Abstract: Most of the current technologies of access control on the Web can not satisfy all of the requirements of enterprise wide users. In this paper, a new technology is presented to implement the RBAC on the Web source by designing the secure cookies . At the same time, the creation of secure cookies , its verification, and the implementation of RBAC on the Web are also illustrated respectively. Finally, the conclusion is given and the problems are pointed out, which should be resolved in further research.