semi合集-English.pdf - 第3373页

SEMI E132-0305 © SEMI 2004, 2005 26 Parameter Description Kind Form error Unrecognized session. erro r Text, equal to unrecognized session error, including the bad session id. 15.1.2 SessionFroze n — This is a notificati…

100%1 / 7923
SEMI E132-0305 © SEMI 2004, 2005 25
# Current State Trigger New State Actions Comments
10 ESTABLISHED Equipment is shutting
down or is in
emergency down, and
session is persistent
FROZEN SessionFrozen notification
is sent to client (if
possible).
Applies to sessions that
are persistent only, see
PersistSession
(Section 13.2.3).
11 FROZEN Equipment has
completed startup or
has otherwise entered a
state where it is able to
resume authenticated
session
communications.
ESTABLISHED Session context including
client endpoint, client id,
session id etc is restored
from non-volatile memory.
MONITORING and
COMMUNICATING sub-
states will be entered, see
transition 7 for
notifications to client on
online status.
In attempting to
resume a frozen
session, the client may
not actually be
reachable by the
equipment. In such
cases, the session will
eventually be closed
according to the
SessionPing messages
sent from the
SessionMonitor sub-
state (see transitions 8
and 9).
12 CLOSING Session terminated (no state) Session is deleted and
active session count
decremented if non-admin
session.
15 Client Interface
15.1 This section specifies the interface that the equipment shall use to communicate security related information
and requests/events to authenticated clients with established sessions.
Figure 17
Session Client Interface
Table 35 Session Client Operations
Operation Description Type Requestor/
Sender
Responder/
Receiver
SessionPing Used by equipment to check if client is still active. RR Equipment Client
SessionFrozen Notification to client that current session will be frozen. FF Equipment Client
SessionClosed Used by equipment to close an active session. RR Equipment Client
15.1.1 SessionPing — Upon receiving this request, the client shall reply with its id. The client id returned must be
the same one used by the client during the authentication phase. See the Session Monitoring state defined in Section
14.3.2.7, regarding behavior of established authenticated sessions in the event of ping timeouts.
Table 36 SessionPing Parameter Definitions
Parameter Description Kind Form
clientId Id of the client responding to the ping message. OUT Text, equal to the client Id
used in authentication phase.
«interface»
SessionClient
SessionFrozen()
SessionPing()
SessionClosed()
SEMI E132-0305 © SEMI 2004, 2005 26
Parameter Description Kind Form
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
15.1.2 SessionFrozen — This is a notification message sent by the equipment to notify clients with persistent
sessions that communications will be put on hold, either due to communications disabled or equipment shutdown.
From the client’s perspective, this means session pings will not be answered by the equipment and no notifications
will be sent by the equipment until a ping message is received from the equipment indicating that the session is
again resumed. The equipment shall send one notification for each persistent session. See session state transitions
(Table 31) into and out of frozen state for respective behavior on freezing and resuming sessions.
15.1.2.1 There are no parameters associated with this service.
15.1.3 SessionClosed — This is a notification message sent by the equipment to notify the client that this session is
being terminated, and is sent whenever a session is closed.
Table 37 SessionClosed Parameter Definitions
Parameter Description Kind Form
sessionId Identifier of the session being terminated. IN Text, equal to the id of the
session being terminated.
16 Compliance
16.1 Fundamental Requirements
16.1.1 This specification defines the standard services and mechanisms to support authentication of clients to the
equipment for session establishment and access control and to support credential and privilege/policy
administrations. Not all capabilities need to be supported for a particular implementation. The following constitutes
fundamental security requirements that all compliant implementations must support:
Authentication services and state model, Section 10
Authorization, Section 11
Session and ACL administration, Section 11.2.10.3
Authenticated session management, Sections 13 and 15
All communication and authenticated session state models, Section 14
16.2 Optional Capabilities
16.2.1 The following capabilities defined in this standard can optionally be implemented depending on the needs of
the equipment:
Equipment console administration interface, Section 12.4
NOTICE: SEMI makes no warranties or representations as to the suitability of the standards set forth herein for any
particular application. The determination of the suitability of the standard is solely the responsibility of the user.
Users are cautioned to refer to manufacturer's instructions, product labels, product data sheets, and other relevant
literature, respecting any materials or equipment mentioned herein. These standards are subject to change without
notice.
By publication of this standard, Semiconductor Equipment and Materials International (SEMI) takes no position
respecting the validity of any patent rights or copyrights asserted in connection with any items mentioned in this
standard. Users of this standard are expressly advised that determination of any such patent rights or copyrights, and
the risk of infringement of such rights are entirely their own responsibility.
Copyright by SEMI® (Semiconductor Equipment and Materials
International), 3081 Zanker Road, San Jose, CA 95134. Reproduction of
the contents in whole or in part is forbidden without express written
consent of SEMI.
SEMI E132.1-0305 © SEMI 2005 1
SEMI E132.1-0305
PROVISIONAL SPECIFICATION FOR SOAP BINDING FOR
EQUIPMENT CLIENT AUTHENTICATION AND AUTHORIZATION (ECA)
This provisional specification was technically approved by the Global Information & Control Committee and
is the direct responsibility of the North American Information & Control Committee. Current edition
approved by the North American Regional Standards Committee on December 10, 2005. Initially available
at www.semi.org February 2005; to be published March 2005.
Table of Contents
1 Purpose.......................................................................................................................................................................4
1.1 Specification Purpose ..........................................................................................................................................4
2 Scope ..........................................................................................................................................................................4
2.1 Specification Scope..............................................................................................................................................4
3 Limitations..................................................................................................................................................................4
3.1 Provisional Specification.....................................................................................................................................4
4 Referenced Standards .................................................................................................................................................4
4.1 SEMI Standards...................................................................................................................................................4
4.2 OMG Standards...................................................................................................................................................4
4.3 W3C Standards....................................................................................................................................................5
4.4 Other Standards ...................................................................................................................................................5
5 Terminology ...............................................................................................................................................................5
5.1 Abbreviations and Acronyms...............................................................................................................................5
5.2 Definitions ...........................................................................................................................................................5
6 Conventions................................................................................................................................................................6
6.1 Translating UML to XML Schema.......................................................................................................................6
6.2 Documenting XML Schema and WSDL Files ......................................................................................................7
6.3 Documenting XML Schema with Diagrams.........................................................................................................7
6.4 XML Schema Sample...........................................................................................................................................8
6.5 Translating UML to WSDL..................................................................................................................................9
7 SEMI E132 Authentication Mapping to SSL ...........................................................................................................10
7.1 SSL Overview.....................................................................................................................................................10
7.2 Credentials and Digital Certificates..................................................................................................................11
7.3 Enabling/Disabling SSL Authentication ............................................................................................................13
8 Mapping of SEMI E132 UML to XML Schema and WSDL ...................................................................................13
8.1 WSDL Organization...........................................................................................................................................13
8.2 SecurityAdmin Interface ....................................................................................................................................14
8.3 SessionManager Interface .................................................................................................................................33
8.4 SessionClient Interface......................................................................................................................................41
List of Figures
Figure 1 XML Schema Example Diagram ....................................................................................................................8
Figure 2 XML for Sample .............................................................................................................................................9
Figure 3 SSL Basic Handshake Flow ..........................................................................................................................11
Figure 4 SEMI E132.1 Security Credentials................................................................................................................12
Figure 5 XML Schema and WSDL File Organization ................................................................................................14
Figure 6 XML Schema and WSDL files for SEMI E132............................................................................................14
Figure 7 Mapping the SecurityAdmin interface to a WSDL portType........................................................................15
Figure 8 Sample SecurityAdmin WSDL Service definition........................................................................................16
Figure 9 UnauthorizedOperationType XML Schema Type ........................................................................................17
Figure 10 E132Header XML Schema Element ...........................................................................................................18
Figure 11 GetDefinedPrivilegesRequest XML Schema Element................................................................................19
Figure 12 GetDefinedPrivilegesResponse XML Schema Element .............................................................................19
Figure 13 DefinedPrivilegesType XML Schema Type ...............................................................................................19