中文摘要：

传统的证书系统在主动网络的安全应用中存在较大的效率损失，本文提出的代码证书机制改变了传统证书结构的认证主体，使认证主体从发布者变成代码本身，这样可以使得对不同主动协议赋予更加细致的权限，同时，由于证书主体的改变，在证书中增加了具体描述主动协议能力和资源的情况，从而在一定条件下简化授权的工作，使得代码在效率上较传统的ACL方式有很大的提高，本文给出了代码证收的设计和实现，并在网络仿真环境下进行了测试，测试结果表明，对于包含敏感操作的信包，代码证书比传统证书高出的约25%的吞吐率。

英文摘要：

Traditional certificate will lose efficiency considerablely for active network.Code certificate was put forward in the article to overcome it;code certificate changes the entity from the publisher to code itself.So active node can grant privilege to the active protocal more detailed.The change of the encity makes it possible to add the resource usage information of the protocol in the ceruficate,which makes it more effective than traditional ACL mode,too.The principle and implementation are described in the article and a simulation test was made.The simulation result shows that code ceruficate can improve efficiency about 25 percent for sonsitie operation than traditional certificate method.