CN101351993A

CN101351993A - Method and system for light-weight soap transport for web services based management

Info

Publication number: CN101351993A
Application number: CNA2007800010567A
Authority: CN
Inventors: 赫梅尔·谢
Original assignee: Zyray Wireless Inc
Current assignee: Broadcom Corp; Zyray Wireless Inc
Priority date: 2006-01-12
Filing date: 2007-01-12
Publication date: 2009-01-21
Anticipated expiration: 2027-01-12
Also published as: KR101200875B1; WO2007084369A2; HK1127830A1; WO2007084369A3; KR20080092332A; CN101351993B; EP1977557A2

Abstract

Certain aspects of a method and system for light-weight simple object access protocol (SOAP) transport for web services based management are disclosed. Aspects of a method may include managing a system using a simple object access protocol (SOAP) message that is mapped over one or both of: a remote management and control protocol (RMCP) and a RMCP security extensions protocol (RSP) to enable remote management of systems using Web services in out-of-band (OOB) management devices.

Description

A kind of method and system of lightweight Simple Object Access Protocol transmission of management of service Network Based

Technical field

The present invention relates to field of network communication.More particularly, the present invention relates to a kind of method and system of lightweight Simple Object Access Protocol (SOAP) transmission of Service Management Network Based.

Background technology

The network service system is based on one group of standard, this group normalized definition abundant based on network function, and by layout to satisfy demand for services miscellaneous.The network service system is used in field of system management, but riser ought to be used and by the collaborative between the resource of managing like this.The network service system can the recognition network service regulation and the core set of user demand, is the general collection for the main operation that discloses system management like this.For example, standard can be used in the existence of finding management resource, and navigates between them.By adjusting, individual other management resource is generated, rename or deletion.

For the tectonic network service realizes, web service specifications definable Minimal Realization demand.The realization of web service specifications can freely be expanded and exceed this operation set, perhaps, if this functionally is not suitable for target device or is to select not support one or more functional domains.

The network service can be from containing, self-described, the modular applications that can come forth under network environment, locate and call.(Web service definition language WSDL) can make the ISP describe the basic format of network service request by different agreement or coding to web service definition language.The network service can be the set of internet destination or port.In WSDL, the abstract definition of terminal point and message can be separated with their concrete network configuration or data format binding, this is for the re-using of the abstract definition that allows message and port type, and message is promptly by the abstractdesription of mutual data, the abstract set that port type is promptly operated.The concrete agreement of particular port type and data format specifications can be formed the binding (binding) that can use once again.Can define port by the network address is associated with the binding that can use once again, service of port set definable.

The technology in the very wide scope can be described in term " system manageability ", no matter be that operating system is online or the environment that operating system is not online under, this technology can remote system conducts interviews and controls.These technology mainly concentrate on and minimize field data technology (information technology, IT) Xiang Guan maintenance, the maximization system is to local user's availability and performance, maximize long-range observability and IT manager visit, keep this to be connected complete needed system capacity consumption with minimizing to local system.

The computer system management of service Network Based is popularized gradually.For the OOB management equipment that occurs in the system, network controller and baseboard management controller (baseboard managementcontrollers for example, BMC), band outer (out-of-band, OOB) or use the system remote of network service to manage in the not online environment of operating system to have produced important challenge.

Compare the follow-up system that will introduce in conjunction with the accompanying drawings of the present invention, other limitation of prior art and drawback are conspicuous for the person of ordinary skill of the art.

The invention brief introduction

A kind of method and/or system of lightweight Simple Object Access Protocol transmission of Service Management Network Based have carried out sufficient demonstration and/or description in conjunction with at least one width of cloth accompanying drawing, and more complete elaboration is arranged in the claims.

From following accompanying drawing with describing, these other advantages of the present invention, aspect and novel feature, and the details of embodiment will more fully be understood.

Description of drawings

Figure 1A is the block diagram according to the demonstration system that has the Simple Object Access Protocol that shines upon by RMCP/RSP of the embodiment of the invention;

Figure 1B is the block diagram according to the main frame that has network interface hardware of the embodiment of the invention;

Fig. 1 C is the block diagram of the demonstration client-server system that can be used in combination with the embodiment of the invention;

Fig. 2 is the block diagram according to the WS-MAN storehouse of having of different embodiments of the invention of all kinds of SOAP transmission;

Fig. 3 be according to the embodiment of the invention can with the WS-MAN storehouse of ASF storehouse coexistence, described ASF storehouse has and migration path (migration path) from the ASF storehouse to the WS-MAN storehouse;

Fig. 4 is the example steps flow chart of handling according to RMCP grouping the carrying out outbound message to Service Management Network Based of the embodiment of the invention;

Fig. 5 is the example steps flow chart of handling according to RMCP grouping the carrying out inbound messages to Service Management Network Based of the embodiment of the invention.

Embodiment

Embodiments of the invention have been introduced a kind of method and system of lightweight Simple Object Access Protocol transmission of Service Management Network Based.The one side of these method and system comprises the use Simple Object Access Protocol

(SOAP) message management system, this message are by one or two mapping in following: telemanagement and control protocol (RMCP) and RMCP security extensions protocol (RSP), thus use the network service in outer (OOB) management equipment of band to come long-distance management system.

Figure 1A is the block diagram according to the demonstration system that has the Simple Object Access Protocol that shines upon by RMCP/RSP of the embodiment of the invention.With reference to Figure 1A, shown Simple Object Access Protocol (SOAP) module 102, telemanagement and control protocol (RMCP) module 104, RMCP security extensions protocol (RSP) module 106, User Datagram Protoco (UDP) (UDP) module 108, Internet protocol (IP) module 110, medium access control (MAC) layer and physics (PHY) layer (MAC/PHY) module 112.

Medium access control/physical layer block 112 comprises suitable logic, and circuit and/or coding are used to control the media that visit is shared in two or more inter-entity.Medium access control/physical layer block 112 comprises MAC Address, and this MAC Address all is unique concerning each network interface controller (NIC).Medium access control/physical layer block 112 can and be decoded into bit with data packet coding.Medium access control/physical layer block 112 can provide transportation protocol message and management, and handles the mistake in physical layer, flow control and the frame synchronization.Medium access control/physical layer block 112 can be controlled the computer to access that how to make on the network and to data and permission it be transmitted.Network by the motor level comes transmission bit stream, for example electric pulse, light or radio signal, and medium access control/physical layer block 112 can be come transmission information by the physical media that connects two equipment.Medium access control/physical layer block 112 is provided at the hardware that transmits and receive data on the carrier, for example, and cable.Medium access control/physical layer block 112 is corresponding with the bottom of for example network reference model.

The Ethernet structure comprises ethernet header 134, ethernet payload 136 and the Cyclic Redundancy Check field 138 relevant with medium access control/physical layer block 112.Ethernet header field 134 comprises Ethernet destination address and ethernet source address, and frame type for example.Ether payload 136 comprises the Ethernet message that a part is used to transmit user profile.Cyclic Redundancy Check field 138 comprises with the CRC data validation calculates relevant data.Cyclic Redundancy Check field 138 can be used to detect data transmission fault.

IP module 110 map network layers.Network layer definition internet function, and can receive the data of a computer to another computer, even it is on the telecommunication network.IP datagram comprises IP header 130 and the IP payload 132 relevant with IP module 110.IP header 130 comprises version and header length field, type of service field, total length field, identification field, tag field, life span (time to live) field, protocol fields, header checksum field, source IP address field and purpose IP address field.

UDP module 108 is on IP module 110 upper stratas.UDP module 108 corresponding transport layers.Transport layer can be followed the trail of the data from each application, and it is merged into individual traffic, and it is transferred to more bottom.Transport layer can be responsible for defining potential a large amount of application data equally and be carried out transmission manner by segmentation.UDP module 108 can send data between application process, do not have some reliability and the workflow management attribute of TCP, but has greatly improved efficient.UDP datagram comprises UDP header 126 and the UDP payload 128 relevant with UDP module 108.UDP header 126 comprises source port field, destination interface field, UDP length field and UDP checksum field.

RSP module 106 is broadcast (ati-replay) service for RMCP message provides integrality and bob-weight.RSP message comprises RSP header 120, RSP payload 122 and RSP telegram end (trailer) 124.When RSP was used, whole RMCP message was packaged into RSP header 120 and RSP telegram end 124.RSP header 120 is inserted between UDP header 126 and the RMCP header 116.RSP telegram end 124 is positioned at the end of RMCP message data module, and security extension is applied on the UDP layer.

RSP header 120 comprises 2 fields, for example, and session identification and sequence number.Session identification is the numeral arbitrarily by each entity selection, and (RSP session protocol, RSSP) open session request/response message comes mutual to use the RSP session protocol.Session identification is used for discerning the special session state of handling particular message.Sequence number is used for to broadcast service for message provides bob-weight in company with sliding (sliding) receive window together.Sequence number is the unique monotonically increasing numeral that is inserted into header by the sender.When producing session, sequence number is initialized to 0, for given message, in the beginning of inbound processing, increases one by one.Around being back to before 0, produce new session at sequence number.

RSP telegram end 124 comprises 4 fields, for example, fills (pad) field, fills length field, next header fields and integrity data field.Fill field and provide data word alignment (alignment) for the integrity data field in the protected RMCP message.The filling length field defines the byte of padding quantity in the present message.Next header fields indication is at the type of message of

RSP header

120 and 124 encapsulation of RSP telegram end.Integrity data field be used to the to be kept perfectly result of algorithm, for example, the keyed Hash function of on the special field of RSP header 120, RMCP message and RPS telegram end 124, carrying out.

The client of being managed when quilt is in not presence of operating system, and RMCP module 104 is used for the client controlled function.At the not online environment of operating system, RMCP message is mutual between at supervisor console and by administrative client.The client controlled function comprises the operation as resetting, powering on and cut off the power supply.Agreement can make the firmware of alarm transmitting apparatus when not having operating system at line drive, resolving information.

RMCP message can be independent of media, and according to media, relevant header fields can be different.RMCP message comprises RMCP header 116 and RMCP payload 118.RMCP header 116 comprises version field, reserved field, sequence-number field and a class message field.Version field can be discerned the version of RMCP header.Sequence-number field can be indicated the sequence number relevant with RMCP message.Sequence number can be used for guaranteeing that reliability surpasses UDP, and is convenient to the identification of prioritisation of messages and same message.Send unique message from identical source, for example, from supervisor console or FTP client FTP, sequence number just can increase at every turn.When message initiator was tried message again owing to lacking the RMCP affirmation, message initiator can send the former state message of the original transmission of band same sequence number, allows message initiator that RMCP message is mated with relevant affirmation.

RMCP payload 118 comprises the internet and composes number mandate (internet assigned numberauthority, IANA) enterprise number field, message type field, message label field, reserved field, data length field and data field.IANA enterprise number field can show the IANA enterprise number relevant with entity, and described entity is message definition message offset and data field format.Message type field can be defined by the entity relevant with the value of field before.It is right that message label field can be used for matching request-response.But the byte quantity that occurs in the data length field indicator data field.Data field can the indication data relevant with particular enterprise number and type of message.

Can ask the client to respond from the online request (presence ping) of supervisor console with online response (precence pong).But the capability requests requesting client from supervisor console responds with capabilities response.Can ask the client to respond from the system mode request of supervisor console with system mode.The message label field of RMCP payload 118 can provide response is tied to method in its request that is associated.For example, supervisor console sends the online client of asking quilt to be managed that has the message label field that is set to 12h.Before the message that transmission receives, this message label field value in reproducible this message of client alarm transmitting apparatus is to the online response response that is associated.When supervisor console receives online response, supervisor console is by the coupling message label field, the online request that message maps is associated to it.

Figure 1B is the block diagram according to the main frame that has network interface hardware of the embodiment of the invention.With reference to Figure 1B, shown network system 150, such as server, client, or similar net machine for example, can comprise main frame 152 and network interface hardware (NIHW) equipment 154.Main frame 152 comprise central processing module (central processing unit, CPU) 156, memory 158 and chipset 160.CPU156, memory 158 and chipset 160 can be coupled communicatedly via bus 162.

Various procotols can be operated or support to network system 150.For example, network system 150 can support that (transport control protocol/internet protocol TCP/IP) connects transmission control protocol/Internet protocol.In this respect, network system 150 for example can support ICMP (internet control message protocol, ICMP), SOAP, RMCP, RSP, UDP, IP, and address resolution protocol (address resolution protocol, ARP), SCTP (streamcontrol transmission protocol, SCTP), and/or the path maximum transfer unit (path maximumtransmission unit PMTU) finds agreement.The ICMP agreement refers to ISO/OSI layer 3 agreement, and this agreement allows router, for example sends mistake and/or control about carry out the message of packet transaction on IP network.The ARP agreement refers to the low-level protocol in the TCP/IP group, can be with the IP map addresses to corresponding ethernet address.SCTP can support PSTN, and (it is given an example, such as IP network by do not have connecting the packet network message of signaling for public switched telephonenetworks, PSTN) transmission.PMTU refers to the maximum unit of the data that can send on the physical network media.In other embodiments, SCTP can be used as host-host protocol, rather than TCP.

Connection is provided with parameter to main frame 152 to network.For example, main frame 152 is provided with transport layer parameters, comprise the flow control scheme supporting time stamp, window proportional zoom, delayed response strategy, be about to use, block handle, selective acknowledgment (selective acknowledgement, SACK), the buffering and/or other transmission relevant parameters that are about to be used.Main frame 152 is provided with network layer parameter equally, comprises the information of supporting IPv4 for example or IPv6, and as the option of no fragment and/or hop limit and so on.Main frame 152 also is provided with the data link layer parameter, comprise for example support VLAN (virtual local area networks, VLAN) and the information of the address, source that is about to be used.

CPU 156 comprises suitable logic, circuit and/or coding, is used to support the management that is associated with long-range equivalents or client on the network and/or the execution of network operation.CPU 156 also supports to offer management and/or the execution that the service of the Terminal Server Client on the network is used.

Memory 158 comprises suitable logic, circuit and/or coding, can store with network operation of being supported by CPU 156 and/or service and use relevant information.Chipset 160 comprises suitable logic, circuit and/or coding, is used to support I/O control, audio frequency and/or the ancillary equipment of for example storage administration, PCI control and arbitration, graphical interfaces, USB.In this, chipset 160 comprise at least 1 integrated circuit (integrated circuit, IC), the service of the CPU156 that provides support operation.In some cases, the service that provides of chipset 160 can be implemented in the IC that separates.Can select one or more IC to implement chipset 160 based on the quantity and the type of the service that is provided.NIHW 154 can comprise suitable logic, circuit and/or coding, is used for communicating by letter with main frame 152.In this respect, NIHM equipment 104 can be communicated by letter with CPU 156, memory 158 and/or chipset 160.

Fig. 1 C is the block diagram of the demonstration client-server system that can be used in combination with embodiments of the invention.With reference to Fig. 1 C, shown system 170, it comprises main frame 171 and a plurality of client, client 173, client 175, client 177 and client 179.Main frame 171 comprises suitable logic, circuit and/or coding, use Simple Object Access Protocol (SOAP) message to come management system 170, this message is by 1 in following or 2 mappings: telemanagement and control protocol (RMCP) and RMCP security extensions protocol (RSP), make long-distance management system, this system uses the network service of outband management equipment or client, for example, client 173, client 175, client 177 and client 179.

System 170 comprises supervisor console, and it utilizes RMCP to manage a plurality of clients, client 173, client 175, client 177 and client 179.The client that supervisor console utilizes operating system not come power down or reset and managed as main method at line method, any like this power operation can be processed by orderly mode.If the client of being managed does not have the operation response system at line method, supervisor console can use RMCP.

Fig. 2 is the block diagram according to the WS-MAN storehouse of having of the embodiment of the invention of all kinds of SOAP transmission.With reference to Fig. 2, network service management (WSM-MAN) storehouse 200 and various SOAP transmission have been shown.WS-MAN storehouse 200 comprises MAC/PHY layer module 240, IP module 238, UDP module 234, transmission control protocol (TCP) module 236, RMCP/RSP module 222, HTML (Hypertext Markup Language) (hyper text transfer protocol, HTTPS) module 220, Secure Hypertext Transfer Protocol (hypertext transfer protocol, HTTPS) module 216, Transport Layer Security (transport layer securityprotocol, TLS) module 218, Simple Object Access Protocol (simple object access protocol, SOAP) module 212, describing module 210, security strategy module 208, data transmission module 206, network service management (WS-management) module 204 and remote management application block 202.

MAC/PHY layer module 240 comprise suitable logic, circuit and or coding, be used to control the media that visit is shared in two or more inter-entity.MAC/PHY layer module 240 comprises MAC Address, and (network interface controller is unique NIC) to this MAC Address to each network interface controller.MAC/PHY layer module 240 provides host-host protocol message and handles mistake on physical layer, current control and the frame synchronization.MAC/PHY layer module 240 provides hardware for the data on transmission and the received vector, for example cable.MAC/PHY layer module 240 corresponding physical layers.IP module 238 map network layers.Network layer definition interference networks function, and the data of reception from a computer to another computer are even it is in the telecommunication network.

UDP module 234 and tcp module 236 are positioned at the upper strata of IP module 238.UDP module 234 and tcp module 236 corresponding transport layers.The traceable data of transport layer from each application, and merge to individual traffic, it is transferred to more bottom.Transport layer be responsible for defining potential extensive application data by segmentation to carry out transmission manner.UDP module 108 is used for sending data between application process, does not have some reliability and the workflow management feature of tcp module 236, but has greatly improved efficient.

RMCP/RSP module 222 is broadcast service for RMCP message provides integrality and bob-weight.When using RSP, whole RMCP message is packaged in RSP header and the RSP telegram end.When the client of being managed was in operating system-absent, RMCP/RSP module 222 was used to the client controlled function.In the environment of operating system-absent, RMCP message is at supervisor console with by mutual between the client of managing.The client controlled function comprises as resetting, power on and operation such as outage.Agreement makes the firmware of alarm transmitting apparatus when not having operating system at line drive, resolving information.

HTTP module 220 can be that TCP/IP uses, and it can realize network by transmission hypertext document and alternative document between client and server.HTTPS module 216 can socket layer safe in utilization (secure socket layer, SSL) or Transport Layer Security (transport layer security, TLS) algorithm is guaranteed the privacy that HTTP connects.Tls protocol module 218 can be various application secure communication on the Internet is provided, for example, and network browsing, Email, Internet fax and other transfer of data.Various SOAP transmission in WS-MAN storehouse 200 comprise UDP module 234, tcp module 236, RMCP/RSP module 222, HTTP module 220 and HTTPS module 216 and TLS module 218.

SOAP module 212 can be used the mutual markup language message of HTTP (markup languagemessage), such as by the XML message on the computer network.The basal layer of SOAP module 212 by providing basis notice framework (basic messaging framework) to form WS-MAN storehouse 200, more level of abstraction can be based upon on this framework.SOAP module 212 can realize remote procedure call (remote procedure call, RPC), in this process, a network node (such as client) sends a request message to another node (such as server), and server can send a response message to client.SOAP module 212 is a lightweight protocol, is used for interactive structure information in the environment that disperses and distribute.

The SOAP binding specification can be provided by the feature that is provided by binding.The service that the SOAP binding specification can be described potential agreement (underlying protocol) is how to be used to transmit the soap message collection, and how the service of describing potential agreement is used to honour the formed contract of being supported by this binding of feature.The SOAP binding specification is described in the processing of the potential failure that can be predicted in the binding, and has defined the conforming requirement of realization of structure appointment binding.

According to inventive embodiment, stipulated process by one or more intermediary generations, transmission and SOAP processing according to the mode of distributed state machine.This state is included in to put preset time goes up information known concerning the SOAP node, includes but not limited to be gathered for the content of transmitting or be received the message that supplies processing.Can handle or upgrade the state of each node by this locality from the information that adjacent node receives.The purpose of binding specification is to be that core SOAP rule increases more special additional treatments concerning binding, and describes the mode that potential agreement is used for the information between the adjacent node on the message transfer path in detail.

Distributed state machine is managed the transmission of given soap message by its message pathway, can be that core SOAP handles operation and is connected each combination to the binding specification of node on each node.The minimum responsibility of binding during message transfer comprises specifies the soap message information set to be passed to receive the SOAP node and the mode of bound reorganization herein, and specifies the facility of using potential agreement and influence big envelope (envelope) transmission manner.

Programming mode, transmission or the agreement of communicating by letter between module 210 permission end points.Module 210 is described the message of being accepted and generating by WS-MAN storehouse 200, and describes the application layer error message that is generated by WS-MAN storehouse 200.Security strategy (security profile) module 208 comprises that many security strategies protect bookkeeping, and the antagonism response is made in attack, and described attack is trying to find out, tackle, replaying and changing in the transmission course for example.Transport layer is responsible for complete, protection, evaluation and/or the safety of message.Security strategy is used for describing and the metadata purpose, and invisible in the SOAP traffic.

Data transmission module 206 comprises a plurality of resource access operations, such as acquisition, setting and count value.For example the WS transmission specification can be used as the basis of monobasic resource access.The WS event message can be used as many examples and obtains.The WS event message can be used for by allowing client subscription and reception event message to deliver and publish events.

WS administration module 204 comprises the puppy parc based on SOAP of management system, and described management system is a PC for example, server, equipment, network service and other entities that are easy to manage.WS administration module 204 is designed to satisfy many demands, thereby for example constraint network service agreement and form make the network service can be performed in the management service of hardware and software.WS administration module 204 can be guaranteed the compatibility with other web service specifications.WS administration module 204 can make the equipment on its network of IT manager remote access, and whether guard system is not uncertain, shutdown or other situations about can not utilize.Remote management application block 202 can use the system as PC desktop system and/or service and so on to be with outer telemanagement.

According to inventive embodiment, the SOAP on the RMCP comprises the mapping of soap message in the RMCP/RSP transmission.RMCP/RSP is being positioned at the message-oriented protocol layer on UDP upper strata.RMCP/RSP can the client and server system (intelligent platformmanagement interface is used as transmitter in outer (OOB) rwan management solution RWAN of band IPMI) based on ASF and IPMI.RMCP can provide reliability aspect sequence, message level affirmation and the limited relay on UDP.RSP can provide enough fail safes in the mode of message integrity and data source authentication on UDP.According to inventive embodiment, can use the encryption support of RMCP+ or provide the additional encryption service by increase by the encryption section soap message.

Fig. 3 be according to the embodiment of the invention can with the WS-MAN storehouse of ASF storehouse coexistence, described ASF storehouse has and migration path (migration path) from the ASF storehouse to the WS-MAN storehouse.With reference to Fig. 3, (Web servicesmanagement, WS-MAN) storehouse 300 to show the network service management that has various SOAP transmission.WS-MAN storehouse 300 comprises MAC/PHY layer module 340, IP module 338, UDP module 334, transmission control protocol (TCP) module 336, platform events trap (platform event trap, PET) module 322, Simple Network Management Protocol (simplenetwork management protocol, SNMP) module 324, RSP session protocol (RSP sessionprotocol, RSSP) (key generation protocol, RAKP) module 328 for module 326 and RSSP authentication and key generation agreement.WS-MAN storehouse 300 also comprise RSP module 330, RMCP module 332,

HTTP module 320, HTTPS module 316, TLS module 318, alert standard format (alert standardformat, ASF) module 314, SOAP module 312, describing module 310, security strategy module 308, data transmission module 306, network service management (WS-management) module 304 and remote management application block 302.The various agreement of Fig. 3 and SOAP transmission can resemble abundant description Fig. 2.

RSP module 330 can be RMCP message provides integrality and bob-weight to broadcast service.When RSP was used, whole RMCP message was packaged in RSP header and the RSP tracker.When by the client of being managed during in operating system-absent, RMCP module 332 is used for the client controlled function.In operating system shutdown environment, RMCP message is mutual between at supervisor console with by administrative client.The client controlled function comprises as resetting, power on and operation such as outage.Agreement can make the firmware of alarm transmitting apparatus when not having operating system at line drive, resolving information.

In the processing of the message operation, when RMCP request promoter created message, whether its RMCP protocol engine access device security strategy decided the RMCP security extensions functionality to be activated outside band.If functional activation the, RMCP module 332 can determine whether this message has suitable R SP session to exist.If suitable session does not exist, RMCP module 332 uses RSSP module 26 to create session.If session exists, but session is not in message transfer phase, RMCP module 332 will wait, and arrive RMCP message up to session and be sent out the stage before.If session existence and session are in message transfer phase, RMCP module 332 can transmit session ids, RMCP message and RMCP message-length to the next one more underlying protocol carry out additional treatments.

When transmitting apparatus RSP protocol engine receives message from RMCP module 332, RSP module 330 begins to insert the RSP header message, and session ID value is copied to the session id field of header.RSP module 330 can use session id to visit session status, increases the sequence number of session, then this value is inserted into the sequence-number field of RSP header.RSP module 330 can be created the RSP telegram end in the ending of message data module.RSP module 330 is calculated in the boundary of data speech needed loading that the integrity data field of protected message alignd.RSP module 330 can be used the RMCP message-length that is transmitted by RMCP module 332, with the ending of localization message data module, and inserts the byte of padding of correct number and the value that the RSP telegram end is filled length and next header fields.

The specific integrity operations rule that RSP module 330 uses session id to visit session status and determine to use with message, and the partial data on the calculating encapsulation messages.Calculated value is inserted into the integrity data field of RSP telegram end, creates protected RMCP message.RSP module 330 renewable message-lengths solve the increase of RSP header and RSP telegram end; and UDP source and destination port value, protected RMCP message-length and protected RMCP message is delivered to more lower layer protocol of the next one, for example UDP module 334 is carried out additional treatments.

When UDP module 334 received message from RSP module 330, the udp protocol engine of transmitting apparatus began to insert its header protected RMCP message.UDP module 334 can copy to the port value that RSP module 330 is transmitted the source port and the destination interface field of UDP header.UDP module 334 can calculate UDP block length and verification and, and these values are inserted into UDP length and checksum field.The UDP grouping that produces like this is passed to other more underlying protocols, and for example IP module 338 and MAC/PHY layer module 340 are carried out additional treatments, and finally are transferred to its destination.

Handle in the operation at in-band message; when the frame that comprises protected RMCP message arrives its destination; more underlying protocol for example the MAC/PHY layer module 340 of receiving equipment and IP module 338 grouping that produces can be sent to next more upper-layer protocol, for example UDP module 334 is to carry out additional treatments.UDP module 334 in the receiving equipment can be verified the checksum field in the UDP header.If checksum field is invalid, UDP module 334 abandons grouping.If verification and effective, whether 334 verifications of UDP module it support to be come by the value in the destination interface field upper-layer protocol of appointment.If do not support upper-layer protocol, UDP module 334 will abandon grouping.If the support upper-layer protocol, UDP module 334 will be peeled off its header, upgrade protected RMCP message-length, and protected RMCP message and its length are delivered to more upper-layer protocol of the next one, and for example the RSP module 330, to carry out additional treatments.

When the protected RMCP message that RSP module 330 receives from UDP module 334, RSP module 330 access device security strategies determine whether the RMCP security extensions functionality activates.If functional invalid, RSP module 330 just abandons message.If functional activation the, RSP module 330 use the session id value of RSP header to locate the session status of this message.If be not this message location sessions state, RSP module 330 abandons message.If session existence but session are in and do not allow the received state of protected RMCP message, RSP module 330 abandons message.If the session existence also is in the received state of protected RMCP message that allows; RSP module 330 is used the integrity operations rule of appointment in the session status and the protected RMCP message-length that UDP module 334 is transmitted, and locatees and verify integrity data field in the RSP telegram end.If integrity data field is invalid, RSP module 330 abandons message.If integrity data field is effective, RSP module 330 is used the sequence-number field of RSP header and the slide receiving window information in the session status, whether decide whether message is new, be not the copy of the previous message that receives, and definite message is with respect to the position of slide receiving window message.

The message that receives can be new, and in slide receiving window or on slide receiving window the right.If the message that receives is not new, RSP module 330 abandons message.If the message that receives is on slide receiving window the right, slide receiving window advances to the right, to comprise message.According to inventive embodiment, message can and be handled suitably by unordered reception.If sequence number is handled and to be completed successfully, RSP module 330 is kept at next header fields with sequence number value, and uses the value of filling in the length field to calculate the quantity of the byte of padding that removes from message end.RSP module 330 is peeled off RSP header and RSP telegram end, and upgrades the length value of RMCP message.RSP module 330 is delivered to more upper-layer protocol of the next one with RMCP message and corresponding length thereof, and for example the RMCP module 332, to carry out additional treatments.

RSSP module 326 can be set up related in its corresponding client of supervisor console.The related state information that can keep this relation of track definition for example is about to the special algorithm, key material and the sequence number that are used.Set up association via the session that has message groups, described message groups is sent out, and is related with fractionation to be provided with.RSSP module 326 can be divided into four-stage with session, for example finds, establishment, transmission of messages and termination.Can be according to the supervisor console user role that is used to create session, for example operator's session and manager's session are divided into one or more types with session.According to inventive embodiment, the client of being managed can be supported at least 2 sessions, one every type simultaneously.

In the discovery stage, supervisor console and used the online requests/response messages of RMCP by administrative client decides special administrative client whether to support the RMCP security extension.If supported the RMCP security extension by administrative client, and the supervisor console trial is related with the client foundation of being managed, and supervisor console is by administrative client creation state to be arrived in the session protocol conversion.At establishing stage, supervisor console and used RSSP to open conversation request/response message by administrative client, with interactive sessions ID, and by RSSP authentication and key generation agreement (RSSP authentication and key generation protocol, RAKP) and the RSP integrity algorithm of session.Supervisor console begins selecteed authentication and key generates agreement, and generates the needed necessary keys material of RSP integrity algorithm.If RSSP is successful, supervisor console with just formed by related between administrative client, and be transformed into the message transfer phase of session protocol.If cause RSSP unsuccessful owing to lose message, whole entities are their protocol status of initialization heavily.Lose message if supervisor console detects, just from the beginning restart agreement.

In message transfer phase; supervisor console and by the needed expectation message of administrative client interactive maintenance client; in these message each all is packaged into RSP header and RSP telegram end, has the complete preservation that the RSP integrity algorithm passed through at establishing stage provides.If supervisor console is attempted closing session, it will be transformed into termination phase.In termination phase, supervisor console and closed conversation request/response message, and end session by the mutual RSSP of administrative client.Before the session of establishing stage ending was set up in the RSP header that will be packaged into use bypass session id, a plurality of message were transferred to RMCP security extension udp port.

RAKP module 328 is utilized the symmetric key shared in advance and based on cipher key Hash message authentication code (the keyed-hashed message authentication code of integrity algorithm; HMAC); look like given mutually by administrative client authentication management control desk; and generate paired unique symmetric key material; this key material can use with a plurality of integrity algorithm, thereby provides protection for RMCP message.PET module 322 can be utilized the snmp trap protocol Data Unit, and (protocol data units PDU) sends alarm.SNMP module 324 is used to inquire administration agent by network management-application, and this administration agent uses the management information bank that is supported.SNMP module 324 can send snmp trap PDU.

PET module 322 can send alarm to supervisor console from the client of being managed.SNMP module 324 is used for inquiring administration agent by network management-application, and this administration agent uses the management information bank that is supported.

Supervisor console utilizes RMCP to come the managing customer end system.Supervisor console utilizes operating system to come power down as main method or reset by administrative client at line method, and any like this power-off operation can be handled with orderly fashion.If do not had the operation response system at line method by administrative client, supervisor console uses RMCP.

(alert standard format, ASF) module 314 comprises one group of security extension to alert standard format, provides authentication and integrity service to RMCP message.The cognitive supervisor console of RMCP can decide by the RMCP ability of administrative client by any message afterwards of issue.The online request message of supervisor console issue RMCP arrives by administrative client.The cognitive client of RMCP is confirmed to receive RMCP message, as long as the version that the RMCP version in RMCP header 116 is supported by client.Client responds with the online response message of RMCP, and the entities field that is supported is set, and points out its ASF version.Supervisor console can be issued the RMCP capabilities request message to the client of being managed.Client acknowledges receipt of RMCP message, as long as the version that the RMCP version in the RMCP header 116 is supported by client.By the previous setting of system capability being turned back to the non-volatile memories of alarm transmitting apparatus, client responds with RMCP capabilities response message.

The network service can utilize SOAP module 312 or transmit as SOAP based on the message of XML and HTTP module 320 or HTTPS322 carries out communication.On HTTP/HTTPS, use SOAP to need the HTTP/TLS/TCP storehouse to implement.It is complicated that the HTTP/TLS/TCP storehouse is implemented embedded device, and big HTTP (S)/TLS/TCP program coding is not calculate to the equipment of limited memory resource.Further be that host-host protocol is handled needed disposal ability can cause unacceptable response time or energy consumption.Therefore, the lightweight transport of SOAP can be used for the OOB management environment.

The ASF standard defines for the computer system telemanagement in the OOB management environment.RMCP module 332 and RSP module 330 are the parts by a cover agreement of ASF normalized definition.According to inventive embodiment, can be system remote and manage the device interface of providing services on the Internet.

According to the exemplary embodiments of invention, on RMCP/RSP, use SOAP to bring many beneficial effects.For example, RMCP/RSP module 222 is simpler than the combination of HTTP module 220, HTTPS module 216, TLS module 218 and tcp module 236.RMCP/RSP module 222 is to have message semantics, reliable support, authentication support and multicast to transmit the lightweight transport of supporting.RMCP/RSP module 222 all is more suitable for the OOB management environment from energy consumption, internal memory and processing constraint aspect.On RMCP/RSP, use SOAP can influence existing ASF/IPMI base configuration, and make rwan management solution RWAN be used for the OOB management environment based on WS-MAN.On RMCP/RSP, use SOAP to provide better from ASF to migration path based on the rwan management solution RWAN of WS-MAN.

On RMCP/RSP, use SOAP to be known as lightweight soap transmission.Lightweight SOAP transmission is fit to littler program coding, and easier going carried out.Compare with HTTP module 220 or HTTPS module 216, lightweight SOAP transmission needs the processing cycle of smaller amounts.Lightweight SOAP is transmitted as the OOB operation fail safe and reliability is provided.Lightweight SOAP transmission can support that (one-way message-exchange-pattern, MEP), request responds the multileaving of MEP and soap message to the unidirectional message switch mode.

RMCP message can be independent of media, and according to media, relevant header fields can be different.RMCP message comprises RMCP header 116 and RMCP payload 118.RMCP header 116 comprises version field, reserved field, sequence-number field and a class message field.The News Category that is called the network service can be used for the SOAP in the RMCP mapping.The version of version field identification RMCP header.Sequence-number field can be indicated the sequence number that is associated with RMCP message.Sequence number is used to guarantee the reliability on the UDP, and is convenient to the identification of prioritisation of messages and same message.When unique message was from the transmission of identical source at every turn, for example from supervisor console or FTP client FTP, sequence number increased.When owing to lose RMCP and confirm, during message promoter's retry message, message promoter sends at first with the accurate message of same sequence number transmission, allows the message promoter that RMCP message is associated with relevant affirmation.

RMCP payload 118 comprises the internet and composes number mandate (internet assigned numbersauthority, IANA) enterprise number field, message type field, message label field, reserved field, data length field and data field.The IANA enterprise number that the indication of IANA enterprise number field is associated with the entity of definition value of message types and message data field form.For the SOAP on the RMCP distributes new IANA enterprise number.Message type field is defined by the entity relevant with value in the field formerly.For example, for the SOAP on the RMCP, for the unicast one-way soap message, the value of message type field equals 0.For the unidirectional soap message of multicast, the value of message type field equals 1.For clean culture SOAP request, the message type field value equals 2.For clean culture SOAP response, the message type field value equals 3.For multicast SOAP request, the message type field value equals 4.

It is right that message label field is used to matching request-response.Data length field dial gauge registration is according to the byte quantity of field.The data that the data field indication is relevant with type of message with the special enterprises number.For example, use reserved field that the data length field of the SOAP on the RMCP is expanded to 2 bytes, to such an extent as to soap message can increase to 65535 byte longs.Sequence, message authentication and can be used and do not carry out any modification as the forwarding mechanism that defines in the ASF standard are to provide the better reliability than UDP.

The unified resource identifier of lightweight transport (uniform resource identifier URI) can define according to following sentence structure:

soap.rmcp://<host>[:<port>][/<rel_path>][？<query>]

The semanteme of URI scheme comprises many default port numbers, and for example for the OOB management service, RMCP is that 0x026F or RMCP/RSP are 0x0298.If port is special-purpose, the corresponding ports number just is used.If portal number is not special-purpose, will use default portal number.Main frame is broken down into the IP address.IP address and port are used to send message.

Fig. 4 is the example steps flow chart of handling according to RMCP grouping the carrying out outbound message to Service Management Network Based of the embodiment of the invention.According to Fig. 4, example steps is from step 402.In step 404, RMCP request promoter receives soap message.In step 405, the RMCP header is inserted in the soap message.In step 406, whether RMCP protocol engine access means security strategy decides the RMCP security extensions functionality to be activated.If the RMCP security extensions functionality is not activated, control forwards step 407 to.In step 407, whether decision safety is essential.If safety is optional, control forwards step 408 to.In step 408, message is dropped.If safety is essential, control forwards step 409 to.In step 409, RSP module 330 is used for updating message length, solve the interpolation of RSP header and RSP telegram end, and with UDP source and destination interface value, RMCP message-length and RMCP message be sent to the next one more underlying protocol for example UDP module 334 carry out additional treatments.In step 411, the message that UDP module 334 receives from RSP module 330, the udp protocol engine of transmitting apparatus is at its header of initial insertion of RMCP message then.Control forwards step 430 to.

If the RMCP security extensions functionality is activated, control forwards step 410 to.In step 410, will determine for soap message, whether there is suitable R SP session.If there is not suitable R SP session for soap message, control forwards step 418 to.In step 418, RSSP module 326 is allowed to create session.Control forwards step 416 to.If there is suitable R SP session for soap message, control forwards step 412 to.In step 412, will determine the RSP session whether in message transfer phase.If the RSP session is not in message transfer phase, control forwards step 414 to.In step 414, the system wait special time period arrives RMCP message up to session and is sent out this stage before, returns control to step 412 then.If the RSP session is in message transfer phase, control forwards step 416 to.In step 416, RMCP module 332 is sent to next more low layer with session ID, RMCP message and RMCP message-length and carries out additional treatments.

In step 420, the RSP protocol engine of transmitting apparatus receives the soap message from RMCP module 332, and RSP module 330 is at the initial insertion RSP header of message, and session ID value is copied to the session id field of RSP header.In step 422, RSP module 330 uses session id to visit session status, increases the session sequence number, then the session sequence number value is inserted into the sequence-number field of RSP header.In step 424, RSP module 330 is created the RSP telegram end in the ending of the data module of message.RSP module 330 is calculated the required filling quantity of integrity data field of the protected message of alignment on word boundary.The RMCP message-length that RSP module 330 uses RMCP module 332 to transmit comes the ending of localization message data module, and inserts the correct number of byte of padding, and the filling length value of RSP telegram end and the value of next header fields.RSP module 330 uses session ids to visit session status, and the special integrity operations rule used with message of decision, and on encapsulation messages the calculation of integrity data.Calculated value is inserted into the integrity data field of RSP telegram end, creates protected RMCP message.

In step 426; RSP module 330 is used for updating message length; solve the increase of RSP header and RSP telegram end, and UDP source and destination port value, protected RMCP message-length and protected RMCP message are delivered to more lower layer protocol of the next one, for example UDP module 334 is carried out additional treatments.In step 428, the message that UDP module 334 receives from RSP module 330, the udp protocol engine of transmitting apparatus is at its header of initial insertion of protected RMCP message then.In step 430, the port value that UDP module 334 is transmitted RSP module 330 copies to the source port and the destination interface field of UDP header.In step 432, UDP module 334 calculate UDP block lengths and verification and, and insert these and be worth UDP length and checksum field.In step 434, the UDP grouping that draws is passed to other more lower layer protocols, and for example, IP module 338 and MAC/PHY module 340 are carried out additional treatments, and finally are transferred to its destination.Control forwards end step 436 to then.

Fig. 5 is the example steps flow chart of handling according to RMCP grouping the carrying out inbound messages to Service Management Network Based of the embodiment of the invention.According to Fig. 5, example steps starts from step 502.In step 504, more underlying protocol for example the MAC/PHY layer module 340 in the receiving equipment and the IP module 338 protected RMCP message that will receive be delivered to more upper-layer protocol of the next one, for example UDP module 334 is carried out additional treatments.In step 506, the checksum field in the receiving equipment in the UDP module 334 checking UDP headers.In step 508, determine whether checksum field is effective.If checksum field is invalid, control forwards step 510 to.In step 510, UDP module 334 abandons grouping.If checksum field is effectively, control forwards step 512 to.In step 512, whether the message that determine to receive the specified upper-layer protocol of value of support purpose peer-port field.If the message that receives is not supported upper-layer protocol, control forwards step 510 to.In step 510, UDP module 334 abandons grouping.If upper-layer protocol is supported, control forwards step 516 to.In step 516, UDP module 334 is peeled off its header, upgrades protected RMCP message-length, and transmits protected RMCP message and length thereof to next one upper-layer protocol more, and for example RSP module 330 is to carry out additional treatments.

In step 518, RSP module 330 receives protected RMCP message from UDP module 334, and RSP module 330 access means security strategies determine whether the RMCP security extensions functionality is activated.If the RMCP security extensions functionality is not activated, control forwards step 519 to.In step 519, determine whether safety is necessary.If safety is not necessary, control forwards step 510 to.In step 510, RSP module 330 abandons message.If safety is not necessary, control forwards step 534 to.

If the RMCP security extensions functionality is activated, control forwards step 520 to.In step 520, determine whether RSP module 330 uses the session id value of RSP header to come the session status of localization message.If can not be message location sessions state, control forwards step 510 to.In step 510, RSP module 330 abandons message.If can be message location sessions state, control forwards step 522 to.

In step 522, determine whether session is in the message acceptance stage.If session is not in the message acceptance stage, control forwards step 510 to.In step 510, RSP module 330 abandons message.If session is in the message acceptance stage, control forwards step 524 to.In step 524, integrity data field in the RSP telegram end is located and verified to the protected RMCP message-length that integrity operations rule of stipulating in the RSP module 330 use session status and UDP module 334 are transmitted.In step 526, determine whether integrity data field is effective.If integrity data field is invalid, control forwards step 510 to.In step 510, RSP module 330 abandons message.If integrity data field is effectively, control forwards step 528 to.In step 528, whether RSP module 330 is used the sequence-number field of RSP headers and message that the slide receiving window information in the session status is determined reception is new the copy of message (rather than before received) and the message position with respect to slide receiving window.If the message that receives is not new information, control forwards step 510 to.In step 510, RSP module 330 abandons message.

If the message that receives is new information, control forwards step 530 to.In step 530, the message of reception is new, and is not in slide receiving window, is exactly on slide receiving window the right.If the message that receives is on the right of slide receiving window, slide receiving window advances to the right, to comprise message.According to inventive embodiment, message is by unordered reception, and processing suitably.In step 530, if sequence number is handled and to be completed successfully, RSP module 330 is kept at sequence number value in the next header fields, and uses the value of filling in the length field to calculate the quantity of the byte of padding that removes from message end.In step 532, RSP module 330 is peeled off RSP header and RSP tracker, and upgrades the length value of RMCP message.In step 534, RSP module 330 transmits RMCP message and respective length arrives more upper-layer protocol of the next one, and for example RMCP module 332 is carried out additional treatments.Control forwards end step 536 then to.

According to inventive embodiment, a kind of method and system of lightweight Simple Object Access Protocol transmission of management Network Based comprise: use Simple Object Access Protocol (SOAP) 312 message management systems 150, SOAP312 message is shone upon on light-weight transport protocol.Light-weight transport protocol is one or two in following: telemanagement and control protocol (RMCP) 332 and RMCP security extensions protocol (RSP) 330, thereby use the network service in outer (OOB) management equipment of band to come long-distance management system, described outband management equipment is for example client 173, client 175, client 177 and client 179.Can use mapping soap message and one or more network service to come management system 150.Operation provides safety and reliability to light-weight transport protocol to OOB.Light-weight transport protocol support the unidirectional message interactive mode (message-exchange-pattern, MEP), request---the multiplexing of response MEP and soap message.Light-weight transport protocol is supported the transmission and the confirmation of receipt of soap message.Can by message authentication and/verification or the mapping soap message integrality come protection system 150.Light-weight transport protocol also is used to support the bob-weight of soap message to broadcast protection.

Another embodiment of invention provides a kind of machine readable storage, store computer program on it, described computer program has at least one code segment, this code segment can be carried out by machine, thereby makes machine carry out the step of the lightweight Simple Object Access Protocol transmission of aforesaid management Network Based.

The applicant proposes, and do not have argument or statement should be interpreted as following confession or expression herein: the enforcement of applicant's claim must cause and the incompatible operation of ASF standard.On the contrary, the applicant proposes, and the enforcement of applicant's claim still can cause the operation compatible fully with the ASF standard.

Therefore, the present invention can use the combination of hardware, software or hardware and software to realize.The present invention can realize under the hubbed mode of at least one computer system, perhaps realizes under distributed mode, and under described distributed mode, different assemblies are distributed in several interconnected computer systems.Adopt and anyly be applicable to that computer system or other equipment of the method for carrying out introduction of the present invention all are suitable.The typical combination of a kind of hardware, software and firmware is the general-purpose computing system with computer program, when program is loaded and carry out, controls described computer system so that it carries out the method that the application describes.

The present invention can also be embedded in the computer program, and described computer program comprises whole features that can realize the inventive method, when it is installed in the computer system, by operation, can realize method of the present invention.Computer program in the presents refers to: one group of any expression formula of instructing that can adopt any program language, code or symbol to write, this instruction group makes system have information processing capability, with direct realization specific function, or after carrying out following one or two step, realize specific function: a) convert other Languages, coding or symbol to; B) reproduce with different forms.Yet other implication of the computer program that those skilled in the art can understand is also comprised by the present invention.

The present invention is described by some embodiment, and those skilled in the art know, under the situation that does not break away from the spirit and scope of the present invention, can carry out various changes or equivalence replacement to these features and embodiment.In addition, under instruction of the present invention, can make amendment to these features and embodiment can not break away from the spirit and scope of the present invention to adapt to concrete situation and material.Therefore, the present invention is not subjected to the restriction of specific embodiment disclosed herein, and all interior embodiment of claim scope that fall into the application belong to protection scope of the present invention.

Claims

1, a kind of method of handling the network information is characterized in that, described method comprises:

Use Simple Object Access Protocol (SOAP) message to come management system, this message is mapped to one or two in following: telemanagement and control protocol (RMCP) and RMCP security extensions protocol (RSP).

2, method according to claim 1 is characterized in that, comprises that soap message and the one or more network service of using described mapping manage described system.

3, method according to claim 2 is characterized in that, comprises by being with outer (OOB) management to come the described system of telemanagement via described one or more network services.

4, method according to claim 3 is characterized in that, comprises by described band outer (OOB) management protecting described system.

5, method according to claim 1 is characterized in that, described mapping supports that the unidirectional message of described soap message is mutual.

6, method according to claim 1 is characterized in that, described mapping supports that the request-response message of described soap message is mutual.

7, method according to claim 1 is characterized in that, the multicast of described soap message is supported in described mapping.

8, method according to claim 1 is characterized in that, comprises the soap message of transmitting described mapping.

9, method according to claim 1 is characterized in that, comprises the soap message of confirming to receive described mapping.

10, method according to claim 1 is characterized in that, comprises by the soap message of differentiating described mapping protecting described system.

11, method according to claim 1 is characterized in that, comprises that the integrality of the soap message by the described mapping of verification is protected described system.

12, method according to claim 1 is characterized in that, described mapping supports the bob-weight of described soap message to broadcast protection.

13, a kind of system that handles the network information, it is characterized in that, comprise one or more circuit, described circuit can use Simple Object Access Protocol (SOAP) message management system, and this message is mapped to one or two in following: telemanagement and control protocol (RMCP) and RMCP security extensions protocol (RSP).

14, system according to claim 13 is characterized in that, described one or more circuit use the soap message of described mapping and one or more network service to manage described system.

15, system according to claim 14 is characterized in that, described one or more circuit come the described system of telemanagement by described band outer (OOB) management via described one or more network services.

16, system according to claim 15 is characterized in that, described one or more circuit can be protected described system by described band outer (OOB) management.

17, system according to claim 13 is characterized in that, described mapping supports that the unidirectional message of described soap message is mutual.

18, system according to claim 13 is characterized in that, described mapping supports that the request-response message of described soap message is mutual.

19, system according to claim 13 is characterized in that, the multicast of described soap message is supported in described mapping.

20, system according to claim 13 is characterized in that, described one or more circuit can be transmitted the soap message of described mapping.

21, system according to claim 13 is characterized in that, described one or more circuit can confirm to receive the soap message of described mapping.

22, system according to claim 13 is characterized in that, described one or more circuit can be protected described system by the soap message of differentiating described mapping.

23, system according to claim 13 is characterized in that, described one or more circuit can be protected described system by the integrality of the described mapping soap message of verification.

24, system according to claim 13 is characterized in that, described mapping supports the bob-weight of described soap message to broadcast protection.

25, a kind of machine readable storage stores computer program on it, and described computer program has at least one code segment that is used to handle the network information, and this at least one code segment can be carried out by machine, comprises the steps: thereby machine is carried out

26, machine readable according to claim 25 storage is characterized in that, described at least one code segment comprises the coding that described system is managed in the soap message that uses described mapping and one or more network service.

27, machine readable storage according to claim 25 is characterized in that, described at least one code segment comprises by come the coding of the described system of telemanagement via described one or more network services with outer (OOB) management.

28, machine readable storage according to claim 27 is characterized in that, described at least one code segment comprises the coding of protecting described system by described band outer (OOB) management.

29, machine readable storage according to claim 25 is characterized in that described mapping supports that the unidirectional message of described soap message is mutual.

30, machine readable storage according to claim 25 is characterized in that described mapping supports that the request-response message of described soap message is mutual.

31, machine readable storage according to claim 25 is characterized in that the multicast of described soap message is supported in described mapping.

32, machine readable storage according to claim 25 is characterized in that described at least one code segment comprises the coding of the soap message of transmitting described mapping.

33, machine readable storage according to claim 25 is characterized in that, described at least one code segment comprises the coding of the soap message of confirming the described mapping of reception.

34, machine readable storage according to claim 25 is characterized in that described at least one code segment comprises the coding of protecting described system by the soap message of differentiating described mapping.

35, machine readable storage according to claim 25 is characterized in that described at least one code segment comprises the coding of protecting described system by the integrality of the soap message of the described mapping of verification.

36, machine readable storage according to claim 25 is characterized in that described mapping supports the bob-weight of described soap message to broadcast protection.