摘要 |
In a network management system based on the Open System Interconnection (OSI), access by a management operation to "target" Managed Object Instances (MOIs), managed by a naming tree construction and stored in a Management Information Base (MIB) (fig. 3), is controlled with access denial and permission being quickly decided. In a pre-process stage S0, the BER-encoded identification name of each MOI in the naming tree is converted to an index (fig. 11 and S1, fig. 10). Next, for each "scope" designated by the management operation, the corresponding range of MOIs in the tree is determined (fig. 12 and S2, fig. 10) and this correspondence is tabulated (S3, fig. 10). At every issue of the management operation, S1, access denial and permission, S2, are decided by using this pre-process data (fig. 14). When naming tree configuration changes occur, S3, the data can be revised, S4 (figs. 15 and 17), so that the access control is adaptive to the dynamic change of the naming tree.
|