Attribute Certificate-based Access Control Model Study

In many networks, Information Security is an important problem. With the rapid development of the Internet and electronic technology, it keeps more and more import thing for protecting the information security. It is an import technology that is Access Control that keeps the unauthorized users from the information security. At the same time, it is an important part for the power management system. The research on access control models and software implementation is of great academic and practical significance.This thesis is organized in three parts. In the first part, relevant theories are introduced, and fully introduce their implementation mechanism as well as PKI. In the second part, a access control system based an attribute certificate are presented, including the integral structure, the ANS.1 syntax of attribute certificate, power and module of the system, the extended attribute certificate, and the judgment of access control , In the last part, implement the judgment of access control based attribute certificate including power, Which is after users present access request , the ADF depends on access control policy and user's attribute certificate in order to judge the user gaining access system resource and analyze some appearing questions in the system.The ADF is a independent process in this thesis, and it is independent of a specific application. The ADF can present a unitized authorization and access control. At the same time access receipt is in order to increase efficiency and security validity mechanism. So this system can increase security and development efficiency, and relieve administrator's work.