以可编程交换机方案 [1]为基础，以主动网络的节点安全为出发点，设计了一种主动网安全授权机制。设计要点包括划分资源对象，定义对象操作集，建立层次化授权与用户管理结构，实现权限分级与授权自动委托以及利用加密、摘要与签名算法保证授权的正确性和完整性。 Based on the programmable switch scheme [1], the active network security is taken as the starting point to design an active network security authorization mechanism. Design points include the division of resource objects, the definition of the object operation set, the establishment of hierarchical authorization and user management structure, to achieve the authorization of authorization and authorization automatically entrusted, and the use of encryption, digest and signature algorithm to ensure the correctness and integrity.