Design and completion of digital certificate with authorization based on PKI

In this paper, a design and establishment of certification authority is completed successfully, and the functions of digital certificate are extended through describing and encoding the role attribute extension of particular certificate using ASN.1. When issuing a certificate for user, it is appended to user's certificate that some access privilege coming from RBAC database. Consequently, differing from general certificate, this special certificate cannot only be used to identify the holder, but also can control his access to some object resources. At last, the prospect of digital certificate with authorization based on PKI (public key infrastructure) is revealed.