Abstract: In order to prevent illegal users from visiting legal resource, the authors analyze the problems existing in the standard of security protocol and put forward a private key certificate contain attribute. This certificate can be deposited freely and its operation be reduced, which prevent it from being attacked and realize its secure management. The authors give the identification process realized by the certificate with the attribute of both jurisdiction and service type. This scheme has been applied to the system of computer network.