【摘要】 提出了一种改进的双重认证访问控制方案 ,将认证和访问控制在一个请求模块中完成 ,且用户的私钥对系统保密。用户认证信息不仅用来认证需访问系统的请求用户的合法性 ,而且用来计算对所需访问文件的存取权 ,从而提高了系统抵抗假冒攻击和主动攻击的能力更多还原

【Abstract】 To enhance a system’s abilities to resist counterfeit attack and active attack, an improved doubled scheme of authentication and access control is proposed. In this scheme, authentication and access control are implemented as a whole module, and each user’s private key is unknown to system, the authentication information is used not only to verify the user’s legitimacy, but also to compute its privilege to operate files.更多还原