and it is a good reference to empolder security system under different operate system 数据库安全通信系统包含安全通道模型的建立、安全通道的实现及性能调优、数据库访问的权限控制；包含安全协议的选择，加密解密的算法，网络通信和数据库的语法分析等技术。数据库安全通信系统结合带ic卡读写器的安控电脑及数据加解密技术、认证技术、网络传输等技术，实现在大型异构系统中数据库安全通信。
According to some kinds of existed attacking methods that are aimed at the web system , the article discusses the feasibility to implement secure transmission tunnel on every layer in tcp / ip protocol , and the related secure protocol standard . and focusing on cryptography , the paper lucubrates the technology of secure transmission of information such as data encryption , digital signature , identity authentication and data integrality technology 本文针对web系统中信息传输所面临的安全威胁，从保障网络信息安全传输的角度，系统研究了tcp ip各个层次上实现安全通道的可行性及相关的安全协议标准，围绕密码体制，对数据加密、数字签名、身份认证、数据完整性控制等信息安全传输技术进行了深入的探讨。
