K. Twidle. Domain Services for Distributed Systems Management. PhD thesis, Imperial College, London, May 1993.  Home/Search   Document Not in Database   Summary   Related Articles   Check

....and target object. Additionally, constraints on the time of the query, the location and the policy set of the querying objects may be used to modify the scope of the policy. Access policies are specified by access rules. Typically, access rules are defined using domains (cf. domain service [Twi93]) as scopes for source and target objects. In this setting, a user can also specify his or her private location access rules in term of his or her personal user representation domain. Access control can be enforced by user agents or a centralised service. Since the user agents approach has ....

....area is also stored. Profiles of located objects are maintain in home and visitor location registers. A register entry contains the identities of the object in the different cell spaces (e.g. Badge ID, UNIX login, mobile telephone number) Several external services, such as a domain service [Twi93] and an authentication service [YS95] may also be required. Externally, the location service supports a client interface, a management interface, and an interface for interaction with other location servers. Clients connect to their local location server in order to browse the local location ....

K. Twidle. Domain Services for Distributed Systems Management. PhD thesis, Imperial College, London, May 1993.

....and target object. Additionally, constraints on the time of the query, the location and the policy set of the querying objects may be used to modify the scope of the policy. Access policies are specified by access rules. Typically, access rules are defined using domains (cf. domain service [12]) as scopes for source and target objects. In this setting, a user can also specify his or her private location access rules in term of his or her personal user representation domain. Access control can be enforced by user agents or a centralised service. Since the user agents approach has ....

K. Twidle. Domain Services for Distributed Systems Management. Ph.D. thesis, Imperial College, London, May 1993.

....and authorisation policies to reference monitors associated with objects in the target domain. An example transformation is an authorisation policy object into an access control list (ACL) entry or capability. ACLs are stored with the target domain and have to be propagated to nested subdomains [13]. The authorisation policies have been applied to specifying service access rights for cellular networks [2] The generalised policy concepts were derived from our initial work on access control policy, so the authorisation policy aspects are further advanced than the obligation policy concepts. ....

....c.f. access rules. These could be interpreted by automated tools. Policy Mechanism Information may be generated from policy rules for efficient implementation of policy mechanisms e.g. transforming access rules into access control lists or capabilities for actually controlling access at run time [11,13, 15]. Both goals and rules can be expressed as obligation or authorisation policies and be represented by a policy object with the attributes of subject, target, constraints and activities. A high level Policy Driven Management 17 obligation or authorisation policy may be refined into a number of ....

K.P. Twidle, Domain Services for Distributed Systems Management, PhD Thesis, May 1993, Department of Computing, Imperial College.

....is described in section 6 and is followed by related work and conclusions. 2 MANAGEMENT ENVIRONMENT 2. 1 Domains and Policies Domains provide a means of grouping object interface references and specifying a common policy which applies to the objects in the domain (Sloman 1989, 1994, Moffett 1993, Twidle 1993). A reference is given a local name within a domain and an icon may also be associated with it. If a domain holds a reference to an object, the object is said to be a direct member of that domain and the domain is said to be its parent. A domain may be a member of another domain and is then said ....

Twidle K. (1993) Domain Services for Distributed Systems Management, PhD Thesis, Department of Computing, Imperial College.

No context found.

Twidle 93 Twidle K. Domain Services for Distributed Systems Management, PhD Thesis, May 1993, Department of Computing, Imperial College.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC