数字证书营运中的基于任务的访问控制模型

The Task-based Access Control Model for Service of Certificate

传统的数字证书营运中,存在从证书目录服务器申请数字证书不经检查,和获得其他用户的数字证书后,发秘密信函不受安全级限制的安全问题。提出了一个数字证书营运中的基于任务的访问控制模型,解决了数字证书营运中的安全问题。

The use of certificate has two secure-problems,first,the certificate server doesn't check-up certificate application,second,the user once has someone's certificate,he sends a secret letter to the one doesn't restrict by security-level. In this paper,we develop a task-based access control model for the service of certificate to solve those secure-problems.