This paper discusses the secure operations in the web applications, and designs a framework of middleware. The paper implements the security middleware based on the “JavaBeans” and “Secure Cookie” technology. The middleware improves the efficiency of the web applications through hardware, and reduces the difficulty of development. In the end, the paper discusses the extension based on PMI system and RBAC to control the privilege.