While authentication can be provided by an existing PKI (Public Key Infrastructure) system, access control needs implementation of administrative function and access decision function, based on the access control policy and model selected.

• 身份认证可以采用现有的公开密钥基础设施(Public Key Infrastructure, PKI)来完成。 访问控制就要根据采用的访问控制策略和访问控制模型,实现对系统资源和用户安全属性的统一管理,并在此基础之上提供用户到资源的访问控制决策功能。