一种基于属性证书的分布式访问控制模型

在分布式环境中通常需要协同合作和共享资源，RBAC是安全系统中保护资源的有效手段之一。基于对面向对象RBAC模型的分析，引入PMI属性证书，提出一种面向对象的分布式多域访问控制模型AC-ORBAC，给出形式化描述，该模型通过属性证书实现角色授权访问控制，使对访问控制的管理更为灵活高效，并对职责分离和域问访问进行了讨论。结合PKI．给出了一个实现原型。

Implement Multi-domain Role-based Access Control via Attribute Certificate

In the distributed environment, users would like to communicate with each other and share resources. Role-based access control is one of the effective means to protect resources in a security system. Based on analyzing the object-oriented RBAC model, and introducing PMI attribute certificate, an object-oriented RBAC model based on it (AC-ORBAC) is proposed for multiple domains by using attribute certificate. The access control is more flexible, and also the separation of duty is discussed. Moreover, an implementation with PKI is given.