应用于Web访问控制的PMI的一种构建方案*

随着电子商务和电子政务在我国的发展，网络日益显示出其无可替代的地位和作用，身份识别及授权访问问题也日益显著。在这种情况下，在PKI的基础上，发展起来了一种新的信息安全基础设施——权限管理基础设施PMI。简要介绍了PMI的功能及其基本构架，详细论述了一种应用于网络的基于角色访问的PMI权限系统RBAC/Web系统的设计方案，并对RBAC/Web系统的安全性进行了进一步的分析。

A Design Scheme of PMI Applied in Web Access Control

With the development of E-business and E-government in our country,there is nothing that can take place of the status and effect of the network.At the same time,to solve the new problem of identity authentication and privilege control become more and more important.Under this condition,as a new kind of information security infrastructure,Privilege Management Infrastructure (PMI) is developed.The function and framework of PMI is introduced.One design scheme of PMI system RBAC/Web which is applied in role-based access control in Web is described in detail.Furthermore,the security of the RBAC/Web system is analyzed.