Method and apparatus for distributed authorization using anonymous flexible certificate

The invention discloses a method and a device used for distributed authorization by using an anonymous flexible voucher. A deceptive name mechanism issues a root deceptive name to a user. The user can generate a large amount of derived deceptive names from the root deceptive name, and can acquire a resource voucher from a resource holder by using the derived deceptive names. The user can choose agroup of resource vouchers, and the flexible voucher can be generated from the group of resource vouchers; and the flexible voucher and the derived deceptive names are used for asking the resource holder for accessing to the resource that is corresponding to the group of resource vouchers. The revocation lists of all the resources can be maintained in the system; therefore, any resource voucher of any user can be revoked without affecting other resource vouchers of the user.