Using attribute certificate to design role-based access control

Public key infrastructure (PKI), privilege management infrastructure (PMI) and role based access control (RBAC) are well-established approaches to ease the management of secure systems and to enable secure distributed systems. We elaborate on using the RBAC approach for its administrative advantages combined with authentication based on public key certificates (PKCs) and authorization based on attributes certificates (ACs). In particular, we concentrate on how they can be integrated to support the authentication and authorization model in CERNET setting.