# Design of a Trusted Content Authorization Security Framework for Social Media
## 3 SecToken Framework  
Considering the multimodal characteristics of content published on social media, this study covers text, audio, and video information. It aims to extract a summary of users' posts on social media. Firstly, a network security model based on network security technology and deep learning is constructed; its overall framework is shown in Figure 1.  
In the initial stage of the model, access tokens are obtained by adopting the OAuth2.0 [18] authorization code mechanism, and the OpenID Connect (OIDC) authentication process is executed in the authorization server. After completing biometric double authentication, the system obtains the user's basic identity information. Subsequently, the multimodal content to be published is extracted at the identity management layer, and the user's current timestamp, address label, and network IP address information are collected simultaneously. This real-time and identity information is packaged together to form a user token and digital signatures are performed on it. By verifying the digital certificate of the user token, it can be determined whether the user themself publishes the content and whether it has been tampered with during the transmission process on the platform. Since the user token contains the user's identity information, current geographical location, network IP address, and the summary of published information, it is more secure than a single identity information binding method. Therefore, this security mechanism can ensure that the content posted on the platform truly reflects the intention of the content publisher.  
To achieve fine-grained authorization and access process separation, as well as the function of authorizing multiple accesses at once, this paper develops a multi-factor digital token representing data user access rights based on the data structure of JWT (JSON Web Tokens) for access control. The token is called the user token, and its structure is shown in Table 1.  
The user token designed in this paper contains three fields: Header, Payload, and Sign. In the Header, the token type is JWT, and the signing algorithm uses HS256. The Payload field includes four parts:  
* UserIss (publisher).
* Sub (content topic and abstract).
* Exp (Token life cycle).
* Situation (publisher timestamp, address label, network IP information).  
In the Sign field, the Base64 encoded Header and Payload are signed with the secret key stored on the server side using an encryption algorithm. The private key is securely stored on the server side. This design provides a certain degree of security, verifies the integrity and authenticity of the token through the signing mechanism, and can be used for information transmission, authentication, and authorization scenarios. At the same time, it is necessary to ensure the secure storage of the secret key and adopt reliable encryption algorithms to ensure the security of the token.  
\begin{table}
\begin{tabular}{c l l} \hline \hline
**Field** & **Name** & **Description** \\ \hline \multirow{2}{*}{Header} & type & Parameter type \\  & alg & Signature algorithm \\  & userIss & Issuer \\  & sub & Abstract \\  & Exp & Expiration date \\  & situation & Time stamp, address label, network IP \\ Sign & secret & Use base64 encoding and add encryption key storage to the server. \\ \hline \hline \end{tabular}
\end{table}
Table 1: User token structure.  
Figure 1: Layered structure of SecToken security framework.