| 摘要 |
A method for improving the security of actions performed by Remote Procedure Calls RPC invoked during a TR-069 Remote Management Protocol session between an Auto-Configuration Server ACS and a Customer Premises Equipment CPE of a DSL telecommunication system. The TR-069 session comprises several RPC's executing actions on parameters of an object model and the method comprises the steps of starting a TR-069 session wherein RPC's are invoked; opening a transactional TR-069 session or transaction whereby parameters of the object model handled by RPC's are protected through a SavePoint mechanism; closing the transaction by the ACS; and either: committing the transaction via a StoreSavePoint RPC invoked by the ACS, or rolling-back actions of RPC's via a RestoreSavePoint RPC also invoked by the ACS. If the transaction is not committed during a first TR-069 session, the CPE sends an Inform with an event code OpenSavePoint to the ACS during a next TR-069 session and the ACS may reply by including an additional field in the InformResponse to close the transaction. The SavePoint mechanism saves parameter values of the object model prior to any RPC by storing these parameter values at the CPE-side. The SavePoint mechanism may also save a history of the RPC's invoked during the transaction.
|
