【英文标准名称】:Informationtechnology-Opensystemsinterconnection-Upperlayerssecuritymodel
【原文标准名称】:信息技术.开放式系统互连.上层加密模式
【标准号】:BSISO/IEC10745-1995
【标准状态】:现行
【国别】:英国
【发布日期】:1995-12-15
【实施或试行日期】:1995-12-15
【发布单位】:英国标准学会(GB-BSI)
【起草单位】:BSI
【标准类型】:()
【标准水平】:()
【中文主题词】:安全措施;数据安全;验证;通信规程;通路;信息交流;数据处理;应用层(开放系统互连);对话层;表示层;开放系统互连;数据传输;管理
【英文主题词】:Communicationprocedures;Dataprocessing;Datasecurity;Informationinterchange;Informationtechnology;Networkinterconnection;Opensystemsinterconnection;OSI;Safetyrequirements
【摘要】:1ThisRecommendation|InternationalStandarddefinesanarchitecturalmodelthatprovidesabasisfor:a)thedevelopmentofapplication-independentservicesandprotocolsforsecurityintheupperlayersofOSI;andb)theutilizationoftheseservicesandprotocolstofulfilthesecurityrequirementsofawidevarietyofapplications,sothattheneedforapplication-specificASEstocontaininternalsecurityservicesisminimized.2Inparticular,thisRecommendation|InternationalStandardspecifies:a)thesecurityaspectsofcommunicationintheupperlayersofOSI;b)thesupportintheupperlayersofthesecurityservicesdefinedintheOSISecurityArchitectureandtheSecurityFrameworksforOpenSystems;c)thepositioningof,andrelationshipsamong,securityservicesandmechanismsintheupperlayers,accordingtotheguidelinesofCCITTRec.X.800IISO7498-2andITU-TRec.X.207|ISO/IEC9545.d)theinteractionsamongtheupperlayers,andinteractionsbetweentheupperlayersandthelowerlayers,inprovidingandusingsecurityservices;e)therequirementformanagementofsecurityinformationintheupperlayers.3Withrespecttoaccesscontrol,thescopeofthisRecommendation|InternationalStandardincludesservicesandmechanismsforcontrollingaccesstoOSIresourcesandresourcesaccessibleviaOSI.4ThisRecommendation|InternationalStandarddoesnotinclude:a)definitionofOSIservicesorspecificationofOSIprotocols;b)specificationofsecuritytechniquesandmechanisms,theiroperation,andtheirprotocolrequirements;orc)aspectsofprovidingsecuritywhicharenotconcernedwithOSIcommunications.5ThisRecommendation|InternationalStandardisneitheranimplementationspecificationforsystemsnorabasisforappraisingtheconformanceofimplementations.NOTE-ThescopeofthisRecommendation|InternationalStandardincludessecurityforconnectionlessapplicationsandfordistributedapplications(suchasstore-and-forwardapplications,chainedapplications,andapplicationsactingonbehalfofotherapplications).
【中国标准分类号】:L79
【国际标准分类号】:35_100_01
【页数】:28P.;A4
【正文语种】:英语