IMPLEMENTATION OF OPTIMIZED AUTHENTICATION AND AUTHORIZATION ALGORITHMS IN THE INTELLIGENT SYSTEM
DOI:
https://doi.org/10.28925/2663-4023.2026.35.1369Keywords:
bcrypt, HMACSHA512, authentication, authorization, JWT Access and Refresh tokensAbstract
The implementation of bcrypt and HMACSHA512 algorithms, as well as the use of JWT Access and Refresh tokens to ensure reliable authentication and authorization in the intelligent system, are proposed. The role of these algorithms in increasing the security of passwords, protecting against data forgery and providing effective access control is considered. It describes in detail the implementation process of each algorithm and their use in various scenarios. The importance of using powerful algorithms to ensure security and privacy in intelligent systems is highlighted, especially considering the growing cyber security threats. Features of creation, processing and storage of JWT Access and Refresh tokens on the server with storage of coded and hashed information in the database and in the client part of the program with storage of data in local storage and using http-only cookies are described. All the given algorithms are described with the help of formulas and conceptual diagrams, after which the software implementation of authentication and authorization in an intelligent system is given.
Downloads
References
Lee, K., & Yim, K. (2023). Analysis of key storage mechanism of asymmetric key-related functions in CNG crypto library. Applied Sciences, 13(11), 6510. https://doi.org/10.3390/app13116510
Pervan, B., Knezović, J., & Guberović, E. (2022). Energy-efficient distributed password hash computation on heterogeneous embedded system. Automatika, 63(3), 399–417. https://doi.org/10.1080/00051144.2022.2042115
Belenky, Y., et al. (2023). Carry-based differential power analysis (CDPA) and its application to attacking HMAC-SHA-2. Transactions on Cryptographic Hardware and Embedded Systems, 1–29. https://doi.org/10.46586/tches.v2023.i3.1-29
Ramdani, F. C., Rahmatulloh, A., & Shofa, R. N. (2023). Implementation of JSON web token on authentication with HMAC SHA-256 algorithm. SISTEMASI, 12(1), 194. https://doi.org/10.32520/stmsi.v12i1.2450
Abdel Hakeem, S. A., & Kim, H. (2022). Centralized threshold key generation protocol based on Shamir secret sharing and HMAC authentication. Sensors, 22(1), 331. https://doi.org/10.3390/s22010331
Hirose, S., & Shikata, J. (2023). Aggregate entity authentication identifying invalid entities with group testing. Electronics, 12(11), 2479. https://doi.org/10.3390/electronics12112479
Lalem, F., Laouid, A., Kara, M., Al-Khalidi, M., & Eleyan, A. (2023). A novel digital signature scheme for advanced asymmetric encryption techniques. Applied Sciences, 13(8), 5172. https://doi.org/10.3390/app13085172
Zgurovsky, M. Z., Yefremov, K., Gapon, S., & Pyshnograiev, I. (2023). Research of food security problems of the war-torn regions of Ukraine using geomatics methods. System Research and Information Technologies, (1), 7–22. https://doi.org/10.20535/srit.2308-8893.2023.1.01
Melnykov, S., Malezhyk, P., Gasanov, A., & Bidyuk, P. I. (2022). Methodological aspects of operative control system intellectualization for dynamic objects. System Research and Information Technologies, (4), 44–57. https://doi.org/10.20535/srit.2308-8893.2022.4.04
Pozdniakova, M. (2025). Strategy for protecting personal data in machine learning systems. Electronic Professional Scientific Journal «Cybersecurity: Education, Science, Technique», 3(31), 414–423. https://doi.org/10.28925/2663-4023.2025.31.1016
Tkachenko, K., Tkachenko, O., & Tkachenko, O. (2025). Intelligent learning systems: Transforming tabular data of educational content in the ontological model. Electronic Professional Scientific Journal «Cybersecurity: Education, Science, Technique», 3(31), 512–527. https://doi.org/10.28925/2663-4023.2025.31.1043
Zou, J., et al. (2023). Trusted access authentication technology for large-scale heterogeneous terminals in a vehicle charging network system. Electronics, 12(8), 1882. https://doi.org/10.3390/electronics12081882
Otta, S. P., Panda, S., Gupta, M., & Hota, C. (2023). A systematic survey of multi-factor authentication for cloud infrastructure. Future Internet, 15(4), 146. https://doi.org/10.3390/fi15040146
Čučko, Š., Keršič, V., & Turkanović, M. (2023). Towards a catalogue of self-sovereign identity design patterns. Applied Sciences, 13(9), 5395. https://doi.org/10.3390/app13095395
Diao, Z., & Sun, F. (2023). A deep-learning neural network approach for secure wireless communication in the surveillance of electronic health records. Processes, 11(5), 1329. https://doi.org/10.3390/pr11051329
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Тарас Батюк, Юрій Ларук
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
