对Web应用中涉及信息安全的操作进行了讨论，设计了中间件层次构架，并在此基础上使用了JavaBeans与安全Cookie技术实现了安全中间件，从而通过硬件设备提高Web应用的效率及降低了开发难度。最后对基于PMI系统，通过RBAC对权限进行控制的扩展进行了讨论。

This paper discusses the secure operations in the web applications, and designs a framework of middleware. The paper implements the security middleware based on the “JavaBeans” and “Secure Cookie” technology. The middleware improves the efficiency of the web applications through hardware, and reduces the difficulty of development. In the end, the paper discusses the extension based on PMI system and RBAC to control the privilege.