GB/T 18794.3-2003Information technology -- Open Systems Interconnection -- Security frameworks for open systems -- Part 3: Access control framework (English PDF)

GB/T 18794.3-2003 is the English-translated version of 信息技术 开放系统互连 开放系统安全框架 第3部分：访问控制框架.

GB/T 18794.3-2003 — This standard discusses in an open system environment security service application, where the term "open system " includes such as databases, distributed applications, Open Distributed Processing and OSI so some areas.

Security Framework relates define objects within the system and the system to provide protection methods, and interaction between systems. The security framework or mechanism does not involve building systems methodology.

Data elements and security framework discusses the sequence of operations (rather than the protocol elements), the two can be used to obtain specific security services.

These security services can be applied to the system is communicating entities, the data exchanged between systems, and system management data. The accessibility of the system, the function can be either a DR system (ie only in the communication within the system to buy all of the body) of the access, it can be access to the inside of a system.

To gain access to the information items to be presented, as well as requesting the access order and notification of the results of the visit in the security framework considered within the scope.

However, any only depends on the specific application and strictly limited to local access within a system of information items and operations, the security framework is not considered within the scope.

Many applications require security measures to prevent threats to resources, these resources include OSI information generated. In the OSI environment, some well-known threats and can be used to defend against these threats to security services and mechanisms in GB/T 9387.

2 described in both. Decided to allow the use of open systems environment what resources, and where appropriate to prevent unauthorized access process is called access control.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 25 pages — is available in the English PDF.

1. 1

   Add to cart

   Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

2. 2

   Checkout

   Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

3. 3

   Instant delivery (0–9 sec)

   Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

4. 4

   Invoice included

   A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.