公开(公告)号：EP2148470A1

公开(公告)日：2010-01-27

申请号：EP08290727.0

申请日：2008-07-25

申请人： Alcatel Lucent

发明人： Justen Pascal, Marie Edouard Julien ,  Stevens, Christoph ,  Liekens, Werner Mario ,  Coppens, Jan ,  Acke, Willem Jozef Amaat

IPC分类号： H04L12/24

CPC分类号： H04L41/0213 ,  H04L41/08

摘要： A method for improving the security of actions performed by Remote Procedure Calls RPC invoked during a TR-069 Remote Management Protocol session between an Auto-Configuration Server ACS and a Customer Premises Equipment CPE of a DSL telecommunication system. The TR-069 session comprises several RPC's executing actions on parameters of an object model and the method comprises the steps of
- starting a TR-069 session wherein RPC's are invoked;
- opening a transactional TR-069 session or transaction whereby parameters of the object model handled by RPC's are protected through a SavePoint mechanism;
- closing the transaction by the ACS; and either:
- committing the transaction via a StoreSavePoint RPC invoked by the ACS, or
- rolling-back actions of RPC's via a RestoreSavePoint RPC also invoked by the ACS.
If the transaction is not committed during a first TR-069 session, the CPE sends an Inform with an event code OpenSavePoint to the ACS during a next TR-069 session and the ACS may reply by including an additional field in the InformResponse to close the transaction. The SavePoint mechanism saves parameter values of the object model prior to any RPC by storing these parameter values at the CPE-side. The SavePoint mechanism may also save a history of the RPC's invoked during the transaction.

摘要翻译： 一种在DSL电信系统的自动配置服务器ACS和客户端设备CPE之间的TR-069远程管理协议会话期间调用远程过程调用RPC执行的动作的安全性的方法。 TR-069会话包括几个RPC对对象模型的参数的执行动作，并且该方法包括以下步骤： - 启动其中RPC被调用的TR-069会话; - 打开事务TR-069会话或交易，由RPC处理的对象模型的参数通过SavePoint机制进行保护; - 由ACS关闭交易; 并且： - 通过ACS调用的StoreSavePoint RPC提交事务，或 - 还通过ACS调用的还原性恢复RPC的回滚操作。 如果事务在第一次TR-069会话期间没有提交，则CPE在下一个TR-069会话期间向ACS发送具有事件代码OpenSavePoint的Inform，并且ACS可以通过在InformResponse中包括附加字段来回复，以关闭 交易。 SavePoint机制通过在CPE侧存储这些参数值，在任何RPC之前保存对象模型的参数值。 SavePoint机制还可以保存在事务期间调用的RPC的历史记录。