GB/T 16264.2-2008Information technology -- Open systems interconnection -- The directory -- Part 2: Models (English PDF)

Foreword

GB/T 16264 "Information technology - OSI Directory" includes the following 10 sections.

--- Part 1. Overview of concepts, models and services;

--- Part 2. Model;

--- Part 3. Abstract service definition;

--- Part 4. Procedures for distributed operation;

--- Part 5. Protocol specification;

--- Part 6. Selected attribute types;

--- Part 7. Selected object classes;

--- Part 8. a public key and attribute certificate frameworks;

--- Part 9. Copy (to be published);

--- Part 10. System Management uses common directory management mechanism (to be released).

This part of GB/T 16264 Part 2.

This part identical with ISO/IEC 9594-2:2005 "Information technology - OSI directory model", only editorial modify.

This Part replaces GB/T 16264.2-1996.

This portion of the GB/T 16264.2-1996 difference is the addition of the following elements.

--- Directory management model;

--- Directory management and operational information model;

--- Directory schema;

--- Directory Services Administration;

--- DSA model;

--- DSA information model;

--- DSA operational framework;

--- Expanded GB/T 16264.2-1996 pieces of content in each chapter.

This section of the Appendix A ~ Appendix H is a normative appendix, Appendix Appendix I ~ T is informative appendix.

This section proposed by the People's Republic of China Ministry of Information Industry.

This part of the National Information Technology Standardization Technical Committee centralized.

Introduction

GB/T 16264 in this section, together with the other parts of this standard is to facilitate the interconnection of information processing systems to provide directory services customized. A set of such systems, together with the directory information which they hold, can be considered as a whole, known as the "directory." Directory Have information, collectively called the directory information base (DIB), is typically used to facilitate communication between subject and object, and the object of communication or related objects Communications, etc. These objects application entities, people, terminals and distribution lists as.

Play in the OSI Directory in a key role, with the goal, in addition to their own interconnection standards minimum of technical agreement Under the circumstances, to allow interconnection between the following kinds of information processing systems.

--- From different manufacturers;

--- Having different management;

--- Having a different degree of complexity, as well as

--- There are different times.

This section provides a different set of directory model as a framework for the rest of the reference. These models include the overall (functional) model, the tube Body model, provide information on the directory and manage users view, universal directory information model directory information, generic Directory System Agent (DSA) and DSA information models and operational framework and a security model.

For example, common information model describes the object directory of information about how to group, forming the object directory entry information as well as those it provided the name (title) for the object.

Generic DSA and DSA information models and operational framework for distributed directory provides support.

This section provides a general directory of specialized information models to support the management of the directory schema.

This section provides the basic framework, in this framework, based on other standards groups and industry forums industry profiles can be defined.

Many of the features defined as optional in these frameworks, you can configure the set of instructions, under certain circumstances be used as a mandatory feature. Currently ISO/IEC 9594 is the 5th edition of the original international standard 4th edition revises and enhances, but does not replace. Still can be declared at the time of system implementation to comply with the 4th edition. However, in some respects, the fourth edition will not be supported (ie no longer eliminate some reported defects). Recommended system Subject to section 5 when the plate as soon as possible.

5th edition detailed definition of the first edition and the second edition of the directory protocol.

Version 1 and Version 2 only defines the protocol version 1. This version (Version 5) a number of services and protocols defined is designed to be run in the first edition. However, some enhanced services and protocols, such as signature errors, all directory entries only included in the operation are negotiated Support agreement before running the second edition. Whether the difference between what is negotiated Edition, 5th Edition defined between services and protocols Differences, except for those specifically assigned to version 2, but can be extended using the rules GB/T 16264.5-2008 defined in the regulation.

This section uses the term "first edition systems" to refer to comply with international standards of the first edition of the system, namely ISO/IEC 9594:1990 edition;

This section uses the term "second edition systems" to refer to all systems in accordance with international standards of the second edition of that ISO/IEC 9594:1995 edition; this Section uses the term "third edition systems" to refer to systems conforming to international standards 3rd edition of the system, namely ISO/IEC 9594:1998 edition; this section the term "4th edition systems" to refer to the fourth edition follows the international standard for all systems, namely ISO/IEC 9594:2001 version of Part 1 to Section 10; This section uses the term "fifth edition systems" to refer to all systems in accordance with international standards fifth edition, namely ISO/IEC 9594.

2005 version.

GB/T 16264-1996 reference to ISO/IEC 9594:1990 and developed. Our country has not established international standards Version 2, 3 Edition, 4th Edition corresponding national standards. The version number in this section refers mostly to international standard version.

Appendix A is a normative appendix summarizes this standard ASN. 1 object identifier usage.

Appendix B is a normative appendix provides ASN. 1 module.

Appendix C is a normative appendix provides ASN subschema Management. 1 definition.

GB/T 16264.2-2008/ISO/IEC 9594-2:2005 Appendix D is a normative appendix provides a service management ASN. 1 module definition.

Appendix E is a normative appendix provides basic access control ASN. 1 module definition.

Appendix F is a normative appendix provides an ASN. 1 module definition The module contains all the DSA operational attribute types

Related definitions.

Appendix G is a normative appendix provides an ASN. 1 module definition, the module contains the binding management operations and related operations

All definitions.

Appendix H is a normative appendix provides an ASN. 1 module definition, the module contains all relevant and enhanced security

definition.

Appendix I is informative appendix mathematical terminology associated with tree outlined.

Appendix J is informative appendix describes some guidelines for the design name (called) when can be considered.

Appendix K is informative appendix, different aspects of the model provides some examples.

Appendix L is informative appendix provides an overview of the basic access control and license-related aspects of semantics.

Appendix M is informative appendix provides an extended example of a basic access control usage.

Appendix N is informative appendix describes some DSA-specific entry combinations.

Appendix O is informative appendix provides a knowledge modeling framework.

Appendix P is informative appendix describes a name (called) is an alternative distinguished name or the primary distinguished name, whether it may include alternative

Value and whether it can include context information like criterion.

Appendix Q is informative appendix describes the concept of sub-filters.

Appendix R is informative appendix describes how family members naming suggestions and examples.

Appendix S is informative appendix describes the naming concepts and considerations.

Appendix T is informative appendix lists alphabetically the terms defined in this section.

GB/T 16264.2-2008/ISO/IEC 9594-2:2005 Information technology - OSI Directory Part 2. Models First. A Summary

1 Scope

GB/T model defined in this section 16264 of the GB/T 16264 other part provides a conceptual framework and terminology framework, the section provides various features directory.

Functional model and management mechanism model defines the directory distribution function method and manage distribution. Generic DSA and DSA information models Type and operational framework to support directory distribution is provided.

General Information Model Directory user directories respectively, from the user's perspective and authorities describe the logical structure of the DIB. Indeed, but these models, the catalog is distributed rather than centralized, it is not visible.

This section provides a general directory of specialized information models to support the management of the directory schema.

GB/T 16264-2008 rest of this section uses the concepts defined for general information and DSA models to specialize Defined to provide specific information, specific DSA and operational models, the ability to support a particular directory (eg copy).

a) Services provided directory (GB/T 16264.3-2008 defined in) is based on the conceptual framework of the information described in. It allows Xu services provided to some extent independent of the physical distribution of the DIB;

b) provides for distributed operation (GB/T 16264.4-2008 defined in the) catalog, in order to provide these services, and therefore You can maintain that logical information structure, even if the DIB is in fact highly distributed;

c) providing the ability to copy part of the directory provided to improve the overall performance of the directory (in ISO/IEC 9594-9 are set Righteousness).

Security model for the specification of the access control mechanism to establish a framework. It is in a particular part of the DIT to a valid ID access control party Case provides a mechanism, and defines three flexible, specific access control scheme, these models widely used in a variety of different applications and with the use of styles. Confidentiality and integrity through the use of digital signatures, such as passwords and other mechanisms for the protection of the security model also directory operations it provides a framework that uses the ISO/IEC 9594-8 Authentication framework defined and GB/T 18237.1-2000 defined through with high-level security tools.

DSA model directory assembly practices to establish a framework, including.

a) Directory functional model describes how the directory is represented as one or more components (one for each component of the DSA);

b) Directory distribution model describes a number of principles, in accordance with these principles, copy DIB entries and entries may be distributed among the DSA;

C) DSA information model describes the structure and the user directory stored within the DSA operation information;

d) DSA operational framework describes to achieve a particular goal (such as video), constructed between DSA method defined specific forms of cooperation.

2 Normative references

The following documents contain provisions which, through reference GB/T 16264 in this section constitute provisions of this section. For dated reference documents Member, all subsequent amendments (not including errata content) or revisions do not apply to this section, however, encouraged to reach under this section Parties to research agreement to use the latest versions of these documents. For undated reference documents, the latest versions apply to this section.

GB/T 9387.1-1998 Information technology - Open Systems Interconnection - Basic Reference Model - Part 1. Basic model (idt ISO/IEC 7498-1:1994) GB/T 16264.2-2008/ISO/IEC 9594-2:2005