Role-Based Access Control With X.509 Attribute Certificates
Role-Based Access Control With X.509 Attribute Certificates
复制标题
使用 X.509 属性证书的基于角色的访问控制
作者：
D. Chadwick;S. Otenko;E. Ball
我们采用了标准的X.509权限管理基础设施，以建立一个有效的基于角色的信任管理系统，在该系统中，角色分配可以广泛分布在组织之间，基于XML的本地策略确定信任哪些角色以及授予哪些权限。一个简单的Java API可以让目标应用程序轻松地合并系统。Permis API已经在欧洲四个不同的应用中证明了其通用性。
We adapted the standard X.509 privilege management infrastructure to build an efficient role-based trust management system in which role assignments can be widely distributed among organizations, and an XML-based local policy determines which roles to trust and which privileges to grant. A simple Java API lets target applications easily incorporate the system. The Permis API has already proven its general utility in four very different applications throughout Europe.