System, device, and method for distributing access control information in a communication system

摘要

A system, device, and method for distributing access control information in a communication system uses a reliable multicast mechanism for distributing access control information by a main server to multiple access control devices. A dedicated multicast group is established for distributing the access control information, and each access control device joins the dedicated multicast group. A reliable multicast mechanism is used to distribute the access control information to the multicast group members. Each access la control device obtains the access control information using the reliable multicast mechanism, and stores the access control information in a database for later use in making receiver access control decisions.

主权项

1. A method for distributing access control information in a communication network for managing access by a subscriber device to a multicast group, the method comprising:
obtaining access control information by a main device; sending the access control information by the main device to a plurality of access control devices using a reliable multicast mechanism, the access control information including at least one policy block, the policy block including a multicast group address field, a sequence number field and a number of user blocks identifying authorized users for the multicast group; in response to a join request sent from the subscriber device to an access device which is in direct communication with the subscriber device, generating a policy service request message and sending the policy service request message from the access device to one of the access control devices; in response to receipt of the policy service request message by the access control device, determining a policy decision for the subscriber device based on the access control information received from the main device, and sending a corresponding policy service decision message to the access device; and implementing the policy decision with the access device.