基于属性证书的PMI授权管理模型应用研究  

Application Research on Authorization Management Model of PMI Based on Attribute Certificate

作　　者：程安潮[1] 余奇[1] 姚馨[1] 叶酉荪[1] 

机构地区：[1]通信指挥学院通信指挥系,武汉430010

出　　处：《计算机工程》2006年第8期162-164,共3页Computer Engineering

摘　　要：公钥基础设施PKI技术通过方便灵活的数字证书与密钥管理机制,解决了可信的身份问题。但是,仅仅依靠PKI机制无法完全满足大型分布式网络环境下授权管理和基于角色的访问控制等需求。该文在深入研究PMI及属性证书的基础上,提出了一个基于属性证书的PMI授权管理模型,并对模型的具体实现进行了研究。By means of flexible digital certificate and key management mechanism, public key infrastncture solves the problem of trusted identity. However, merely in dependent of PKI can not totally fulfill the requirements of distributed authorization management and role-based access control. With deeply research on PMI and attribute certificate, an authorization management model of PMI which is based on attribute certificate is put forward. And the key techniques to implement it are discussed.

关 键 词：特权管理基础设施 角色 属性证书 授权 公钥证书 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]