| With the development of education and the expanding of teaching scale. universities have designed office automation systems which meet their respective characteristics. However. due to the technical or economic restrictions, office automation systems are often convenient but not completely safe. thus a lot of security risks are caused.In this paper, aiming at the actual situation of Nanchang University Gongqing College, the office automation systems are designed from user authentication and access control aspects, using digital certificate technology and role-based access control technology. The main findings of the paper are:1.The use of digital certificate based authentication, certificate stored in the U disk, change the identity of the university office system authentication, improve the security of the system..2.According to the role based access control model, the access control system is designed, and the reasonable access control for the office system is designed.3.Comparison of SQL Server database and Oracle database security, expounds the reasons the use of Oracle database, and puts forward some security strategies to resolve the security problems existing in the Oracle database.Through the study on security of office automation system in an college, user identity theft caused by password leaks can be prevented, and problems caused by the overly complex authorization system and the unsafe database storage can be solved. Therefore, the security of office automation system can be improved. |