身份认证和访问控制是Internet应用的重要方面,传统的实施方案通常针对于特定的应用,也不能用于普适计算环境下的移动终端。文中提出了一个新的访问控制模型,利用了由IETF定义的主机标识协议(HIP),并扩展了HIP基本交换过程来实现对用户的认证,并通过客户端主机标识和用户标识的绑定认证来建立主机和用户的绑定关系,从而实现对用户访问请求的判断。 Identity authentication and access control are important aspects of Internet applications. Conventional implementations are usually targeted to specific applications and not to mobile terminals in pervasive computing environments. In this paper, a new access control model is proposed, which utilizes the host identity protocol (HIP) defined by IETF and extends the basic HIP exchange process to authenticate users. The binding authentication between client host identity and user identity To establish the host and the user’s binding relationship, in order to achieve the user’s access request judgment.