An identity protocol model aimed to improve the Kerberos protocol is put forward to provide a scheme of database security from client application program to application server.