基于PBNM的访问控制模型的研究  

Modeling access control based on PBNM

作　　者：王劲松[1] 张毅[1] 张岩[1] 

机构地区：[1]天津理工大学信息技术研究所,天津300191

出　　处：《天津理工大学学报》2007年第4期27-29,共3页Journal of Tianjin University of Technology

基　　金：天津市信息化项目(063003012);天津市高等学校科技发展基金(2006BA21)

摘　　要：PBNM中的关键步骤是为策略建立模型并映射到目录中去.本文根据DMTF/IETF所制定的相关标准,对访问控制策略进行描述,在此基础上对描述的策略进行向目录的映射,经过统一的策略定制能保证访问控制动作在整个网络中不会引起冲突或重复.为保证策略的正确分发,还定义了策略角色及策略分发的目的接口,为访问控制策略的大规模应用提供了可能.The key point in PBNM（ Policy Based Net wnk Manasement） is how to model the policy and map them into directory. We focus on the policy of access control, and present the method of modeling the policy in the standard of CIM/PCIM which is based on the DMTF/IETF related documentations and specifications. In our model, the probability of conflict and duplication during configuration process in whole campus network will be reduced. In addition, we define policy role and policy distribution destination interface, which facilitate implementation access control policy in large scale.

关 键 词：基于策略的网络管理 访问控制 轻量级目录访问协议 策略核心信息模型 公共信息模型 

分 类 号：TU352.110.4[建筑科学—结构工程]