基于角色的分布式策略管理规范的设计与实现

在IETF策略框架的基础上，提出了基于角色的分布式策略管理规范(RBPMS)，使用域的方式来表达角色，用主体集、目标集、动作集和约束集4元组表达策略，简化了策略规范．引入参数化的策略类，并在策略类之间引入继承机制，提高策略的抽象层次和可重用性．最后，提出了基于角色的策略自动发放模型，将策略编译成策略对象，在域服务的配合下自动发放到执行组件．试验表明，引用RBPMS可提高管理的抽象层次和效率，增强被管设备的智能性和独立性，实现网络的动态和自动化管理，可以满足大型网络管理的需要．

Design and Implementation of Specification for Role-Based Policy Management of Distributed System

A role-based distributed policy management specifications (RBPMS) based on IETF policy framework is proposed, which used the concept of domain to represent a role. This method simplifies the policy specification by representing it as a quad-tuple (set of subject, target, action, and constraint).In order to promote the abstract level and reusability of policies, a parameterized policy class and an inheritance mechanism between policy classes are introduced. Moreover, a role-based policy distribution model is also proposed in which policies are compiled as policy objects which are deployed automatically by the domain server if necessary. Experiments demonstrate that the abstract level and efficiency of management are improved, and that the intelligence and independence of managed devices are improved by introducing RBPMS. Such a model realizes the dynamic and automatic management and facilitates the large-scale network management.