semi合集-English.pdf - 第3364页

SEMI E132-0305 © SEMI 2004, 2005 17 Table 23 Unrecognize dPrivilegeError A ssociation Definitions Attribute Name Definition Form requiredPrivileges List of one or more privileges not recognized b y the equipment. List of…

100%1 / 7923
SEMI E132-0305 © SEMI 2004, 2005 16
Parameter Description Kind Form
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.3 Type Definitions
12.3.3.1 UnauthorizedOperationError — This class describes an authorization error associated with a specific
operation.
description
UnauthorizedOperationError
privilege Id
Privilege
1
+requiredPrivileges
1..*
Figure 9
UnauthorizedOperationError Description
Table 20 UnauthorizedOperationError Attribute Definitions
Attribute Name Definition Form
description Description of error. Text, including name of operation
and any important context
information associated with
original request.
Table 21 UnauthorizedOperationError Association Definitions
Attribute Name Definition Form
requiredPrivileges List of one or more privileges that grant authorization for the requested
operation.
List of one or more elements of
type Privilege, Section 11.2.10.
12.3.3.2 UnrecognizedPrivilegeError — This class describes an error where one or more privileges are not
recognized by the equipment.
description
UnrecognizedPrivilegeError
privilege Id
Privilege
1
+unrecognizedPrivileges
1..*
Figure 10
UnrecognizedPrivilegeError Description
Table 22 UnrecognizedPrivilegeError Attribute Definitions
Attribute Name Definition Form
description Description of error. Text, including name of operation
and any important context
information associated with
original request.
SEMI E132-0305 © SEMI 2004, 2005 17
Table 23 UnrecognizedPrivilegeError Association Definitions
Attribute Name Definition Form
requiredPrivileges List of one or more privileges not recognized by the equipment. List of one or more elements of
type Privilege, Section 11.2.10.
12.3.3.3 DefinedPrivilege — This class is used to describe privileges supported by the equipment. The equipment
shall maintain the list of supported privileges in non-volatile memory.
Figure 11
DefinedPrivilege Description
Table 24 DefinedPrivileges Attribute Definitions
Attribute Name Definition Form
privilegeId Identifier for the privilege, same as id of privilege in ACL definition. Referred
to by the Security Admin in defining ACL entries.
Text, unique across all
Privileges.
description A human-readable description of the privilege clearly describing the
consequences of granting this privilege to a Principal.
Text.
12.3.3.4 ActiveSession — This class describes an active session on the equipment. Not all communication protocols
require the specification of a separate endpoint. Any implementation of this specification must define requirements
for the presence or absence of the endpoint information provided for sessions (see Section 13.2.6).
Figure 12
ActiveSession Description
Table 25 ActiveSession Attribute Definitions
Attribute Name Definition Form
sessionId Unique session identifier established between the client
and the equipment.
Text.
isPersistent Whether session is persistent or not, see Section 13.2.3
regarding making sessions persistent.
Boolean.
clientId Client identifier as authenticated by the equipment. Text.
clientId
1 0..1
url
isPersistent
sessionId
ActiveSession
sessionEndPoint
EndPoint
HTTPEndPoint
DefinedPrivilege
description
privilegeId
SEMI E132-0305 © SEMI 2004, 2005 18
Table 26 ActiveSession Association Definitions
Association Role Name Definition Comments
sessionEndPoint Addressing information for sending notifications to the
authenticated Principal.
Structured data, of any type derived from
EndPoint, defined in Section 12.3.3.4.1.
12.3.3.4.1 EndPoint — An abstract data type used to describe a communication end point. This specification only
defines end points using the HTTP protocol, although others are possible depending on the communication protocol.
Any implementation of this specification must define requirements for the support of separate endpoint addresses,
and any additional EndPoint subclasses required for the communication protocol used. This class has no attributes
or associations.
12.3.3.4.2 HTTPEndPoint — This class is used to describe addressing information that the equipment is to use for
sending notifications to clients where the communication protocol in use is based on HTTP.
Table 27 HTTPEndPoint Attribute Definitions
Attribute Name Definition Form
url HTTP URL of communication end point. Text, formatted according to the IETF RFC 2396
specification for URL syntax.
12.4 Equipment Console Interfaces
12.4.1 The equipment manufacturer shall provide access to the SecurityAdmin operations from the equipment
console.
13 Session Communications
13.1 Session Message Flow — Figure 13 shows an example of a typical message flow for an authenticated
communication session.
Client Equipment
Session Establishment
Service Request/Response
Close Session
Session Closed
Verify Authorizations
Client Authenticated
.
.
Authentication
Session Established
Figure 13
Session Message Flow
13.1.1 Authentication — Authentication message flow as described in Section 10 in which both client and
equipment mutually verify each other’s identity.