Monday, 9 January 2012

X.500 Security Feature


X.500 Security Feature

The X.500 directory service is a global directory service. Its components cooperate to manage information about objects such as countries, organizations, people, machines, and so on in a worldwide scope. It provides the capability to look up information by name and to browse and search for information.

Security Feature

X.500 has evolved significantly, to encompass features not in the original X.500(1988) version. This has led to significant updates in the X.500 (1993) specification. Some smaller additions are also planned for X.500(1997). The major changes for X.500(1993) are:
  1. Sophisticated replication using Directory Information Shadowing Protocol (DISP). Replication of data is critical for providing a robust directory service. X.500 DISP provides this service, and gives a lot of flexibility for different replication configurations.
  2. Access Control. There is a standard and flexible mechanism for specifying access control. This is important to allow open and controlled management of data in the directory, especially when the data is replicated.
  3. Improvements to information model. There are a number of improvements to the X.500 data model, based on experience with X.500 (1988). These include attribute subtyping, which allows related attributes to be handled in a clean manner and operational attributes, which allow directory management attributes to be distinguished from user data.
  4. Administrative area model to help management. A mechanism is added whereby data can be grouped into administrative areas, and data (including access control) shared over this area by use of collective attributes. This is an important change for many operational environments.
  5. A number of small changes to the overall directory service.
On the outside, the X.500(1993) directory has not changed a great deal. There has been significant change to the internal operations and management features, which address serious service and deployment issues.

 Reference:

http://docs.oracle.com/javase/jndi/tutorial/ldap/models/x500.html
Posted by at

4 comments:

  1. Zahidah Chan10 January 2012 at 17:22

    Hi Suhaili, i think that this is a very well researched post on the security features of X.500. You did a good job in keeping it short and simple. In addition to that, you also included a diagram for our further understanding. Excellent.

    Thanks,
    Zahidah

    ReplyDelete
  2. J11 January 2012 at 00:47

    Hi Su! (Again lol) I feel that all your posts on this blog are very informative and it could allow me to understand more. Good job once again! :)

    Joanne.

    ReplyDelete
  3. Anonymous11 January 2012 at 20:42

    Good job! Your blog is very informative, it contains many points for the X.500 Security Feature.

    ReplyDelete
  4. Ng Kian Kiang12 January 2012 at 09:39

    hi suhaili, i think your post on X.500 is good and you have elaborate some of the feature which is very good. The diagram should make it bigger as the word inside the diagram are too small to read

    ReplyDelete

Subscribe to: Post Comments (Atom)