OSI目录服务中的一个安全机制的实施

IMPLEMENTATION OF A MECHANISM IN THE OSI DIRECTORY

ＯＳＩ目录服务（ＴｈｅＯＳＩＤｉｒｅｃｔｏｒｙ），也称之为Ｘ．５００协议（ＴｈｅＸ．５００Ｐｒｏｔｏｃｏｌ），为用户在网络环境下提供了存储信息的方式，并可获得全局目录服务。ＱＵＩＰＵ，由伦敦大学院ＵＣＬ（ＵｎｉｖｅｒｓｉｔｙＣｏｌｌｅｇｅＬｏｎｄｏｎ）计算机科学系开发的目录服务系统，是Ｘ．５００协议的典型实施。本文描述的ＧｕａｒｄｉａｎＤＳＡ为用户提供一种在ＱＵＩＰＵ中防止非授权用户潜在威胁的保护方法，其目的在于确保只有被授权的用户才可存取他们需要的目录信息。

The OSI Directory,also referred icas X. 500 Protocol, providesa powerful access for users to store information,such as addresses and databases on a local server, and to obtain a truly global directory service, in Which users can easily query, exchange and updatethat informatioll in an interoperable networked environment. QUIPU is the typical implementation of the X. 500 Protocol, which was developed at the Department of Computer Science at University College London(UCL). In practice it is necessary to provide the security mechanisms which protect information against attacks from unauthorized users. The Guardian DSA aims at ensuring only authorized users access their corporate directory information. This paper is concerned with the implementation of the Guardian DSA,which gives a way to protect the transfer of information from potential threats by the unauthorized users in the global directory service based on the QUIPU.