為了實現對共享資源的合理使用，身份認證和訪問控制都是必不可少的環節。漸已成
熟的PKI和PMI技術，為身份認證和權限管理提供了完整成熟的解決方案。XML由于其自身的優點，可以作為訪問控制的表達形式,使得系統具有良好的靈活性和可操作性。本文討論了在基于B/S的系統中，利用PKI和XML技術進行身份認證和訪問控制時要解決的一些問題，同時給出了通用的設計模型和具體的實現。
關鍵詞：公鑰證書；擴展標記語言；角色；訪問控制
Research on Deployment of Public Key Certificate in B/S Based Applications
LIU Jian LI Da-xing(Network Information Safety Institute of Shandong University, Jinan China 250100) Abstract: In B/S Based Applications, authentication and authorization are both necessary for the purpose of protection the resources. The technology of PKI and PMI provides matured solution for this. XML can be used in access control, which brings good flexibility and operation. Some problems are discussed which can arise in circumstance of using PKI and XML to achieve safety.
Keywords: public key certificate；XML；role；access control