CAN CSA-ISO IEC 10164-9-1997 Information Technology - Open Systems Interconnection - Systems Management Objects and Attributes for Access Control (Incorporating Corrigendum 1 July.pdf

1、(Reaffirmed 2001)ICS 35.100.70 Ref. No. ISO/IEC 10164-9:1995/Cor.3:2002(E) ISO/IEC 2002 All rights reserved Information technology Open Systems Interconnection Systems Management: Objects and attributes for access control TECHNICAL CORRIGENDUM 3 Technologies de linformation Interconnexion de systmes

2、 ouverts (OSI) Gestion-systmes: Objets et attributs de contrle daccs RECTIFICATIF TECHNIQUE 3 Technical Corrigendum 3 to International Standard ISO/IEC 10164-9:1995 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology. Technical Corrigendum 3:2003 toNational Standard of Ca

3、nadaCAN/CSA-ISO/IEC 10164-9-97Technical Corrigendum 3:2002 to International Standard ISO/IEC 10164-9:1995 has been adopted withoutmodification as Technical Corrigendum 3:2003 to CAN/CSA-ISO/IEC 10164-9-97. This Technical Corrigendumwas reviewed by the CSA Technical Committee on Information Technolog

4、y (TCIT) under the jurisdiction of theStrategic Steering Committee on Information Technology and deemed acceptable for use in Canada. July 2003ISO/IEC 10164-9 : 1995/Cor.3 : 2002 (E)ITU-T X.741 (1995)/Cor.3 (02/2000 E) 1INTERNATIONAL STANDARDISO/IEC 10164-9 : 1995/Cor.3 : 2001 (E)ITU-T RECOMMENDATIO

5、NINFORMATION TECHNOLOGY OPEN SYSTEMS INTERCONNECTION SYSTEMS MANAGEMENT: OBJECTS AND ATTRIBUTESFOR ACCESS CONTROLTECHNICAL CORRIGENDUM 31) Subclause 2.1Insert the following references alphanumerically: ITU-T Recommendation X.680 (1997) | ISO/IEC 8824-1:1998, Information technology Abstract SyntaxNot

6、ation One (ASN.1): Specification of basic notation. ITU-T Recommendation X.681 (1997) | ISO/IEC 8824-2:1998, Information technology Abstract SyntaxNotation One (ASN.1): Information object specification. ITU-T Recommendation X.682 (1997) | ISO/IEC 8824-3:1998, Information technology Abstract SyntaxNo

7、tation One (ASN.1): Constraint specification. ITU-T Recommendation X.690 (1997) | ISO/IEC 8825-1:1998, Information technology ASN.1 encodingrules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and DistinguishedEncoding Rules (DER). ITU-T Recommendation X.710 (1997) | IS

8、O/IEC 9595:1998, Information technology Open SystemsInterconnection Common management information service. ITU-T Recommendation X.711 (1997) | ISO/IEC 9596-1:1998, Information technology Open SystemsInterconnection Common management information protocol: Specification.2) Subclause 2.2Remove the foll

9、owing paired references: CCITT Recommendation X.208 (1988), Specification of Abstract Syntax Notation One (ASN.1).ISO/IEC 8824:1990, Information technology Open Systems Interconnection Specification of AbstractSyntax Notation One (ASN.1). CCITT Recommendation X.209 (1988), Specification of Basic Enc

10、oding Rules for Abstract SyntaxNotation One (ASN.1).ISO/IEC 8825:1990, Information technology Open Systems Interconnection Specification of BasicEncoding Rules for Abstract Syntax Notation One (ASN.1). CCITT Recommendation X.710 (1991), Common management information service definition for CCITTappli

11、cations.ISO/IEC 9595:1991, Information technology Open Systems Interconnection Common managementinformation service definition. CCITT Recommendation X.711 (1991), Common management information protocol specification forCCITT applications.ISO/IEC 9596-1:1991, Information technology Open Systems Inter

12、connection Common managementinformation protocol Part 1: Specification.3) Subclause 13.1Replace “CCITT Rec. X.209 | ISO/IEC 8825“ with “ITU-T Rec. X.690 | ISO/IEC 8825-1“.ISO/IEC 10164-9 : 1995/Cor.3 : 2002 (E)2 ITU-T X.741 (1995)/Cor.3 (02/2000 E)4) Subclause A.6a) In the IMPORTS FROM CMIP-1, inser

13、t the following before ObjectClass:“DistinguishedName,“b) Remove the following IMPORTS statement:“DistinguishedNameFROM InformationFramework joint-iso-ccitt ds(5) modules(1) informationFramework(1) “c) In the IMPORTS FROM Attribute-ASN1Module, insert the following before DiscriminatorConstruct:“DMI-

14、TYPE-IDENTIFIER,“d) Replace the production for Proxy with the following ASN.1 production:“AC-PROXY := DMI-TYPE-IDENTIFIER“Proxy := SEQUENCE proxyId 0 IMPLICIT AC-PROXY. withREGISTERED AS joint-iso-ccitt(2) ms(9) function(2) part9(9) package(4) authenticationContextPackage(2) ;2) Subclause A.2.4At en

15、d of accessControlNotificationEmitterPkg replace ; with ;3) Subclause A.2.5In the operationsListPackage ATTRIBUTES operationsListreplace ADD-REMOVE; with ADD-REMOVE;In the operationsListPackage REGISTERED ASreplace (15) with (15);In the operationsListPackage PRESENT IFreplace object ! with object!;4

16、) Subclause A.2.11Replace DERIVED FROM top with DERIVED FROM “CCITT Rec. X.721 | ISO/IEC 10165-2:1992“:top5) Subclause A.2.14Remove the tab character between CHARAC and TERIZEDISO/IEC 10164-9 : 1995/Cor.2 : 1999 (E)2 ITU-T Rec. X.741 (1995)/Cor.2 (1998 E)6) Subclause A.4.1Replace AccessControlDefini

17、tions with AccessControl-ASN1Module7) Subclause A.5.1Replace AccessControlDefinitions with AccessControl-ASN1Module8) Subclause A.5.2Replace AccessControlDefinitions with AccessControl-ASN1Module9) Subclause A.5.3Replace AccessControlDefinitions with AccessControl-ASN1Module10) Subclause A.5.4Replac

18、e AccessControlDefinitions with AccessControl-ASN1ModuleReplace PARAMETERS invalidAccesscontrolFilter with PARAMETERS invalidAccessControlFilter11) Subclause A.5.6Replace AccessControlDefinitions with AccessControl-ASN1Module12) Subclause A.5.7Replace AccessControlDefinitions with AccessControl-ASN1

19、Module13) Subclause A.5.8Replace AccessControlDefinitions with AccessControl-ASN1Module14) Subclause A.5.9Replace AccessControlDefinitions with AccessControl-ASN1Module15) Subclause A.5.10Replace AccessControlDefinitions with AccessControl-ASN1Module16) Subclause A.5.11Replace AccessControlDefinitio

20、ns with AccessControl-ASN1Module17) Subclause A.5.12Replace AccessControlDefinitions with AccessControl-ASN1ModuleISO/IEC 10164-9 : 1995/Cor.2 : 1999 (E)ITU-T Rec. X.741 (1995)/Cor.2 (1998 E) 318) Subclause A.5.14Replace AccessControlDefinitions with AccessControl-ASN1Module19) Subclause A.5.17Repla

21、ce AccessControlDefinitions with AccessControl-ASN1Module20) Subclause A.5.18Replace AccessControlDefinitions with AccessControl-ASN1ModuleReplace EQUALITY SET-COMPARISON with EQUALITY, SET-COMPARISON21) Subclause A.5.20Replace AccessControlDefinitions with AccessControl-ASN1Module22) Subclause A.5.

22、21Replace AccessControlDefinitions with AccessControl-ASN1Module23) Subclause A.5.22Replace AccessControlDefinitions with AccessControl-ASN1Module24) Subclause A.5.24Replace AccessControlDefinitions with AccessControl-ASN1Module25) Subclause A.5.25Replace AccessControlDefinitions with AccessControl-

23、ASN1Module26) Subclause A.5.26Replace AccessControlDefinitions with AccessControl-ASN1Module27) Subclause A.6In the first line:replace AccessControlDefinitions joint-iso-ccitt ms(9) function(2) part9(9) asn1Module(2) 1 with AccessControl-ASN1Module joint-iso-ccitt ms(9) function(2) part9(9) asn1Modu

24、le(2) 2 Before the IMPORTS for DistinguishedName add the following ASN.1 comment Note:- NOTE This Recommendation | International Standard imports DistinguishedName from- CCITT Rec. X.501 (1988) | ISO/IEC 9594-2:1990. The specification for this syntax can now be- found in an informative annex of ITU-

25、T Rec. X.711 (1997) | ISO/IEC 9596-1:1997.Remove the following:FunctionalUnitPackageFROM SMASE-A-ASSOCIATE-Information joint-iso-ccitt ms(9) smo(0) negotiationAbstractSyntax(1) version1(1) ISO/IEC 10164-9 : 1995/Cor.2 : 1999 (E)4 ITU-T Rec. X.741 (1995)/Cor.2 (1998 E)Replace the IMPORTS for AETitle

26、with the following:AE-titleFROM ACSE-1 joint-iso-itu-t(2) association-control(2) modules(0) apdus(0) version1(1) In InitiatorName replace InitiatorName CHOICE with InitiatorName := CHOICEIn InitiatorName replace 4 IMPLICIT AETitle with 4 AE-titleIn CapabilityIdentitiesList replace IMPLICIT OBJECT ID

27、ENTIFIER with OBJECT IDENTIFIERIn DenialResponse remove EnforcementActionIn Deny replace Deny with denyIn InvalidAccessControlFilter remove the (formatted in White and hence not visible on the paper copy) before filterTechnical Corrigendum 1:2003 toNational Standard of CanadaCAN/CSA-ISO/IEC 10164-9-

28、97Technical Corrigendum 1:1996 to International Standard ISO/IEC 10164-9:1995 has been adopted withoutmodification as Technical Corrigendum 1:2003 to CAN/CSA-ISO/IEC 10164-9-97. This Technical Corrigendumwas reviewed by the CSA Technical Committee on Information Technology (TCIT) under the jurisdict

29、ion of theStrategic Steering Committee on Information Technology and deemed acceptable for use in Canada. July 2003ISOAEC 10164-9 : 1995Kor.l : 1996 (E) INTERNATIONAL STANDARD ITU-T RECOMMENDATION INFORMATION TECHNOLOGY - OPEN SYSTEMS INTERCONNECTION - SYSTEMS MANAGEMENT: OBJECTS AND ATTRIBUTES FOR

30、ACCESS CONTROL TECHNICAL CORRIGENDUM 1 1) Annex B In Table B.6 - “PICS Support Summary”, first row referencing “CCITT Rec. X.730 I ISO/IEC 10164-1, Annex E, SM Application Context”, change the status jkom “m” to “0” and add the following note for the corresponding row of this table: “NOTE - The supp

31、lier of implementation shall indicate the application contexts supported.” 2) Subclause B.l.3 Add the following sentence afler the line “- Not applicable or out of scope” and immediately before “NOTES”: “The value of m in the Status column for the receiving of parameters, of tables of type MCS in Annex B indicates that there is a minimum requirement for the implementation to be able to receive the parameter. The Additional information column shall be used to state whether the implementation provides support for more than the minimum requirement.” ITU-T Rec. X.741 (1995)Kor.l (1996 E)