Abstract: In order to improve the security of Web system, the author makes use of an example of chinese boxing management information system to present a kind of scheme. The scheme includes two-layer identity authentication, advanced role-based access control, and the special backup and restoration of database.