semi合集-English.pdf - 第3372页

SEMI E132-0305 © SEMI 2004, 2005 25 # Current State Trigger Ne w State Actions Comments 10 ESTABLISHED Equipment is shutting down or is in emergency down, and session is persistent FROZEN SessionFrozen notification is se…

100%1 / 7923
SEMI E132-0305 © SEMI 2004, 2005 24
# Current State Trigger New State Actions Comments
2 AUTHENTICATING Client or equipment
failed to authenticate,
an error occurred
during the process, or
the client has no
corresponding
ACLEntry.
(no state) Error reported and
connection is terminated.
3 AUTHENTICATING Request to establish
new session received
but max session limit
would be exceeded, or
request is for a new
admin session and
there is already an
active admin session.
(no state) Error reported and
connection is terminated.
4 AUTHENTICATING Client and equipment
successfully
authenticated with no
errors and the request
to establish new
session was successful.
ESTABLISHED Equipment enters the
COMMUNICATING and
MONITORING sub-states
for the session. Active
session count is
incremented if non-admin
session.
5 ESTABLISHED Entry to
COMMUNICATING,
client authenticated and
a session is established
or resumed.
READY Equipment is waiting for
service requests for this
session.
COMMUNICATING
and MONITORING
are concurrent sub-
states of
ESTABLISHED.
6 READY Equipment receives a
client request for
service.
READY Equipment verifies session
id and permission for the
client to execute requested
service based on granted
privileges.
7 ESTABLISHED Entry to
MONITORING, client
authenticated and a
session is established
or resumed.
SESSION MONITOR Equipment sends a ping
message to client to
indicate session is
established. When
resuming persistent
sessions during startup,
indicates equipment is
now online.
Concurrent with
COMMUNICATING
state.
8 SESSION MONITOR Ping delay timer
reached
SESSION MONITOR Equipment sends ping
message to client. If ping
is not replied within
configurable timeout, or
after the configured
number of retries, the
session will be closed by
equipment.
See Section 14.3.2.7.
9 ESTABLISHED Client or
SecurityAdmin request
to terminate session,
equipment is shutting
down, or
communication errors
have been detected by
the equipment.
CLOSING Equipment properly closes
session and clears any
state information.
SessionClosed notification
is sent to client (if
possible).
See Sections 14.3.2.3
and 13.1.4 for
discussion of
equipment response to
communication errors.
SEMI E132-0305 © SEMI 2004, 2005 25
# Current State Trigger New State Actions Comments
10 ESTABLISHED Equipment is shutting
down or is in
emergency down, and
session is persistent
FROZEN SessionFrozen notification
is sent to client (if
possible).
Applies to sessions that
are persistent only, see
PersistSession
(Section 13.2.3).
11 FROZEN Equipment has
completed startup or
has otherwise entered a
state where it is able to
resume authenticated
session
communications.
ESTABLISHED Session context including
client endpoint, client id,
session id etc is restored
from non-volatile memory.
MONITORING and
COMMUNICATING sub-
states will be entered, see
transition 7 for
notifications to client on
online status.
In attempting to
resume a frozen
session, the client may
not actually be
reachable by the
equipment. In such
cases, the session will
eventually be closed
according to the
SessionPing messages
sent from the
SessionMonitor sub-
state (see transitions 8
and 9).
12 CLOSING Session terminated (no state) Session is deleted and
active session count
decremented if non-admin
session.
15 Client Interface
15.1 This section specifies the interface that the equipment shall use to communicate security related information
and requests/events to authenticated clients with established sessions.
Figure 17
Session Client Interface
Table 35 Session Client Operations
Operation Description Type Requestor/
Sender
Responder/
Receiver
SessionPing Used by equipment to check if client is still active. RR Equipment Client
SessionFrozen Notification to client that current session will be frozen. FF Equipment Client
SessionClosed Used by equipment to close an active session. RR Equipment Client
15.1.1 SessionPing — Upon receiving this request, the client shall reply with its id. The client id returned must be
the same one used by the client during the authentication phase. See the Session Monitoring state defined in Section
14.3.2.7, regarding behavior of established authenticated sessions in the event of ping timeouts.
Table 36 SessionPing Parameter Definitions
Parameter Description Kind Form
clientId Id of the client responding to the ping message. OUT Text, equal to the client Id
used in authentication phase.
«interface»
SessionClient
SessionFrozen()
SessionPing()
SessionClosed()
SEMI E132-0305 © SEMI 2004, 2005 26
Parameter Description Kind Form
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
15.1.2 SessionFrozen — This is a notification message sent by the equipment to notify clients with persistent
sessions that communications will be put on hold, either due to communications disabled or equipment shutdown.
From the client’s perspective, this means session pings will not be answered by the equipment and no notifications
will be sent by the equipment until a ping message is received from the equipment indicating that the session is
again resumed. The equipment shall send one notification for each persistent session. See session state transitions
(Table 31) into and out of frozen state for respective behavior on freezing and resuming sessions.
15.1.2.1 There are no parameters associated with this service.
15.1.3 SessionClosed — This is a notification message sent by the equipment to notify the client that this session is
being terminated, and is sent whenever a session is closed.
Table 37 SessionClosed Parameter Definitions
Parameter Description Kind Form
sessionId Identifier of the session being terminated. IN Text, equal to the id of the
session being terminated.
16 Compliance
16.1 Fundamental Requirements
16.1.1 This specification defines the standard services and mechanisms to support authentication of clients to the
equipment for session establishment and access control and to support credential and privilege/policy
administrations. Not all capabilities need to be supported for a particular implementation. The following constitutes
fundamental security requirements that all compliant implementations must support:
Authentication services and state model, Section 10
Authorization, Section 11
Session and ACL administration, Section 11.2.10.3
Authenticated session management, Sections 13 and 15
All communication and authenticated session state models, Section 14
16.2 Optional Capabilities
16.2.1 The following capabilities defined in this standard can optionally be implemented depending on the needs of
the equipment:
Equipment console administration interface, Section 12.4
NOTICE: SEMI makes no warranties or representations as to the suitability of the standards set forth herein for any
particular application. The determination of the suitability of the standard is solely the responsibility of the user.
Users are cautioned to refer to manufacturer's instructions, product labels, product data sheets, and other relevant
literature, respecting any materials or equipment mentioned herein. These standards are subject to change without
notice.
By publication of this standard, Semiconductor Equipment and Materials International (SEMI) takes no position
respecting the validity of any patent rights or copyrights asserted in connection with any items mentioned in this
standard. Users of this standard are expressly advised that determination of any such patent rights or copyrights, and
the risk of infringement of such rights are entirely their own responsibility.
Copyright by SEMI® (Semiconductor Equipment and Materials
International), 3081 Zanker Road, San Jose, CA 95134. Reproduction of
the contents in whole or in part is forbidden without express written
consent of SEMI.