The based-role PMI model for access control in large scale netware system

T Because of the complexity of netware and its environment, how to ensure security of large scale netware systems is a longstanding key problem. The access control is always one of the important guarantees of security of large scale netware systems. The paper introduces the general AC(attribute certificate) and the role specification AC and the role assignment AC, and discusses the role-based PMI architecture, then combines the role-based PMI architecture with the PKI architecture to present a new access control model based on role PMI. The model has advantages of flexibility, convenience, less storage space and less network consumption etc. At present, we are going to use the model in management information systems of the large scale netware to realize access control for systems.