关键词: 分布式系统, RBAC, 代理签名, 证书

Abstract: Using attribute certificates can manage users of RBAC models in distributed system efficiently, the signature in certificate guarantees the validity of the certificate. While the entire work of validating and publishing certificates done by system manager, the task is heavy, so bring out bottleneck in large distributed application. Designed a certificate structure and its proxy publishing based on traceable proxy signature, not merely scattered the task of manager, publisher and proxy signatures can’t abuse their power, attackers can not forgery and imitation. In this way, solved the problem of manager’s efficiency, and improved the efficiency and security of RBAC system as well.

Key words: distributed system, RBAC, proxy signature, certificate