NSIS下通用访问控制信令协议的设计与验证  

Design and Validation of Universal Access Control Signaling Protocol Based on Next Steps in Signaling

作　　者：陈书义[1] 孙锦山[1] 闻英友[1,2] 赵宏 

机构地区：[1]东北大学计算机软件国家工程研究中心,沈阳110004 [2]东软研究院,沈阳110179

出　　处：《西安交通大学学报》2009年第4期34-38,共5页Journal of Xi'an Jiaotong University

基　　金：国家自然科学基金资助项目(60602061);国家高技术研究发展计划资助项目(2006AA01Z413)

摘　　要：在深入研究设备穿越和动态防御需求的基础上,提出了基于下一代信令(NSIS)技术的通用访问控制协议.协议实体由7个不同的功能模块组成,并定义了协议的消息类型、数据对象和执行流程.其中,消息类型包括请求消息、应答消息和错误.请求消息将为访问控制设备部署不同的访问控制策略,而错误消息主要是在鉴权失败或者检查到信令消息出错时返回出错的原因.最后,对协议进行了测试、验证,结果表明所提协议具有逻辑正确性,且性能开销较小.通过引入NSIS信令机制,保障了访问控制信令信息安全、可靠传输.An access control protocol is proposed based on the NSIS technology after studying the demands of equipments traversal and dynamic defense. The protocol consists of seven modules with different functions. Message types, data objects and operation process of the protocol are presented. The message types include request, response and error message. The request message is mainly for setting up different access policies, and the error message is mainly for returning error when authentication failure or message error occurs. Performance of the protocol is tested and verified, and the results show that the proposed protocol has the advantages of logical validity with acceptable cost. The access control information is safely and reliably transmitted based on the use of NSIS signaling mechanism.

关 键 词：访问控制 下一代信令 设备穿越 动态防御 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]