【摘要】 随着电子办公的普及与电子商务的应用，数据安全问题频繁发生，人们对数据安全的要求也越来越高。该文从电子办公中常见的安全问题出发，采用PKI密码体系，使用数字证书确保用户唯一身份，JWT用作携带和传递用户身份信息，将签名验证和MAC一同使用保证数据完整性和真实性。在登录安全和传输安全这两个方面，提出一种可靠性高与安全性兼顾的方法，能够有效保障电子办公中的数据安全。更多还原

【Abstract】 With the popularization of electronic office and the application of electronic commerce, data security problems occur frequently, people’s requirements for data security are increasingly high. Based on the common security problems in electronic office,this paper adopts PKI password system and uses digital certificates to ensure the unique identity of users. JWT is used to carry and transmit user identity information. Signature verification and MAC are used together to ensure the integrity and authenticity of data.In the two aspects of login security and transmission security, a method with high reliability and security is proposed, which can effectively guarantee the data security in electronic office.更多还原