Abstract: To enhance a system's abilities to resist counterfeit attack and active attack, an improved doubled scheme of authentication and access control is proposed. In this scheme, authentication and access control are implemented as a whole module, and each user's private key is unknown to system, the authentication information is used not only to verify the user's legitimacy, but also to compute its privilege to operate files.