Network management control method and network management control system

Abstract

The invention discloses a method and a system for controlling network management. The method comprises the following steps: in the network management control system, a topmost network administration user creates an authority label and establishes relations of dependence between the authority label and a network object/object group; an upper network administration user creates or deletes a lower network administration user, and wholly or partly confers the authority label owned by the upper network administration user on the lower network administration user; and when the network administration users carry out the operation on the network object/object group, the network administration users verify whether the authority labels owned by the network administration users are consistent with the authority labels adhered to the network object/object group requesting operation, and only when the authority labels are consistent with each other, the network administration users are allowed to carry out the operation on the network object/object group. The invention can realize the multilevel right distribution and the authority control of network management.

Description

technical field [0001] The invention relates to the field of wireless communication, in particular to a network management control method and system for a wireless communication network. Background technique [0002] Most of the current wireless communication network operation support systems adopt a role-based access control model (Role-Based Access Model) in terms of access control, and define system access control through predefined users, roles, and permissions, that is, WHO+WHAT+ HOW, this is a more flexible coarse-grained access control in the permission system. Its basic idea is to assign access permissions to certain roles, and users can obtain access permissions owned by roles by playing different roles. However, the role-based access control model cannot satisfy the multi-level and three-dimensional user organization structure, the role is defined by the system administrator, and the addition and deletion of role members can only be performed by the system administ...

AI Technical Summary

Problems solved by technology

However, the role-based access control model cannot satisfy the multi-level and three-dimensional user organization structure, the role is defined by the system administrator, and the addition and deletion of role members can only be performed by the system administrator, that is, only the system administrator has the right to define and Assigned roles, low-level administrators cannot autonomously grant access rights to users under their jurisdiction

[0003] Assigning and managing roles for a multi-level user organization structure is a very complex management task. Low-level administrators cannot create new users, nor can they assign roles to users within their own jurisdiction.

Similarly, when the managed object changes, the system administrator needs to reconfigure the rights of the user's access to the role of the object, and cannot achieve self-adaptation

For example, when a prefectural branch opens a new business, it needs to wait for the system administrator of the provincial center to complete the relevant equipment configuration and service activation, which not only affects the efficiency of service activation, but also causes the long-term overload of the provincial company system administrator

And if the highest authority of the system administrator is provided for each city branch, there will be a large number of super users, it will be difficult to control the spread of authority, and the possibility of authority abuse

[0004] To sum up, in the prior art, there is no effective authority distribution, granting and management mechanism for the management and control of the network

Images