APPARATUS AND METHOD FOR MANAGING AN ACCESS CONTROL LIST IN AN INTERNET DEVICE

• US 20130290535A1
• Filed: 04/25/2013
• Published: 10/31/2013
• Est. Priority Date: 04/28/2012
• Status: Abandoned Application

• Current Assignee: Realtek Semiconductor Corp.
• Original Assignee: Realtek Semiconductor Corp.
• Inventors: Hsue, Hong-June, Du, Chengwei, Wu, Chun-Da
• Application Number:
  US13/869,978
• Publication Number:
  US 20130290535A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 41/04 Network management architectures or arrangements
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

An executing apparatus coupled to a main control unit for managing an access control list (ACL) is provided. The executing apparatus is utilized for receiving a specific command transmitted from the main control unit and managing a plurality of rule information of the ACL stored in a storage circuit according to the specific command received.

Claims

1. An internet device, comprising:

a main control unit of the internet device;

an executing apparatus, coupled to the main control unit to receive a specific command transmitted from the main control unit;

a storage circuit, to store a plurality of rule information of an access control list (ACL);

wherein the executing apparatus manages the plurality of rule information of the ACL according to the specific command received.

2. The internet device of claim 1, wherein the specific command is an adding command, and the executing apparatus is arranged for referring to the adding command to write a first rule information into a first index position in the ACL stored in the storage circuit.

3. The internet device of claim 2, wherein the adding command is an inserting command, and the executing apparatus is arranged for referring to the inserting command to insert the first rule information in the first index position between a plurality of index positions of the ACL.

4. The internet device of claim 3, wherein the executing apparatus moves a second rule information originally stored at the first index position to a second index position, and then writes the first rule information to the first index position, where a priority of the second index position is lower than a priority of the first index position.

5. The Internet device of claim 2, wherein the first rule information is pre-stored in a storage element, the adding command indicates an address at which the first rule information is stored in the storage element, and the executing apparatus obtains the first rule information according to the address indicated by the adding command, analyzes a plurality of current rule information of the ACL to generate an analyzing result, and writes the first rule information to the first index position of the ACL.

6. The Internet device of claim 1, wherein the specific command is a moving command, and the executing apparatus is arranged for referring to the moving command to move a rule information from a first index position to a second index position in the ACL, where the rule information is originally stored at the first index position of the ACL before moved.

7. The Internet device of claim 6, wherein the moving command indicates an initial index position and a target index position, or the moving command indicates a source initial position and a target initial position;

and the executing apparatus is arranged for referring to the initial index position and the target index position or the source initial position and the target initial position to sequentially move at least a rule information from the initial index position or the source initial position in the ACL to the target index position or the target initial position in the ACL.

8. The Internet device of claim 7, wherein:

when the moving command indicates the initial index position and the target index position, the moving command further indicates a number of rule information to be moved, and the executing apparatus moves the rule information according to the initial index position, the target index position and the number of rule information to be moved; and

when the moving command indicates the source initial position and the target initial position, the moving command further indicates a source end position or a target end position, and the executing apparatus moves the rule information according to the source initial position, the source end position and the target initial position, or according to the source initial position, the source end position and the target end position.

9. The internet device of claim 7, wherein the initial index position is located before the target index position, the moving command further indicates a number of rule information to be moved, the number of rule information to be moved and the initial index position determine an initial index area, the number of rule information to be moved and the target index position determine a target index area, and the executing apparatus sequentially moves a plurality of rule information in the initial index area to a plurality of corresponding index positions in the target index area in a backward order starting from a last index position of the initial index area to a first index position of the initial index area.

10. The internet device of claim 7, wherein the initial index position is located after the target index position, the moving command further indicates a number of rule information to be moved, the number of rule information to be moved and the initial index position determine an initial index area, the number of rule information to be moved and the target index position determine an initial index area, the number of rule information to be moved and the target index position determine a target index area, and the executing apparatus sequentially moves a plurality of rule information in the initial index area to a plurality of corresponding index positions in the target index area in a forward order starting from a first index position of the initial index area to a last index position of the initial index area.

11. The internet device of claim 6, wherein the moving command indicates a combination of three moving parameters selected among a source initial position, a target initial position, a number of the rule information to be moved, a source end position, and a target end position.

12. The internet device of claim 1, wherein the specific command is a deleting command and arranged for indicating at least one rule information satisfying a specific criterion, the executing apparatus is arranged for referring to the deleting command to delete the at least one rule information to which at least a first index position in the ACL of the storage circuit corresponds.

13. The internet device of claim 1, wherein the specific command is an exchanging command;

and the executing apparatus is arranged for referring to the exchanging command to exchange at least a first rule information to which at least a first index position in the ACL of the storage circuit corresponds with at least a second rule information to which at least a second index position in the ACL of the storage circuit corresponds, where the first rule information is moved from the first index position to the second index position, and the second rule information is moved from the second index position to the first index position.

14. The internet device of claim 1, wherein the specific command is a sorting command;

and the executing apparatus is arranged for referring to the sorting command to analyze the plurality of rule information at a plurality of index positions in the ACL of the storage circuit and accordingly generate an analyzing result, and sorting the plurality of rule information according to the analyzing result.

15. The internet device of claim 14, wherein the plurality of index positions are a plurality of discontinuous index positions, and the executing apparatus is arranged for sorting the plurality of discontinuous index positions to generate a plurality of continuous index positions.

16. A method arranged for managing an access control list (ACL), comprising:

transmitting a specific command from a main control unit to an executing apparatus;

utilizing the executing apparatus to receive the specific command;

utilizing the executing hardware to manage a plurality of rule information of the ACL stored in a storage circuit according to the specific command.

17. The method of claim 16, wherein the specific command is an adding command, and the step of managing the plurality of rule information of the ACL comprises:

writing a first rule information into a first index position in the ACL according to the adding command.

18. The method of claim 17, wherein the adding command is an inserting command, and the step of writing the first rule information into the first index position in the ACL comprises:

inserting the first rule information at the first index position between a plurality of index positions of the ACL according to the inserting command.

19. The method of claim 17, wherein the step of inserting the first rule information at the first index position between the plurality of index positions of the ACL comprises:

moving a second rule information originally stored in the first index position to a second index position; and

writing the first rule information to the first index position, where a priority of the second index position is lower than a priority of the first index position.

20. The method of claim 17, wherein the first rule information is pre-stored in a storage element, the adding command indicates an address at which the first rule information is stored in the storage element, and the step of writing the first rule information to the first index position in the ACL comprises:

obtaining the first rule information according to the address indicated by the adding command;

analyzing a plurality of current rule information of the ACL to generate an analyzing result; and

writing the first rule information to the first index position of the ACL according to the analyzing result.

21. The method of claim 16, wherein the specific command is a moving command, and the step of managing the plurality of rule information of the ACL comprises:

moving a rule information from a first index position to a second index position in the ACL according to the moving command, where the rule information is originally stored at the first index position of the ACL before moved.

22. The method of claim 21, wherein the moving command indicates an initial index position and a target index position, or the moving command indicates a source initial position and a target initial position;

and the step of moving the rule information from the first index position to the second index position in the ACL comprises;

sequentially moving at least a rule information from the initial index position or the source initial position in the ACL to the target index position or the target initial position in the ACL, according to the initial index position and the target index position or the source initial position and the target initial position.

23. The method of claim 21, wherein:

when the moving command indicates the initial index position and the target index position, the moving command further indicates a number of rule information to be moved, and the step of sequentially moving at least the rule information from the initial index position in the ACL to the target index position in the ACL moves the rule information by further referring to the number of rule information to be moved; and

when the moving command indicates the source initial position and the target initial position, the moving command further indicates a source end position or a target end position, and the step of sequentially moving at least the rule information from the initial index position in the ACL to the target index position in the ACL moves the rule information by further referring to the source end position or the target end position.

24. The method of claim 22, wherein the initial index position is located before the target index position, the moving command further indicates a number of rule information to be moved, and the step of moving the at least one rule information to the target index position in the ACL comprises:

determining an initial index area according to the number of rule information to be moved and the initial index position;

determining a target index area according to the number of rule information to be moved and the target index position; and

sequentially moving a plurality of rule information in the initial index area to a plurality of corresponding index positions in the target index area in a forward order starting from a last index position of the initial index area to a first index position of the initial index area.

25. The method of claim 22, wherein the initial index position is located after the target index position, the moving command further indicates a number of rule information to be moved, and the step of moving the at least one rule information to the target index position in the ACL comprises:

determining an initial index area according to the number of rule information to be moved and the initial index position;

determining a target index area according to the number of rule information to be moved and the target index position; and

sequentially moving a plurality of rule information in the initial index area to a plurality of corresponding index positions in the target index area in a backward order starting from a first index position of the initial index area to a last index position of the initial index area.

26. The method of claim 21, wherein the moving command indicates a combination of three moving parameters selected among a source initial position, a target initial position, a number of the rule information to be moved, a source end position, and a target end position.

27. The method of claim 16, wherein the specific command is a deleting command and arranged for indicating at least one rule information satisfying a specific criterion, and the step of managing the plurality of rule information of the ACL comprises:

according to the deleting command, deleting the at least one rule information to which at least one corresponding index position in the ACL of the storage circuit corresponds.

28. The method of claim 16, wherein the specific command is an exchanging command, and the step of managing the plurality of rule information of the ACL comprises:

according to the exchanging command, exchanging at least a first rule information to which at least a first index position in the ACL of the storage circuit with at least a second rule information to which at least a second index position in the ACL of the storage circuit, where the first rule information is moved from the first index position to the second index position, and the second rule information is moved from the second index position to the first index position.

29. The method of claim 16, wherein the specific command is a sorting command, and the step of managing the plurality of rule information of the ACL comprises:

sorting the plurality of rule information at a plurality of index positions in the ACL of the storage circuit according to the sorting command.

30. The method of claim 29, wherein the plurality of index positions are a plurality of discontinuous index positions, and the step of sorting the plurality of rule information in the plurality of index positions in the ACL of the storage circuit comprises:

sorting the plurality of discontinuous index positions to generate a plurality of continuous index positions.