1、華中科技大學碩士學位論文權限管理基礎設施機制研究姓名：井營申請學位級別：碩士專業(yè)：計算機軟件與理論指導教師：洪帆20060510華中科技大學碩士學位論文IIAbstractRecentlyprivilegemanagementdevelopsquicklyasthefieldofsecurity.TheresearchofPrivilegeManagementInfrastructurebasedonPublicKeyInfrastru

2、ctureisthefocusofapplicationresearchnow.ThepurposeofimplementingPKIistomanageprivatekeyimplementidentityvalidationofuserbypublickeyalgithm.TheidentityvalidationthatpassedPKIsystemonlymakescertainuseridentitybutitcan’tdis

3、tinguishprivilegeofeachone.ItisoneofthecausesofPMI.ActuallyPMIprovidesanewprotectiveinfrastructureofinfmationresource.Itcanauthizeusersvalidatedsystemically.ThereisusuallyabottleneckinvalidatinguserbyPMI，whenthenumberofu

4、serishuge.AuthizationpolicyofPMIiseasilyinfluencedbyactualapplication.Thereisnounifmstard.Byamendingthefmatofattributecertificateshtperiodofvalidityattributecertificatelongperiodofvalidityattributecertificatearecombined.

5、Thefmatofshtperiodofvalidityattributecertificateissimplethistypeattributecertificateisinexchangewithvalidatedserverbypushmode.Thelongperiodofvalidityattributecertificateisinexchangewithvalidatedserverbypullmode.Sothesyst

6、emreducesbottleneckofvalidatingattributecertificatehugelyassuressecuritywhenitdealswithlotsofusersaccessing.BypresentingauthizationpolicymodelofRBACauthizationmanagementofPMIisindependentofactualapplication.Soauthization

7、policymodelcanbewidelyusedindifferentapplications.WithsomeknowledgeofelectroniccommerceelectronicpaymentsystemispresentedbasedontheimprovedattributecertificateauthizationpolicymodelofRBAC.Thesystemnotonlysolvesproblemofb

8、ottleneckinpaymentproblemsofEcashthatcanbeusedconstantlyfgedtamperedeasilybutalsosolvesproblemofbottleneckfvalidatinguserswhowillbeauthizedproblemofsecurity.KeyWds:PrivilegeManagementInfrastructurePublicKeyInfrastructure