Implementation of JSON Web Token on Authentication with HMAC SHA-256 Algorithm

Ficry Cahya Ramdani, Alam Rahmatulloh, Rahmi Nur Shofa

Abstract


The rapid growth of information technology is influenced by globalization to accelerate access to information. This creates new problems, as differences must produce relevant information. Of course, system integration will be required. Web Service is a system integration solution that does not consider the platform, architecture, or programming language used in different sources. The security of web service is considered not yet implemented. The JSON Web Token (JWT) technology is an authentication mechanism for web service and will have a significant impact on data security. This implementation optimizes JWT security with the HMAC SHA-256 algorithm. Testing is conducted on two information systems by comparing the performance size when JWT technology is applied to Tim Bebersih Masjid Information System. The results show that the implementation of JWT on Windows Server 2019 (VM) is 462.8 ms with an average data size of 8.59 kb. Testing on the Windows 10 operating system obtained an average speed of 216.25 ms with an average data size of 8.59 kb. The result on Windows Server 2019 (VM) from the JWT performance test itself obtained the highest result, due to the use of virtual machine which is considered to consume a lot of RAM, resulting in performance that is 2 times higher.

Keywords: Algorithm, HMAC SHA-256, JSON Web Token, Web Service, Virtual Machine


Full Text:

PDF

References


P. Hendrarso, “Meningkatkan Kualitas Sumber Daya Manusia di Perguruan Tinggi menuju Era VUCA : Studi Fenomenologi Pada Perguruan Tinggi Swasta,” Prosiding Seminar Stiami, vol. 7, no. 2, pp. 1–11, 2020.

A. Hidayah, “Tantangan Kaum Freelancer dan Pemerintah Indonesia di Era Perkembangan Teknologi Digital,” RESIPROKAL: Jurnal Riset Sosiologi Progresif Aktual, vol. 3, no. 1, pp. 92–104, 2021. DOI: 10.29303/resiprokal.v3i1.47

Darmansah and Raswini, “Perancangan Sistem Informasi Pengelolaan Data Pedagang Menggunakan Metode Prototype pada Pasar Wage,” Jurnal Sains Komputer & Informatika (J-SAKTI), vol. 6, no. 1, pp. 340–350, 2022.

J. Lorasponelsar, A. Zuhdi, and G. B. Santoso, “Sistem Informasi Penelitian Berbasis Cms Wordpress Studi Kasus Lemlit Trisakti Pada Prodi Fti,” Prosiding Seminar Nasional Cendekiawan, vol. 0, no. 0, pp. 1-44.1–1.44.6, 2019.

G. Y. Gustiegan and Painem, “IMPLEMENTASI WEB SERVICE RESTFUL DENGAN AUTENTIKASI JSON WEB TOKEN DAN ALGORITMA KRIPTOGRAFI AES-256 UNTUK APLIKASI PEMINJAMAN LABORATORIUM BERBASIS MOBILE PADA UNIVERSITAS BUDI LUHUR,” Bit (Fakultas Teknologi Informasi Universitas Budi Luhur), vol. 19, no. 1, pp. 9–16, 2022.

A. Rahmatulloh, R. Gunawan, and F. M. S. M. S. Nursuwars, “Performance comparison of signed algorithms on JSON Web Token,” IOP Conference Series: Materials Science and Engineering, vol. 550, no. 1, p. 012023, Aug. 2019 [Online]. DOI: 10.1088/1757-899X/550/1/012023

G. W. Manueke, S. Oei, and W. W. Mamahit, “Implementasi Web Service pada Aplikasi Pemeriksaan Berkas Kelengkapan Penerbangan di Bandara Sam Ratulangi Manado Berbasis Web dan Android,” Global Science, vol. 2, no. 2, pp. 54–67, 2021.

N. Adianson, Y. Yupianti, and A. Kurniawan, “Analisa Perbandingan Performansi Rsa ( Rivest Shamir Adleman ) Dan Ecc ( Elliptic Curve ) Pada Protokol Secure Socket Layer ( Ssl ),” Media Infotama, vol. 11, no. 1, pp. 71–80, 2015.

F. Ramadhani, U. Ramadhani, and L. Basit, “Combination of Hybrid Cryptography In One Time Pad (OTP) Algorithm And Keyed-Hash Message Authentication Code (HMAC) In Securing The Whatsapp Communication Application,” Journal of Computer Science, Information Technology and Telecommunication Engineering, vol. 1, no. 1, pp. 31–36, 2020. DOI: 10.30596/jcositte.v1i1.4359

R. Gunawan and A. Rahmatulloh, “JSON Web Token (JWT) untuk Authentication pada Interoperabilitas Arsitektur berbasis RESTful Web Service,” Jurnal Edukasidan Penelitian Informatika, vol. 5, no. 1, pp. 74–79, 2019.

G. A. P. Zaman, “Perancangan Dan Implementasi Web Service Sebagai Media Pertukaran Data Pada Aplikasi Permainan,” Jurnal Informatika, vol. 11, no. 2, pp. 22–30, 2017. DOI: 10.26555/jifo.v11i2.a6252

B. Adi Pranata, A. Hijriani, and A. Junaidi, “Perancangan Application Programming Interface (Api) Berbasis Web Menggunakan Gaya Arsitektur Representational State Transfer (Rest) Untuk Pengembangan Sistem Informasi Administrasi Pasien Klinik Perawatan Kulit,” Jurnal Komputasi, vol. 6, no. 1, pp. 33–42, 2018. DOI: 10.23960/komputasi.v6i1.1554

H. Herfandi, M. Julkarnain, and M. Hanif, “DESAIN DAN IMPLEMENTASI RESTful WEB SERVICES UNTUK INTEGRASI DATA DAN APLIKASI,” Jurnal Informatika Teknologi dan Sains, vol. 4, no. 1, pp. 36–41, 2022. DOI: 10.51401/jinteks.v4i1.1529

L. V. Jánoky, P. Ekler, and J. Levendovszky, “Evaluating the Performance of a Novel JWT Revocation Strategy,” Acta Cybernetica, vol. 25, no. 2, pp. 307–318, 2021. DOI: 10.14232/ACTACYB.289455

A. B. Warsito, A. Ananda, and D. Triyanjaya, “Penerapan Data JSON Untuk Mendukung Pengembangan Aplikasi Pada Perguruan Tinggi Dengan Teknik Restfull Dan Web Service,” Technomedia Journal, vol. 2, no. 1, pp. 26–36, 2017. DOI: 10.33050/tmj.v2i1.313

W. Galindra Wardhana, I. Arwani, and B. Rahayudi, “Implementasi Teknologi Restful Web Service Dalam Pengembangan Sistem Informasi Perekaman Prestasi Mahasiswa Berbasis Website (Studi Kasus: Fakultas Teknologi Pertanian Universitas Brawijaya),” Jurnal Pengembangan Teknologi Informasi dan Ilmu Komputer; Vol 4 No 2 (2020), vol. 4, no. 2, pp. 680–689, 2020.




DOI: https://doi.org/10.32520/stmsi.v12i1.2450

Article Metrics

Abstract view : 578 times
PDF - 193 times

Refbacks

  • There are currently no refbacks.


Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
https://section.iaesonline.com/akun-pro-kamboja/https://journals.uol.edu.pk/sugar-rush/http://mysimpeg.gowakab.go.id/mysimpeg/aset/https://jurnal.jsa.ikippgriptk.ac.id/plugins/https://ppid.cimahikota.go.id/assets/demo/https://journals.zetech.ac.ke/scatter-hitam/https://silasa.sarolangunkab.go.id/swal/https://sipirus.sukabumikab.go.id/storage/uploads/-/sthai/https://sipirus.sukabumikab.go.id/storage/uploads/-/stoto/https://alwasilahlilhasanah.ac.id/starlight-princess-1000/https://www.remap.ugto.mx/pages/slot-luar-negeri-winrate-tertinggi/https://waper.serdangbedagaikab.go.id/storage/sgacor/https://waper.serdangbedagaikab.go.id/public/images/qrcode/slot-dana/https://siipbang.katingankab.go.id/storage_old/maxwin/https://waper.serdangbedagaikab.go.id/public/img/cover/10k/