该文首先介绍了几个常用的安全协议，然后提出了一种基于用户（Ｕｓｅｒｂａｓｅｄ）的ＷＷＷ客户／服务器通信安全模型。该模型由用户认证中心、静态用户访问控制表、动态用户认证控制表、维护时钟、ＣＧＩ程序等几部分组成。最后详细介绍了其实现原理。该模型很容易应用于实际中。 This paper first introduces several commonly used security protocols, and then proposes a user-based WWW-client / server communication security model. The model is composed of user authentication center, static user access control list, dynamic user authentication control list, maintenance clock and CGI program. Finally, the principle of its realization is introduced in detail. The model is easy to apply in practice.