A new role-based access control model using attribute certificate

Traditional role based access control (RBAC) systems perform in low security levels yet cost much in management and inter-operation under a complex network environment. We present a new RBAC model using attribute certificate (AC-RBAC), which makes privilege information independent from public key certificates and constructs role-permission attribute certificates and user-role attribute certificates to authorization. The model implements user verification and RBAC with PKI and PMI to enhance system resource security and supplies an effective, manage easy and inter-operation nice scheme for access control in distributed environment.