| 基于PBNM的访问控制模型的研究 |
| |
| 引用本文： | 王劲松,张毅,张岩.基于PBNM的访问控制模型的研究[J].天津理工大学学报,2007,23(4):27-29. |
| |
| 作者姓名： | 王劲松 张毅 张岩 |
| |
| 作者单位： | 天津理工大学,信息技术研究所,天津,300191 |
| |
| 基金项目： | 天津市信息化建设项目;天津市教委资助项目 |
| |
| 摘 要： | PBNM中的关键步骤是为策略建立模型并映射到目录中去.本文根据DMTF/IETF所制定的相关标准,对访问控制策略进行描述,在此基础上对描述的策略进行向目录的映射,经过统一的策略定制能保证访问控制动作在整个网络中不会引起冲突或重复.为保证策略的正确分发,还定义了策略角色及策略分发的目的接口,为访问控制策略的大规模应用提供了可能.
|
| 关 键 词： | 基于策略的网络管理 访问控制 轻量级目录访问协议 策略核心信息模型 公共信息模型 |
| 文章编号： | 1673-095X（2007）04-0027-03 |
| 收稿时间： | 2006-11-25 |
| 修稿时间： | 2006-11-25 |
Modeling access control based on PBNM |
| |
| WANG Jin-song,ZHANG Yi,ZHANG Yan.Modeling access control based on PBNM[J].Journal of Tianjin University of Technology,2007,23(4):27-29. |
| |
| Authors: | WANG Jin-song ZHANG Yi ZHANG Yan |
| |
| Institution: | Information Technology Institute, Tianjin University of Technology, Tianjin 300191, China |
| |
| Abstract: | The key point in PBNM(Policy Based Net wnk Manasement) is how to model the policy and map them into directory.We focus on the policy of access control,and present the method of modeling the policy in the standard of CIM/PCIM which is based on the DMTF/IETF related documentations and specifications.In our model,the probability of conflict and duplication during configuration process in whole campus network will be reduced.In addition,we define policy role and policy distribution destination interface,which facilitate implementation access control policy in large scale. |
| |
| Keywords: | PBNM Access Control LDAP PCIM CIM |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
