An open network management architecture: OSI/NM Forum architectureand concepts

Several organizations are incorporating the architecture being developed by the Open Systems Interconnection/Network Management Forum into their network management products and systems. It is expected that, as this architecture develops, it will be the basis for multivendor exchange of network management data for the next five to ten years. This architecture and key concepts being developed by the Forum to allow the interoperation of several network management systems using an open interface are summarized. These apply to the full range of networks that must be managed, including computer and communication, local area, wide area international, voice (public and private), and packet data networks. The concepts covered include: Conformant Management Entity (CME), which is a management system that supports the interoperable interface defined by the Forum; managed objects, the abstract representations of the real resources to be managed; and the interoperable interface, which consists of a defined set of protocols (using the OSI seven-layer protocol stack) over which particular messages about managed objects are exchanged     

Development of an integrated network manager for heterogeneousnetworks using OSI standards and object-oriented techniques

The Federal Aviation Administration (FAA) is using an increasing number of interconnected, heterogeneous telecommunications networks. The FAA is looking at new ways of automating the operations and maintenance activities of these networks in a cost-effective manner in a rapidly changing environment. Open system interconnection (OSI) standards provide a structure for dealing with multivendor systems and network management problems, including mechanisms for monitoring, controlling, and coordinating resources, as well as protocol standards for communicating information about these resources. An example of a standards-based open system for network and services management is a prototype system being developed by the Center for Advanced Aviation System Development (CAASD) and the FAA for managing telecommunications networks and services at Air Route Traffic Control Centers (ARTCCs). This system, the Telecommunications ARTCC Prototype (TAP), is being developed to integrate the various existing communications management capabilities at the ARTCC into a single management system. Following OSI standards and object-oriented techniques provides a concept and structure for a distributed management architecture. The syntax and semantics for management information and functions specified in the standards provide an understanding and definition of the operations to be performed and the information to be collected and communicated. The paper provides an overview of the prototype architecture, describes how OSI standards and object-oriented techniques were applied and interpreted to meet the specific requirements of the ARTCC     

ISDN computer-aided telephony

It is argued that ISDN computer-aided telephony requires properly architected platforms to satisfy changing application needs during the 1990s. Proper architecting necessitates the use of functionally rich and consistent telephony application programming interfaces (APIs). Other APIs are also needed to support integrated applications. The coexistence of telephony and other APIs must be accommodated in the ISDN driver architecture to make efficient use of D-channel signaling and voice, data, or image communications on the associated B/H channels. This driver may support Open Systems Interconnection (OSI), Systems Network Architecture (SNA), X.25, or other protocol stacks in the same computer using a single ISDN access link. Applications being currently explored show that significant benefits can be realized using incoming call management and LAN-based image server access by means of ISDN. It is envisioned that by the year 2001, a common API will facilitate multimedia applications on multivendor platforms architected within the OSI framework. These platforms will support interconnections of public and private ISDNs and bridging to BISDNs     

Intelligent network control middleware platform

As multivendor, multitechnology networks are deployed in a carrier's network, a network operator must integrate these networks to have a unified control platform to lower operational costs and deliver customer-specified QoS. An intelligent network control middleware framework for multivendor networks is described in this article. The architectural framework is designed to control and manage next generation network elements as well as legacy telecom networks. The layers within the framework include mediation, control plane, network resource management, and application programmable interfaces. An independent, distributed control plane aims at service interoperability and network scalability. An experimental study on circuit provisioning using the proposed middleware framework is conducted on Sun Lab servers. The middleware performance results are reported. Experimentation architecture and metrics can be extended to a performance benchmark upon which the control plane products can be evaluated.     

The OpenView Enterprise Management Framework

In OpenView, Hewlett-Packard has concentrated on creating a multivendor management platform for TCP/IP-based internets. This plays to the company's strengths in LAN management, where it has been a major player in the LAN protocol analyzer market since the early 1980s, and its expertise in TCP/IP, which the company had been using internally since the early 1980s.     

基于树莓派的物联网开放平台

针对当前物联网所面对的共性需求,提出了建立开放性的物联网服务平台,为物联网世界提供开放的服务。完成了对传感器数据的接入、管理、存储、处理及应用。并以树莓派作为网关设备端进行图像数据的采集,通过Http或Socket.IO与云平台服务器建立连接,完成数据的实时传输。     

Secure multi‐factor remote user authentication scheme for Internet of Things environments

Because of the exponential growth of Internet of Things (IoT), several services are being developed. These services can be accessed through smart gadgets by the user at any place, every time and anywhere. This makes security and privacy central to IoT environments. In this paper, we propose a lightweight, robust, and multi‐factor remote user authentication and key agreement scheme for IoT environments. Using this protocol, any authorized user can access and gather real‐time sensor data from the IoT nodes. Before gaining access to any IoT node, the user must first get authenticated by the gateway node as well as the IoT node. The proposed protocol is based on XOR and hash operations, and includes: (i) a 3‐factor authentication (ie, password, biometrics, and smart device); (ii) mutual authentication ; (iii) shared session key ; and (iv) key freshness . It satisfies desirable security attributes and maintains acceptable efficiency in terms of the computational overheads for resource constrained IoT environment. Further, the informal and formal security analysis using AVISPA proves security strength of the protocol and its robustness against all possible security threats. Simulation results also prove that the scheme is secure against attacks.     

Standardization of femtocells in 3GPP2 - [femtocell wireless communications]

Driven by the need for multivendor interoperability of femtocell devices and their supporting infrastructure equipment, the cdma2000reg standards community has been undertaking a large-scale and comprehensive effort to develop industry standards for femtocell devices and systems based on the cdma2000 family of radio access technologies. This article describes those standardization activities and provides an overview of the femtocell system architecture that has been developed within 3GPP2.     

Managing networks in a multi-vendor environment

The Unified Network Management Architecture (UNMA), developed by AT&T to provide a base for network management in a multilevel environment, is discussed. The functions of data management addressed by UNMA are delineated. These comprise five functional areas recognized by the standards groups working in network management, namely configuration, faults, performance, accounting, and security, as well as the four functional areas of planning, operations, programmability, and integrated control specified by AT&T. The family of products introduced to support UNMA is described     

二层设备终端安全接入的设计与实现

可信网络连接规范从终端安全着手,通过一个开放的体系架构解决终端安全接入问题。但它只是一个框架性的概念,要想在二层设备上实现终端安全接入就必须通过802.1X协议来实现,而802.1X协议又是借助负载于二层的标准基于局域网的扩展论证协议（EAPOL）进行认证的。现通过扩展标准EAPOL,并将这种扩展应用于可信网络连接框架中,提出了一种实现二层设备安全接入的方法,同时该方法在某个接入系统中得到了实现。     

An implementation of the Common Network Management InformationService Element interfaces

The implementation of the Common Network Management Information Service Element (CMISE) interfaces and how they interact with the other protocol layers are investigated. The aim of the work described was to develop a network management system to monitor, analyze, and manage the interactions between a network agent connected to an open systems interconnection (OSI) network and the OSI resources that are used by the agent. An overview of the International Standards Organization Network Management Framework is followed by a discussion of the experimental system used, the Management Specific Application Service Elements (MSASE) services, CMISE service primitives, CMISE protocol functions used by the network manager system, the ACMISE (Agent CMISE) protocol used to respond to the remote operations requested by the CMISE services, interfaces devised for the network manager system, and examples of the usage of the network manager commands with their associated responses. It is concluded that the bulk of the intelligence associated with subnetwork management can be in the MSASE and the CMISE     

一种基于代理移动IPv6的全局移动性管理结构和协议

该文定义一种基于代理移动IPv6的全局移动性管理结构和协议,简称为PMIPGMM。 在PMIPGMM中,由网络实体而不是移动节点完成移动性管理, 另外消除了移动节点和接入路由器之间分发数据的无线链路隧道负荷。为与熟知的层次移动IPv6协议比较,基于液体流移动性模型,分别给出了每个协议下,移动节点在平均域停留时间内产生的位置更新、数据分发和总费用函数。分别研究了各种系统参数对费用函数的影响。分析结果表明所提出的基于代理移动IPv6的全局移动性管理协议可以保证低的总费用。     

以太网无源光网络系统中MIB的实现

以太网无源光网络是宽带接入的最有效方式之一。网络管理对于以太网无源光网络进入电信领域,增强以太网无源光网络设备的互通性有着重要意义。对提议的以太网无源光网络系统的管理信息库作一简单的介绍,并在Linux系统上开发代理,通过简单网络管理协议实现对以太网无源光网络系统的管理。     

Web Services‐based network management: approaches and the WSNET system

While the Simple Network Management Protocol (SNMP) is still the dominant protocol for managing network elements in IP‐based networks and the Internet, network managers are acknowledging its limitations with respect to configuration management, application development and decentralization of management tasks. Web Services (WS) have been recently proposed to alleviate these limitations, given their pertinence to both decentralized management paradigms (e.g., CORBA), and XML management systems which provide efficiency in configuration management operations. This paper reviews architectures for WS‐based network management, outlining their advantages and disadvantages. These architectures address management of both individual network elements and composite multi‐device networks. Moreover, the paper introduces the architecture of a prototype system for WS‐based network management, namely WSNET. Along with presentation of the WSNET system, we provide a set of experimental results reporting performance figures for the WSNET system, as well as for systems based on other WS architectures. These figures allow for a comparative evaluation of the various systems, and manifest the benefits of the WSNET implementation. An important conclusion from our work is that WS should be seen as an accompaniment to conventional SNMP management rather than a replacement. However, there are also cases (e.g., need for secure remote access) where WS serve as a core rather than auxiliary solution, given that conventional methods are not applicable. Copyright © 2006 John Wiley & Sons, Ltd.     

Optimized management of large-scale data sets stored on tertiary storage systems

We focus on extending RasDaMan's multidimensional query language using a new concept called object framing. With this extension, users no longer are restricted to performing range queries in the shape of multidimensional hypercubes. It can be able to formulate range queries by indicating complex frames. Thus, object framing represents a generalization of geometric operations. A new system, optimized toward high-performance computing, extends the RasDaMan (Raster Data Management) database management system to allow flexible management of multidimensional spatiotemporal data and to reduce tertiary storage access time.     

校园综合门禁管理平台的设计

针对当前高校门禁管理建设中多系统多卡、门禁流水数据分散、扩展性能差等问题,在分析已有系统架构的基础上,提出了以感知层、传输层、应用层为核心的校园综合门禁管理平台三层框架设计,通过统一校园卡介质及授权、实施分级管理及门禁联网、全面规范接入标准、集中存储数据流水等手段,实现基于校园卡门禁应用数据的统一处理。该设计方案不仅能方便高校门禁应用的管理,而且为开展基于门禁数据挖掘及支撑领导决策奠定基础。     

Concepts, Activities and Issues of Policy-based Communications Management

Policy-based management is an approach that has been considered for some years within the distributed systems management research community. The concepts have recently been adopted by standards bodies including the International Telecommunications Union (ITU), Internet Engineering Task Force (IETF), Desktop Management Taskforce (DMTF) and Object Management Group (OMG) and are starting to appear in marketing literature for Internet protocol (IP) network management products. The meaning of the term is not well-defined nor consistently used, but common aspects of policy include that it changes a system' behaviour, that it is defined after system deployment, and that it does not require a full software development life cycle. Technical problems remain which need to be solved before the full ambitions of policy-based management can be achieved. Initial products are likely to address only a sub-set of the full potential and to exist in niche domains.     

iMobile EE – An Enterprise Mobile Service Platform

iMobile is an enterprise mobile service platform that allows resource-limited mobile devices to communicate with each other and to securely access corporate contents and services. The original iMobile architecture consists of devlets that provide protocol interfaces to different mobile devices and infolets that access and transcode information based on device profiles. iMobile Enterprise Edition (iMobile EE) is a redesign of the original iMobile architecture to address the security, scalability, and availability requirements of a large enterprise such as AT&T. iMobile EE incorporates gateways that interact with corporate authentication services, replicated iMobile servers with backend connections to corporate services, a reliable message queue that connects iMobile gateways and servers, and a comprehensive service profile database that governs operations of the mobile service platform. The iMobile EE architecture was also extended to provide personalized multimedia services, allowing mobile users to remotely control, record, and request video contents. iMobile EE aims to provide a scalable, secure, and modular software platform that makes enterprise services easily accessible to a growing list of mobile devices roaming among various wireless networks.     

电力企业数据资产管理平台功能研究

信息和数据是智能电网建设实现电网资产高效利用和全寿命周期管理、电力用户与电网之间的便捷互动等目标的基础,公司运营分析和有效管理的核心资源,将数据进行资产化并进行有效管理,是后续数据分析、挖掘的基础,通过数据的分析挖掘可有效发现公司生产、运行及管理过程规律,提高企业数据共享交换范围和效率,为真正满足智能电网建设和发展奠定坚实的数据基础、为公司做出有效决策提供有利依据.数据资产管理平台功能方面主要包括数据资产管理需涉及的数据架构、数据生命周期管理、数据模型、数据标准管理、数据质量管理、主数据管理、元数据管理和数据安全管理等功能,为实现公司未来数据资产管理平台建设提供有力支撑.