POLICY-BASED NETWORK SYSTEM FOR MINIMIZING LOSS OF POLICY ENFORCEMENT AND METHOD FOR OPERATING THE SAME

摘要

PURPOSE: A policy-based network system for minimizing the loss of policy enforcement and a method for operating the same are provided to minimize the loss of policy enforcement by supplying policy data to a policy client using a caching technique, even though a policy server fails to access a policy cache. CONSTITUTION: A policy-based network system is comprised of a PDP(Policy Decision Point)(104), a policy warehouse(105), and a PEP(Policy Enforcement Point)(102). The PEP(102), a policy client, having two interfaces for a sending terminal(101) and a receiving terminal(103), transfers data from the sending terminal(101) to the receiving terminal(103). The PDP(104), a policy server, decides the policy of the PEP(102) through a continuous connection with the PEP(102). In response to a policy decision request from the PEP(102), the PDP(104) searches the policy warehouse(105) for suitable policy data using an LDAP(Lightweight Directory Access Protocol). The PDP(104) comprises a cache warehouse(114) storing high-priority policy data for policy decision.