首页> 外文会议>Meeting of the internet engineering task force;IETF >Framework for Binding Access Control to COPS Provisioning
【24h】

Framework for Binding Access Control to COPS Provisioning

机译:将访问控制绑定到COPS设置的框架

获取原文

摘要

There is an ever-growing distinction between edge and corefunctionality. While the core continues to focus on stability andpure forwarding functionality, the edges increasingly need to dealwith dynamic capabilities like QoS management, VPN encapsulations,encryption, dynamic steering and service monitoring. The dynamicdeployment of these functions is dependent on specific contextualknowledge such as the physical location of the data stream and theidentity of the client or system generating the data.In many environments, there is a requirement to both bind resourceconsumption to an identity or account, and also to quickly andefficiently provision the appropriate set of policies for thatclient or account. It is possible to provide this capability with acollection of currently available protocols. However, thesynchronization of account and provisioning information betweenthese protocols makes this approach extremely unwieldy.This memo offers a solution in the form of a single COPS PIB capablenot only of supporting all the above requirements but also offeringa scalable means for extending the provisioning capabilities as newtechnologies are standardized. Specifically, we offer a mechanismfor provisioning the criteria for initiating a dynamic authorizationrequests from the PEP as well as a means for propagating credentialsreceived by the PEP to allow the PDP to validate a client identityor an account.
机译:边缘功能和核心功能之间的区别越来越大。当核心继续关注稳定性和纯转发功能时,边缘越来越需要处理动态功能,例如QoS管理,VPN封装,加密,动态导向和服务监视。这些功能的动态部署取决于特定的上下文知识,例如数据流的物理位置以及生成数据的客户端或系统的身份。在许多环境中,既需要将资源消耗绑定到身份或帐户,也需要将资源消耗绑定到身份或帐户。快速有效地为该客户或帐户设置适当的策略集。可以使用当前可用协议的集合来提供此功能。但是,这些协议之间的帐户和预配信息的同步使该方法非常笨拙。此备忘录以单个COPS PIB的形式提供了一种解决方案,不仅能够支持上述所有要求,而且还提供了可扩展的方法来扩展新技术的预配功能。标准化。具体而言,我们提供了一种机制,用于提供从PEP发起动态授权请求的标准,以及用于传播PEP接收的凭据以允许PDP验证客户身份或帐户的手段。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号