GB/T 37076—2018 信息安全技術 鑒別與授權 訪問控制中間件框架與接口附 錄 B （資料性附錄） 接口消息示例
A.1 概述
本章對本標準中的訪問控制接口的消息給出了采用XML描述的具體示例。
A.2 接口消息示例
A.2.1 決策管理登錄接口(IF-DM-Login)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<login>
<userId>user</userId>
<credential>"憑證信息的Base64編碼"</credential>
</login>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
<sessionId>0ED41D3E6BA1125A4FF0990128A511FE</sessionId>
</message>A.2.2 決策管理登出接口(IF-DM-Logout)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<logout>
<sessionId>0ED41D3E6BA1125A4FF0990128A511FE</sessionId>
</logout>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.3 決策管理配置接口(IF-DM-Config)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<config>
<policyStoragePoint>http://192.168.0.1/policies</policyStoragePoint>
<attributeIssuePoint>http://192.168.1.2/attributes</attributeIssuePoint>
<combiningAlg>DenyOveride</combiningAlg>
<supportPolicy>
<supprotPolicyType>XACML</supprotPolicyType>
<policySchema>"策略模式文件Base64編碼"</policySchema>
</supportPolicy>
<sessionId>0ED41D3E6BA1125A4FF0990128A511FE</sessionId>
</config>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.4 決策啟動接口(IF-DM-Start)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<start>
<selfTest>policyStoragePoint</selfTest>
<selfTest>attributeIssuePoint</selfTest>
<selfTest>CombiningAlg</selfTest>
<sessionId>0ED41D3E6BA1125A4FF0990128A511FE</sessionId>
</start>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.5 決策停止接口(IF-DM-Stop)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<stop>
<stopPattern>StopAllServices</stopPattern>
<sessionId>0ED41D3E6BA1125A4FF0990128A511FE</sessionId>
</stop>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.6 策略查詢支持類型接口(IF-PQ-SupportPT)
——輸出
<?xml version="1.0" encoding="utf-8"?>
<SupportPT>
<policyTypeID>XACML</ policyTypeID>
<policyTypeID >Ponder</policyTypeID>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</SupportPT>A.2.7 策略查詢返回類型接口(IF-PQ-ReturnPT)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<SetRetPolicyType>XACML</SetRetPolicyType>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.8 策略查詢查找模式接口(IF-PQ-SearchSchema)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<SetSearchPattern>AllPolicies</SetSearchPattern>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.9 策略查詢返回模式接口(IF-PQ-ReturnSchema)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<SetReturnPattern>SinglePolicy</ SetReturnPattern>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.10 策略查詢策略合并模式接口(IF-PQ-PolicyCombine)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<SetCombiningAlg>DenyOverride</SetCombiningAlg>——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.11 策略查詢獲取策略接口(IF-PQ-GetPolicy)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<getPolicyRequest>
<subject>user</subject>
<resource>test.txt</resource>
<action>read</action>
</getPolicyRequest>——輸出
<?xml version="1.0" encoding="utf-8"?>
<getPolicyResponse>
<policy>"訪問控制策略的BASE64編碼"</policy>
<policy>"訪問控制策略的BASE64編碼"</policy>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</getPolicyResponse>A.2.12 屬性查詢支持類型接口(IF-AQ-SupportAT)
——輸出
<?xml version="1.0" encoding="utf-8"?>
<SupportAT>
<attributeID>group</attributeID>
<attributeID>role</attributeID>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</SupportAT>A.2.13 屬性查詢支持格式接口(IF-AQ-SupportSchema)
——輸出
<?xml version="1.0" encoding="utf-8"?>
<supportSchema>
<schemaName>SAML</schemaName>
<schemaName>Certifcate</schemaName>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</supportSchema>A.2.14 屬性查詢返回格式接口(IF-AQ-ReturnSchema)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<SetReturnSchema>SAML</SetReturnSchema >——輸出
<?xml version="1.0" encoding="utf-8"?>
<message>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</message>A.2.15 屬性查詢獲取屬性接口(IF-AQ-GetAttribute)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<getAttributeRequest>
<userID>user</userID>
<attributeID>role</attributeID>
<Issuer>iscas</Issuer>
</getAttributeRequest>——輸出
<?xml version="1.0" encoding="utf-8"?>
<getAttributeResponse>
<attribute>
<attributeID>role</attributeID>
<atributeValue>manager</atributeValue>
</attribute>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</getAttributeResponse>A.2.16 跨域屬性查詢支持類型接口(IF-CDAQ-SupportAT)
——輸出
<?xml version="1.0" encoding="utf-8"?>
<SupportAT>
<attributeID>group</attributeID>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</SupportAT>A.2.17 跨域屬性查詢返回格式接口(IF-CDAQ-SupportSchema)
——輸出
<?xml version="1.0" encoding="utf-8"?>
<supportSchema>
<schemaName>SAML</schemaName>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</supportSchema>A.2.18 屬性查詢獲取屬性接口(IF-CDAQ-GetAttribute)
——輸入
<?xml version="1.0" encoding="utf-8"?>
<getAttributeRequest>
<userID>user</userID>
<attributeID>group</attributeID>
<Issuer>iscas</Issuer>
</getAttributeRequest>——輸出
<?xml version="1.0" encoding="utf-8"?>
<getAttributeResponse>
<attribute>
<attributeID>group</attributeID>
<atributeValue>Technology Department</atributeValue>
</attribute>
<messageCode>IF_RESULT_SUCCESS</messageCode>
</getAttributeResponse>
推薦文章：