应用数字证书实现基于角色的访问控制  

Applying digital certificate to implement the role-based access control

作　　者：孙炜[1] 刘犇[1] 

机构地区：[1]北京印刷学院计算机科学系,北京102600

出　　处：《北京印刷学院学报》2005年第3期28-31,共4页Journal of Beijing Institute of Graphic Communication

摘　　要：基于HTTP的Web应用其局限性表现在如下3个方面:1)明文传输信息,不适宜传输敏感信息;2)认证手段太简单;3)没有规范的授权访问模型。设计了一个基于角色的访问控制系统,该系统以PKI体系中的X.509数字证书为基础,能够在客户机与Web服务器之间建立要求双向验证的安全的SSL连接,并根据用户身份授予对服务器的资源访问权限,从而解决了上述问题。The pitfalls of Web applications based on HTTP include： 1）transferring plaintext which is unsuitable for critical information; 2） primitive authentication methods do not guarantee security; 3） lack of a formal authorization model. The paper describes a role-based access control system that uses X. 509 certificates as access tokens. When a client requests a connection to the server over ssg, the system would verify both of their certificates. After connections are established, the server grants the clients according to their certificates. The system solves the problems mentioned above.

关 键 词：X.509数字证书 SSL 基于角色的访问控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]