一种基于扩展X.509认证和角色访问控制的安全策略

A Security Strategy Based Extending X. 509 Authentication and Role-based Access Control

1.引言 随着Internet技术的发展,电子商务等新的基于Web的应用日益普及,安全问题变得至关重要.常用的弱身份鉴别如口令已经不能满足网络安全的需要,基于公共密钥体系(Public key infrastructure,PKI)的X.509已被广泛用于安全电子交易(SET)、安全套接字层(SSL)、安全/多用途邮件扩展(S/MIME)、IP安全(IPSec)等开放分布式环境,用以实现强身份鉴别.基于角色的访问控制(Role Based Access Confrol:RBAC)可以实现用户与访问权限的逻辑分离,提供强大而灵活的安全控制,因此将X.509认证标准与基于角色的访问控制(Role Based Access Control:RBAC)的安全策略相结合,并对X.509标准进行扩展,可以有效地解决基于网络的大规模应用系统所面临的日益复杂的安全问题.

The X. 509 authentication and Role-based access control are analyzed and combined in this paper, then X. 509 authentication is extended and described in detail. The concrete actualizing process of security strategy based on X. 509 authentication and Role-based access control is also expatiated-