RFC 3520 (rfc3520) - Page 1 of 30

Session Authorization Policy Element

Alternative Format: Original Text Document
Next >
Network Working Group                                         L-N. Hamer
Request for Comments: 3520                                       B. Gage
Category: Standards Track                                Nortel Networks
                                                             B. Kosinski
                                                     Invidi Technologies
                                                                H. Shieh
                                                           AT&T Wireless
                                                              April 2003


                 Session Authorization Policy Element

Status of this Memo

   This document specifies an Internet standards track protocol for the
   Internet community, and requests discussion and suggestions for
   improvements.  Please refer to the current edition of the "Internet
   Official Protocol Standards" (STD 1) for the standardization state
   and status of this protocol.  Distribution of this memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2003).  All Rights Reserved.

Abstract

   This document describes the representation of a session authorization
   policy element for supporting policy-based per-session authorization
   and admission control.  The goal of session authorization is to allow
   the exchange of information between network elements in order to
   authorize the use of resources for a service and to co-ordinate
   actions between the signaling and transport planes.  This document
   describes how a process on a system authorizes the reservation of
   resources by a host and then provides that host with a session
   authorization policy element which can be inserted into a resource
   reservation protocol (e.g., the Resource ReSerVation Protocol (RSVP)
   PATH message) to facilitate proper and secure reservation of those
   resources within the network.  We describe the encoding of session
   authorization information as a policy element conforming to the
   format of a Policy Data object (RFC 2750) and provide details
   relating to operations, processing rules and error scenarios.










Hamer, et al.               Standards Track
Next >