METHOD AND SYSTEM FOR SECURING ACCESS TO CONFIGURATION INFORMATION STORED IN UNIVERSAL PLUG AND PLAY DATA MODELS

摘要

The present invention provides a method and system for securing access to configuration information stored in universal plug and play data models. In one embodiment, a request to operate on node(s) of a data model is received from a control point (CP). The data model includes a plurality of nodes and each of the plurality of nodes represents configuration information. A role associated with the CP is determined. It is determined whether the role of CP is in a recommended role list. If the role is present, then the CP is allowed to operate on the node(s). If the role is not present, then it is determined whether the CP is having an appropriate role to operate on the node(s) based on ACL data associated with the node(s). Accordingly, the CP is allowed to operate on the node(s) or an error message is returned on the display of the CP.