SyncML Device Management



Similar documents
SyncML Device Management Bootstrap

Open Mobile Alliance (OMA) Device Management Overview. Peter Thompson Mark Staskauskas Qualcomm Incorporated

Network Management System (NMS) FAQ

[MS-MDM]: Mobile Device Management Protocol. Intellectual Property Rights Notice for Open Specifications Documentation

Sophos Mobile Control Technical guide

ITEC310 Computer Networks II

TELE 301 Network Management

SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP)

A Comparison of Protocols for Device Management and Software Updates

Presenting Mongoose A New Approach to Traffic Capture (patent pending) presented by Ron McLeod and Ashraf Abu Sharekh January 2013

Deploying the BIG-IP LTM system and Microsoft Windows Server 2003 Terminal Services

SolarWinds Certified Professional. Exam Preparation Guide

Active Management Services

IBM SPSS Collaboration and Deployment Services Version 6 Release 0. Single Sign-On Services Developer's Guide

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH MICROSOFT WINDOWS SERVER 2008 TERMINAL SERVICES

DEPLOYMENT GUIDE. Deploying the BIG-IP LTM v9.x with Microsoft Windows Server 2008 Terminal Services

Architecture and Data Flow Overview. BlackBerry Enterprise Service Version: Quick Reference

System and Network Management

Cisco Application Networking Manager Version 2.0

Web Application Hosting Cloud Architecture

DEPLOYMENT GUIDE Version 1.2. Deploying F5 with Oracle E-Business Suite 12

Simple Network Management Protocol

1. The Web: HTTP; file transfer: FTP; remote login: Telnet; Network News: NNTP; SMTP.

Lab Exercise SSL/TLS. Objective. Step 1: Open a Trace. Step 2: Inspect the Trace

Setup Guide Access Manager 3.2 SP3

Web. Services. Web Technologies. Today. Web. Technologies. Internet WWW. Protocols TCP/IP HTTP. Apache. Next Time. Lecture # Apache.

Web Services for Management Perl Library VMware ESX Server 3.5, VMware ESX Server 3i version 3.5, and VMware VirtualCenter 2.5

WHITE PAPER Citrix Secure Gateway Startup Guide

DEPLOYMENT GUIDE Version 1.1. Deploying F5 with Oracle Application Server 10g

VLANs. Application Note

Configuring PA Firewalls for a Layer 3 Deployment

Firewall Builder Architecture Overview

Building a protocol validator for Business to Business Communications. Abstract

DEPLOYMENT GUIDE. Deploying F5 for High Availability and Scalability of Microsoft Dynamics 4.0

BlackBerry Enterprise Service 10. Secure Work Space for ios and Android Version: Security Note

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH CITRIX PRESENTATION SERVER 3.0 AND 4.5

Network Configuration Settings

SETUP SSL IN SHAREPOINT 2013 (USING SELF-SIGNED CERTIFICATE)

Lecture 5: Foundation of Network Management

HexaCorp. White Paper. SOA with.net. Ser vice O rient ed Ar c hit ecture

Certes Networks Layer 4 Encryption. Network Services Impact Test Results

Setup Guide Access Manager Appliance 3.2 SP3

WLAN TRAFFIC GRAPHING APPLICATION USING SIMPLE NETWORK MANAGEMENT PROTOCOL *

Lab Exercise SSL/TLS. Objective. Requirements. Step 1: Capture a Trace

Introducing the BIG-IP and SharePoint Portal Server 2003 configuration

Understanding Slow Start

SOFT 437. Software Performance Analysis. Ch 5:Web Applications and Other Distributed Systems

Chapter 17. Transport-Level Security

DEPLOYMENT GUIDE Version 1.2. Deploying F5 with Microsoft Exchange Server 2007

Grandstream Networks, Inc.

Integrating VoltDB with Hadoop

DEPLOYMENT GUIDE Version 2.1. Deploying F5 with Microsoft SharePoint 2010

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v9.x with Microsoft IIS 7.0 and 7.5

Chapter 1 - Web Server Management and Cluster Topology

Network Management. Jaakko Kotimäki. Department of Computer Science Aalto University, School of Science. 21. maaliskuuta 2016

DEPLOYMENT GUIDE Version 1.1. Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5

WiMAX Forum Proprietary

App Orchestration 2.5

Data Security and Governance with Enterprise Enabler

DEPLOYMENT GUIDE DEPLOYING F5 WITH MICROSOFT WINDOWS SERVER 2008

Barracuda Networks Web Application Firewall

Troubleshooting BlackBerry Enterprise Service 10 version Instructor Manual

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0

WEBCONNECT INSTALLATION GUIDE. Version 1.96

Configuration Guide BES12. Version 12.2

OMU350 Operations Manager 9.x on UNIX/Linux Advanced Administration

Tenrox. Single Sign-On (SSO) Setup Guide. January, Tenrox. All rights reserved.

Interwise Connect. Working with Reverse Proxy Version 7.x

Ekran System Help File

Portal Factory CMIS Connector Module documentation

FortiOS Handbook WAN Optimization, Web Cache, Explicit Proxy, and WCCP for FortiOS 5.0

Integrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER

Oracle Service Bus Examples and Tutorials

ARIB STD-T V Wide area network synchronisation standard

DEPLOYMENT GUIDE Version 1.0. Deploying F5 with the Oracle Fusion Middleware SOA Suite 11gR1

, SNMP, Securing the Web: SSL

DEPLOYMENT GUIDE Version 1.1. Deploying F5 with IBM WebSphere 7

3GPP TS V8.0.0 ( )

Oct 15, Internet : the vast collection of interconnected networks that all use the TCP/IP protocols

PANDORA FMS NETWORK DEVICE MONITORING

Industrial Network Security and Connectivity. Tunneling Process Data Securely Through Firewalls. A Solution To OPC - DCOM Connectivity

Network Management and Monitoring Software

Controller Management

Funambol Exchange Connector v6.5 Installation Guide

Assignment One. ITN534 Network Management. Title: Report on an Integrated Network Management Product (Solar winds 2001 Engineer s Edition)

Configuration Backup and Restore. Dgw v2.0 May 14,

Emerging Technologies Shaping the Future of Data Warehouses & Business Intelligence

Birdstep Intelligent Mobile IP Client v2.0, Universal Edition. Seamless secure mobility across all networks. Copyright 2002 Birdstep Technology ASA

Configuration Guide BES12. Version 12.1

WAN Optimization, Web Cache, Explicit Proxy, and WCCP. FortiOS Handbook v3 for FortiOS 4.0 MR3

The new services in nagios: network bandwidth utility, notification and sms alert in improving the network performance

ANS Monitoring as a Service. Customer requirements

PHIN MS Detailed Security Design

ZooKeeper. Table of contents

Security Overview Introduction Application Firewall Compatibility

Transcription:

SyncML Device Management An overview and toolkit implementation Radu State Ph.D. The MADYNES Research Team LORIA INRIA Lorraine 615, rue du Jardin Botanique 54602 Villers-lès-Nancy France Radu.State@loria.fr MADYNES 2003-1-

Tutorial Outline SyncML-DM : an Approach for Managing Dynamic Devices Representation Protocol for Device Management Device Management Protocol Standardized Objects Device Management Tree MAD-MAX Toolkit Benchmarkings MADYNES 2003-2-

Towards open data synchronization 2000: creation of the SyncML consortium (www.syncml.org). Members : More than 600 companies-ibm, Nokia, Motorola, Ericsson, Matsushita, Symbian, Openwave.. Objective : Develop an Open Standard for data Synchronization Additional Results : Device Management Framework for managing devices. Synchronization Markup Language is an Open Specification for universal synchronization MADYNES 2003-3-

Use cases for Device Management Remote service management Troubleshooting Personal Management Storage Management Monitoring Software download Over the air Mass Configuration MADYNES 2003-4-

Challenges in Device Management Heterogeneous devices Many applications Multiple network connectivity Limited resources MADYNES 2003-5-

Requirements for Device Management Operate effectively over wireless and wired networks Support a variety of transport protocols Support arbitrary networked data Enable data access from a variety of applications Address the resource limitations of the mobile device Build upon existing Internet and Web technologies MADYNES 2003-6-

Wireless/Wired Network Operations Ubiquitous wireless access Redefine Management 1. High network latency 2. Limited bandwidth 3. Low reliability of both data and connectivity 4. Dynamic Addresses and network connectivity 5. Firewall, Nats several management domains 6. Out of coverage factors 1. Management might be to late 2. Manage efficiently (whenever it s required without wasting resources) 3. Connection Oriented management 4. Application level naming and addressing 5. Device initiated management 6. Different Fault behavior management MADYNES 2003-7-

Scope of SyncML XML based framework for data synchronization Message oriented data exchange protocol Transport agnostic Universal deployment Extension for device management MADYNES 2003-8-

SyncML Specifications More than just XML Device Description Framework Synchronization Protocol Device Information DTD Bootstrapping Representation Protocol Device Management Protocol Synchronization Framework Device Management Framework HTTP OBEX WSP Transport Technology Bindings MADYNES 2003-9-

Representation Protocol - Objective 1. Specifies the structure of SyncML messages 2. Defines a vocabulary to describe management data and operations 3. Core component of the SyncML framework on which all others components are based Container Element SyncML Message Container Element SyncML Header Container Element SyncML Body Data description elements We will cover them in this order: Common Use Elements Protocol Management Elements Command Elements Data Description Elements Message Container Elements Common Use Elements Protocol Management Elements Commands MADYNES 2003-10-

Protocol Management Element(s) <MsgID>1</MsgID> <Get> <CmdID>1</CmdID> <Item> <Target> <LocURI>./Contacts/John</LocURI> </Target> </Item> </Get> Management Operations (one SyncML Message) Manager Status Code Result for each operation Agent <Status> <CmdID>4</CmdID> <MsgRef>1</MsgRef> <CmdRef> 1</CmdRef> <Cmd>Get<Cmd> <TargetRef><LocURI>./Contacts/John</LocURI> </TargetRef> <Data>401</Data> </Status> MADYNES 2003-11-

Command Elements functional classification 1. Data Command Elements used to change application data Add - creates a new interior node Copy copies values from a node to another at the client side Delete deletes a node (and all its subnodes) Exec process execution on the target Replace overwites value for an existing node Get retrieves data from the target 1. DataStore Command Elements Actions for an entire datastore Alert used for notifications, text displays Results contains results from a Get 2. Process Flow Commands enhanced processing control Atomic all subcommands must be executed Sequence subcommands must be executed in order MADYNES 2003-12-

The Duo: Get and Results <MsgID>1</MsgID> <Get> <CmdID>2</CmdID> <Item> <Target> <LocURI>./Contacts/John</LocURI> </Target> </Item> </Get> <Results> <MsgRef>1</MsgRef> <CmdRef>2</CmdRef> <CmdID>2</CmdID> <Item> <Source> <LocURI>./Contacts/John</LocURI> </Source> <Data>Tel:01564433</Data> </Item> </Results> MADYNES 2003-13-

Data Description Elements 1. <Data>.</Data> encloses SyncML payload data 2. <Item>.</Item> isolates a command from the underlying data Contains Data, Identification and Metadata 3. <Meta>..</Meta> provides meta-information about the data Type of the data Size of the data Meta Data Item MADYNES 2003-14-

Device Management Framework Describes the management information and how to access it Management Tree 1. Framework for describing management information 2. Management Tree 3. Standardized Objects Managed Object MADYNES 2003-15-

Purpose of the Device Management Framework Generic device description framework SyncML Describes methodology for describing managed device Device Model specific to an equipment models Uses Management Protocol Managed Device Management Application MADYNES 2003-16-

Modeling Management Information in SyncML <!ELEMENT Node (NodeName, Path?, RTProperties?, DFProperties, (Node* Value?))> <!ELEMENT NodeName (#PCDATA)> <!ELEMENT Path (#PCDATA)> <!ELEMENT Value (#PCDATA)> <!ELEMENT RTProperties (ACL, Format, Name, Size?, Title?, TStamp?, Type?, VerNo?)> <!ELEMENT ACL (#PCDATA)> <!ELEMENT Format (b64 bool chr int node null xml)> Dynamic self-described management information A XML Tree Node captures information about : Name of the managed object ACL Subtrees Value Data Type of the Managed Object MADYNES 2003-17- B C E F G Management Information

Framework properties of a Managed Object DFProperties Occurence AccessType DFType DFFormat Description Which operations are possible? Add, Copy, Delete, Exec, Mime type Get, Replace of the node value Data Format of the node Eg. bool, chr, int, node, null, xml Description of the node Framework properties do not change at run-time. Analogous to a MIB2 definition MADYNES 2003-18-

Runtime Properties of the Managed Object ACL If used, indicates ACL Node RTProperties Name Same as NodeName NodeName Format Format of the value Size Size of the node in bytes Tstamp Timestamp of last change Type Objective : Describe instantiated Managed Object type of the node MADYNES 2003-19-

Access Control Lists (ACL) ACL Property regulate access to a MO MO A B ACL A ACL B Get=Server A&Replace=Server B C ACL C D ACL D Server A Server B ACL operation 1. Internal Nodes access to ACL is regulated by the ACL itself 2. Terminal Nodes Parent Node ACL regulates ACL modifications 3. If ACL empty then closest ancestor ACL is used MADYNES 2003-20-

Addressing Object Values and Properties Addressing node values : Object is identified by complete path to the root of the management tree Example : <LocURI>NodeA/NodeB</LocURI> B A Extended usage of the tags: Meta, Format, Type <Meta> <Format>chr</Format> <Type>text/plain</Type> </Meta> Meta to indicate metainformation Format (string in this example) for the data format via Runtime property Format Type =value for the Mime type Addressing Property values : node URI+?prop=<property_name> Example : addressing ACL property of Node B : /SyncML/NodeA/NodeB?prop=ACL MADYNES 2003-21-

Device Management Standardized Objects Mandatory Device Management Objects for any SyncML device Management Information Regarding : 1. Connectivity information (protocol IPv4/IPV6, addresses, ports) 2. Accepted authentication methods 3. Bearer type (eg. Obex, GSM, CDMA) 4. Management server ID 5. Manufacturer ID, 6. Model and Device ID 7. Software version Think MIB 2 for device management.. MADYNES 2003-22-

Requirements for the Device Management Protocol Requirement: Ability to deal with dynamic environments Dynamic network connectivity Unreliable communication medium Not always on-line devices due to out of coverage or limited mobility management Limited incoming connections for devices Management Traffic Device Foreign Access Network Firewall WAN BT Router Management Application Home Network Access network Management domain WAN Management domain Home Network Management domain MADYNES 2003-23-

Design choices for the Device Management Protocol 1. Session Oriented 2. Client initiated 3. Out of band notification support 4. XML encoded 5. User interaction enabled Notification I want to manage you! Management Session Client initiated Rationale 1. Devices might not be always online 2. Most firewalls will allow only device initiated connections 3. Notification support needed for server initiated sessions 4. User might have other priorities MADYNES 2003-24-

A Management Session Package 0 Optional Notification Server Client Package 1 Client initiates session Package 2 Server initiatialisation+mgt requests Package 3 Results (for mgt requests) Five logical packages In most cases one package is a SyncML message { { Package 4 Mgt. Requests Package 3 Results (for mgt requests) Package 4 Mgt. Requests Oversized packages can be included in several message Protocol state (each site) is determined by current protocol Package 3 Results (for mgt requests) MADYNES 2003-25-

Security in SyncML Management Device Server Package 0 Optional Notification Package 1 Client initiates session 1. Authentication of Server 2. Integrity check of the message (MD5/basic authentication) { { Package 2 Server initiatialisation+mgt requests Package 3 Results (for mgt requests) Package 4 Mgt. Requests Package 3 Results (for mgt requests) Package 4 Mgt. Requests Package 3 Results (for mgt requests) 1. Two way authentication 2. Integrity check of the message 3. Access Control List mechanism 4. Confidentiality provided by transport level (HTTPS, SSL, OBEX) MADYNES 2003-26-

Existing Implementations Proprietary implementations : Major actors and contributors to the standard. Open Source : Sync4J (http://sync4j.sourceforge.net) for the data synchronization. No device management functionality. LORIA/MADYNES : SyncML Agent toolkit (www.madynes.org/software) MADYNES 2003-27-

MAD-MAX Overall functionality Device Description Framework Methodology for describing device information models Management Application Device Specific Information Model uses Management Protocol Management Tree /MgtTree/Vendor/ Ring_signals /MgtTree /MgtTree/Vendor /MgtTree/Vendor/ Ring_signals/Beep Managed Device { { Package 0 Optional Notification Package 1 Client initiates session Package 2 Server authentication+mgt requests Package 3 Results (for mgt requests) Package 4 Mgt. Requests Package 3 Results (for mgt requests) Package 4 Mgt. Requests Package 3 Results (for mgt requests) Example of a SyncML message <SyncHdr>. </SyncHdr> <SyncBody> <Status> <CmdID>5</CmdID> <MsgRef>2</MsgRef> <CmdRef>0</CmdRef> <Cmd>SyncHdr</Cmd> <Data>212</Data> </Status> <Results> <CmdID>6</CmdID> <CmdRef>1</CmdRef> <MsgRef>2<MsgRef> <Cmd>Get</Cmd> <item> <Source>..</Source> <Data>Returned value</data> <Item> </Results> <Final/>. MADYNES 2003-28-

MAD-MAX Functional Architecture Agent Toolkit SyncML DM MO DM Tree Browser Extension Manager DeviceLet Factory HTTP Adaptor TCP Adaptor DM Protocol Engine DM Tree Manager Custom DeviceLets Custom DeviceLets Security Manager Extendible Agent Custom DeviceLets MADYNES 2003-29-

The Protocol Engine Protocol state machine design and implementation MADYNES 2003-30-

DM Tree Browser MADYNES 2003-31-

Extensibility MADYNES 2003-32-

Extension Mechanisms MADYNES 2003-33-

Benchmarks Encoding strategies One message with several requests versus several individual messages Management Bandwidth 450000 400000 350000 300000 250000 200000 150000 100000 50000 Management Traffic for one global message Management Traffic for one request per message 0 1 50 100 150 200 250 300 350 400 450 500 550 600 650 700 Number of management requests MADYNES 2003-34-

Bandwidth efficiency Experimental efficiency assessment Bandwith overhead 3.5 3 Bandwith overhead Bandwitdth ratio 2.5 2 1.5 1 0.5 0 1 50 100 150 200 250 300 350 400 450 500 550 600 650 700 Number of management requests MADYNES 2003-35-

Benchmarking the latency One message with several requests versus several individual messages Response Time Analysis Response Time for one global message Response Time for one request per message 7000 6000 5000 4000 3000 2000 1000 0 1 50 100 150 200 250 300 350 400 450 500 550 600 650 700 Number of management requests Time is Money MADYNES 2003-36-

SyncML DM summary SyncML DM is more than just XML based configuration Framework for describing management information A set of standard Managed Objects Transaction oriented Management Protocol Network level transport agnostic Flexible Access Control Adaptation of conceptual design approaches from the SNMP framework towards device mobility Similar building blocks to the SMI, MIB2 and SNMP and Get/Set semantics Reversed roles : a managed Device initiates a management session Power for the users : allow/deny management actions What to expect More OpenSource implementations Interoperability studies Performance analysis and large scale deployment tests MADYNES 2003-37-