為了實(shí)現(xiàn)對(duì)共享資源的合理使用，身份認(rèn)證和訪問控制都是必不可少的環(huán)節(jié)。漸已成
熟的PKI和PMI技術(shù)，為身份認(rèn)證和權(quán)限管理提供了完整成熟的解決方案。XML由于其自身的優(yōu)點(diǎn)，可以作為訪問控制的表達(dá)形式,使得系統(tǒng)具有良好的靈活性和可操作性。本文討論了在基于B/S的系統(tǒng)中，利用PKI和XML技術(shù)進(jìn)行身份認(rèn)證和訪問控制時(shí)要解決的一些問題，同時(shí)給出了通用的設(shè)計(jì)模型和具體的實(shí)現(xiàn)。
關(guān)鍵詞：公鑰證書；擴(kuò)展標(biāo)記語言；角色；訪問控制
Research on Deployment of Public Key Certificate in B/S Based Applications
LIU Jian LI Da-xing(Network Information Safety Institute of Shandong University, Jinan China 250100) Abstract: In B/S Based Applications, authentication and authorization are both necessary for the purpose of protection the resources. The technology of PKI and PMI provides matured solution for this. XML can be used in access control, which brings good flexibility and operation. Some problems are discussed which can arise in circumstance of using PKI and XML to achieve safety.
Keywords: public key certificate；XML；role；access control