文章对短期证书方案在安全性、灵活性和证书失效管理方面存在的问题进行了分析，提出了一种改进方案，用rrrrrrrrrn固定证书体现员工角色及其固定职责，在Ｉｎｔｒａｎｅｔ外使用临时证书提高安全性，利用目录服务进行证书失效和访问控制管理。 This paper analyzes the shortcomings of the short-term certificate scheme in terms of security, flexibility and certificate invalidation management, and proposes an improved scheme, n Fixed certificates reflect the role of employees and their fixed responsibilities, use of temporary certificates outside the Intranet to improve security, the use of directory services for certificate invalidation and access control management.