关键词: 公共密钥基础设施, 权限管理基础设施, 属性证书, 条件化的基于角色的访问控制, 权限管理

Abstract: Identity authentication and privilege management are critical to Web security. A Privilege Management Infrastructure（PMI）system based on Public Key Infrastructure（PKI）technology, JSJYY-PMI, was developed. A new PMI access control model based on attribute certificate and conditioned Role Based Access Control（RBAC）was put forward. Two submission fashions of attribute certificate were provided in the system, which were the "PUSH" fashion and the "PULL" fashion. Moreover, the realization and an application example of the system were provided in detail. With the application of the system, JSJYY-PMI provided a better resolution and implementation. It would satisfy large applications (millions of users).

Key words: public key infrastructure, privilege management infrastructure, attribute certificate, conditioned role based access controlt