【英文标准名称】:Informationtechnology–UPnPDeviceArchitecture–Part13-11:DeviceSecurityDeviceControlProtocol–SecurityConsoleService
【原文标准名称】:信息技术.UPnP装置结构.第13-11部分:装置安全性中装置控制协议.安全性控制台服务
【标准号】:ISO/IEC29341-13-11-2008
【标准状态】:现行
【国别】:国际
【发布日期】:2008-11
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1/SC25
【标准类型】:()
【标准水平】:()
【中文主题词】:入口控制;地址(数据处理);体系机构;校验;电路网络;计算机系统布局;配置;控制点;数据格式;驱动器;传动装置;电子工程;娱乐电子学;可扩展标记语言;文件传送;硬件;家用设备;信息交换;信息技术;接口(数据处理);因特网协议;IP;IT安全;LAN;操作系统;协议;安全;软件;系统配置;通用即插即用;UPNP;无线局域网;XML
【英文主题词】:Accesscontrols;Addresses(dataprocessing);Architecture(IT);Authentication;Circuitnetworks;Computersystemsconfiguration;Configuration;Controlpoints;Dataformats;Driver;Drives;Electronicengineering;Entertainmentelectronics;ExtensibleMarkupLanguage;Filetransfer;Hardware;Householdequipment;Informationinterchange;Informationtechnology;Interfaces(dataprocessing);InternetProtocol;IP;ITsecurity;LAN;Operatingsystems;Protocols;Safety;Software;Systemconfiguration;UniversalPlugandPlay;UPnP;WLAN;XML
【摘要】:ThisserviceisofferedbyaSecurityConsole(SC).TheSecurityConsoleoffersauserinterfaceforadministrationofaccesscontrolonsecurity-awareUPnPdevices.[SeeDeviceSecurity:1foradescriptionoftheactionsusedinthecreationandeditingofAccessControlLists(ACLs)andintakingsecurityownershipofDevices.]AsadevicetheSecurityConsoleisself-owned.Ifithasanyaccesscontrolledactions,thenthosearetobeadministeredbythehumanuserandnotbysomeotherSecurityConsole.Therefore,aSecurityConsoledoesnotneedtoincludeaDeviceSecurityservice.Itdoeshaveacertificatecache,butitisanoutgoingcache,ratherthananincomingcache.Anetworkbuiltoftheuser’sowncomponentswithnoconnectiontoanythingoutsidetheuser’spersonaldomainandwithnocontrolpointsbelongingtoanyoneotherthantheusereverattachedtothenetworkwouldnotrequirethefeaturesofUPnPSecurity.Networkisolationwouldalreadyhaveachievedalevelofphysicalsecurity.WeareconcernedinUPnPSecuritywithnetworksinwhichmorethantheuser’sownControlPointsarepresentonthephysicalnetworkandabletoreachtheuser’sDeviceswithcontrolmessages.Thesesituationscaninclude:1.useofwireless,power-linenetworkingorcablemodemwithoutafirewall,allowinganattackertojointhenetworkwithouttheuser’sknowledgeorpermission2.sharedinfrastructurenetworks,suchasacollegedormoracondominiumbuildingwiredforEthernetasonenetworksegmentservingmorethanoneperson’sresidence3.householdsofmultipleadultsorteens,inwhicheachindividualwantstoestablishaprivatesecuritydomain,inadditiontoanydomainofdevicesorcontrolpointssharedamongthem,whileusingasharednetworkdomain4.connectionstotheInternetviadevicesorservicesthatcreatesinglenetworksegmentsofmultiplesubscribersasasideeffectofofferingnetworkconnectivity(suchassomecablemodemsandsomeISPconnections)5.householdsinwhichguestsmightbringmobiledevicesorcontrolpointsintothenetworktemporarily.
【中国标准分类号】:L79
【国际标准分类号】:35_200
【页数】:28P.;A4
【正文语种】:英语