Development of an approach to ensuring information security in web-based information systems when transferring data using the Web Cryptography API interface

M.V. Stupina

Abstract. The aim of the research is to formulate general principles for ensuring information security in web-oriented information systems. The paper describes the main concepts of the Web Cryptography API interface, as well as presents practical aspects of using cryptographic methods to ensure data security in web-oriented information systems. The proposed approach, based on the introduction of a secure system for generating and storing users private keys through the use of the asynchronous ECDSA encryption algorithm via the Web Cryptography API interface, combined with encrypting private keys with passphrases and additional user authentication, allows a high level of protection of private keys from unauthorized access.

Keywords: Web Cryptography API, cryptography, electronic signature, electronic document management, ECDSA

For citation. Stupina M.V. Development of an approach to ensuring information security in web-based information systems when transferring data using the Web Cryptography API interface. News of the Kabardino-Balkarian Scientific Center of RAS. 2024. Vol. 26. No. 1. Pp. 39–47. DOI: 10.35330/1991-6639-2024-26-1-39-47