公开(公告)号：US20030115246A1

公开(公告)日：2003-06-19

申请号：US09382059

申请日：1999-08-24

Applicant: HEWLETT-PACKARD COMPANY AND INTEL CORPORATION

Inventor： HUGH F. MAHON ,  FREDRICK M. ROELING ,  DAVID M. DURHAM ,  RAJENDRA S. YAVATKAR ,  RUSSELL J. FENGER

IPC: G06F015/16

CPC classification number: H04L41/0893 ,  H04L29/12047 ,  H04L29/12216 ,  H04L61/15 ,  H04L61/2007 ,  H04L63/0263 ,  H04L63/105 ,  H04L2463/102

Abstract: Method and apparatus for assigning policies which are rules that govern the use of or access to network services. Each rule defines conditions that when evaluated true trigger actions to allow or deny the service. Techniques are disclosed which provide for explicit, flexible, and centralized assignment of policy to targets which are specified network services. These techniques include explicitly associating a policy with a network resource or process, grouping policy related processes, grouping related targets, associating groups of targets with groups of policies, mapping a user name contained in a policy to an associated network address such as an Internet Protocol (IP) address, and providing dynamically mapped policy identified user and host names with associated network addresses, such as IP addresses, to client processes.

Abstract translation: 用于分配策略的方法和装置，这些策略是管理网络服务的使用或访问的规则。 每个规则定义了当评估真实触发操作以允许或拒绝服务时的条件。 公开了技术，其提供对指定的网络服务的目标的显式，灵活和集中的分配。 这些技术包括明确地将策略与网络资源或进程相关联，分组策略相关进程，分组相关目标，将目标组与策略组相关联，将包含在策略中的用户名映射到相关网络地址，例如因特网协议 （IP）地址，并向客户端进程提供动态映射的策略标识的用户和主机名称以及相关联的网络地址（如IP地址）。