IBM Tivoli Privacy Manager for e-business 1.2 SA

IBM Tivoli Privacy Manager for e-business 1.2 SA30-2149-00

................. v............. v................. v Tivoli Privacy Manager....... v.............. vi........... vii............ vii........... vii........... viii............. viii........... viii 1 IBM Tivoli Privacy Manager.. 1.......... 1............... 2............. 3.......... 4 P3P policy........ 5 PII(Personally Identifiable Information)..... 5 Tivoli Privacy Manager...... 6 policy.......... 7 policy.......... 8 policy...... 9....... 10............. 11.......... 12 Tivoli Privacy Manager..... 12 Tivoli Privacy Manager..... 12 Tivoli Privacy Manager..... 13 Tivoli Privacy Manager.... 13 LDAP........... 14 Tivoli Privacy Manager..... 15............. 15 LDAP........... 15 Policy...... 16........... 16.......... 19.......... 19.............. 19 Tivoli Privacy Manager..... 20 Tivoli Privacy Manager LDAP.. 21.............. 21 SDK........... 22........... 22 2 Tivoli Privacy Manager.. 23...... 23 Tivoli Privacy Manager 23........... 24........... 25 IBM WebSphere Tivoli Privacy Manager.......... 26 3 Tivoli Privacy Manager................. 29............ 29 Tivoli Privacy Manager................ 29 Tivoli Privacy Manager.... 30........... 36 WebSphere........ 37........... 37............ 40 Tivoli Privacy Manager.............. 40 Tivoli Access Manager.............. 41... 41 Tivoli Privacy Manager Tivoli Access Manager....... 42............ 43 Tivoli Privacy Manager..... 44,........ 44......... 44......... 45 LDAP LDAP 47 LDAP ID Tivoli Access Manager ID.......... 47........... 47 P3P............... 48 P3P............ 48 4 policy........ 51 policy.. 51 Copyright IBM Corp. 2002, 2003 iii

policy................. 52 policy policy...... 53 policy........ 53 policy.............. 63........ 64.......... 64 policy policy.. 66 policy... 69 Policy.......... 70............. 73 5 Tivoli Privacy Manager 75....... 76 Tivoli Privacy Manager.. 77 Tivoli Privacy Manager................ 78 Tivoli Privacy Manager................ 80 Tivoli Privacy Manager................ 82 Tivoli Privacy Manager...... 91 OS WebSphere.. 91 DB2.. 96.......... 100............ 102 Tivoli Privacy Manager.............. 102 ORB........ 102 Tivoli Privacy Manager.... 103...... 104 DB2 MaxAppls........ 105............... 105 : ORB.... 106 A. policy P3P... 107 B............. 111................ 113................ 115................ 119 iv IBM Tivoli Privacy Manager for e-business:

IBM Tivoli Privacy Manager. v IBM Tivoli Privacy Manager(Tivoli Privacy Manager) v policy Tivoli Privacy Manager ( ).,, Tivoli Privacy Manager Tivoli.. v IBM WebSphere Application Server v IBM DB2 Universal Database Tivoli Privacy Manager,.. Tivoli Privacy Manager Tivoli Privacy Manager. v IBM Tivoli Privacy Manager for e-business. APAR, Tivoli Privacy Manager,,. v IBM Tivoli Privacy Manager for e-business Prerequisites Installation Guide, SC32-1375 Tivoli Privacy Manager IBM. v IBM Tivoli Privacy Manager for e-business, SA30-2149 Tivoli Privacy Manager,. Copyright IBM Corp. 2002, 2003 v

v IBM Tivoli Privacy Manager for e-business, SA30-2150 Tivoli Privacy Manager. v IBM Tivoli Privacy Manager for e-business, SA30-2151 policy Tivoli Privacy Manager. v IBM Tivoli Privacy Manager for e-business Monitor Developer s Guide, SC32-1286 API(Application Programming Interface). v IBM Tivoli Privacy Manager for e-business Problem Determination Guide, SC32-1287 Tivoli Privacy Manager.. v Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manager. v IBM Tivoli Access Manager for e-business IBM Tivoli Access Manager for e-business. http://publib.boulder.ibm.com/tividd/td/tdprodlist.html v IBM Universal DB2 Enterprise Edition DB2. http://www.ibm.com/software/data/db2/library v IBM WebSphere Application Server. http://www.ibm.com/software/webservers/appserv/library.html v IBM HTTP Server. http://www.ibm.com/software/webservers/httpservers/library.html v Tivoli,,, Tivoli. Tivoli http://www.ibm.com/software/tivoli/library/. vi IBM Tivoli Privacy Manager for e-business:

v Tivoli Software Glossary Tivoli. Tivoli Software Glossary. http://publib.boulder.ibm.com/tividd/glossary/termsmst04.htm PDF(Portable Document Format) HTML(Hypertext Markup Language) Tivoli Information Center. http://publib.boulder.ibm.com/tividd/td/tdprodlist.html,,,. : PDF Adobe Acrobat ( )..... v HTML PDF. v. Tivoli, IBM Tivoli Software Support. Tivoli. http://www.ibm.com/software/sysmgmt/products/support/ TivoliPrivacyManager.html, IBM Software Support Guide. http://techsupport.services.ibm.com/guides/handbook.html IBM Software Support. vii

v v v IBM Software Support,..,,,, Java.,.,,,,,. UNIX. Windows (/) (\). Windows bash, UNIX. viii IBM Tivoli Privacy Manager for e-business:

1 IBM Tivoli Privacy Manager IBM Tivoli Privacy Manager for e-business(tivoli Privacy Manager). ( : ),,. Tivoli Privacy Manager,,. Tivoli Privacy Manager e-business OECD(Organization for Economic Cooperation and Development). Tivoli Privacy Manager e-commerce. Tivoli Privacy Manager. Tivoli Privacy Manager. policy, policy,. PII. Tivoli Privacy Manager CPO. v? v policy? v policy? v?. Tivoli Privacy Manager. Copyright IBM Corp. 2002, 2003 1

v. v. Tivoli Privacy Manager. v. v. v. Tivoli Privacy Manager policy. Tivoli Privacy Manager. v. v. OECD.. v. v. v. v. v ID,,,. OECD..,. 2 IBM Tivoli Privacy Manager for e-business:

.... e-commerce.,, ( :,,, )., policy,,. policy. policy., policy, policy. Tivoli Privacy Manager policy policy. Tivoli Privacy Manager policy,. Tivoli Privacy Manager policy policy policy. policy IT policy, policy,,,, policy policy., policy policy. 1 IBM Tivoli Privacy Manager 3

.,. policy policy.,. 1. 1... X Y Z.,... policy policy. policy. v v v policy. X A B Y A Z., policy... 4 IBM Tivoli Privacy Manager for e-business:

..,. Tivoli Privacy Manager ( ) policy IBM Tivoli Access Manager(Tivoli Access Manager). Tivoli Access Manager IBM Tivoli Privacy Manager. P3P policy Tivoli Privacy Manager policy P3P(Platform for Privacy Preferences). P3P W3C(World Wide Web Consortium). W3C (,, ). P3P (XML) policy, policy policy. policy policy P3P. Tivoli Privacy Manager P3P 48 P3P. PII(Personally Identifiable Information) PII(Personally Identifiable Information). PII. PII. PII PII. PII,,. PII. PII, ID PII. Tivoli Privacy Manager PII PII., PII, / /. Tivoli Privacy Manager P3P PII PII. 1 IBM Tivoli Privacy Manager 5

Tivoli Privacy Manager. 1. policy 2. policy IT 3. policy 4. 5. policy 2 Tivoli Privacy Manager.. 2. Tivoli Privacy Manager 6 IBM Tivoli Privacy Manager for e-business:

policy policy.. policy IT,. policy. v v v CPO(Chief Privacy Officer) policy. policy, CPO staff. v v v v ( : ) v policy policy., / policy.,. policy.. Tivoli Privacy Manager CPO staff policy policy. CPO staff,, policy. 8 3 policy. 1 IBM Tivoli Privacy Manager 7

3. policy policy CPO staff policy IT staff policy. policy PII.., IT staff admin.voter.gov voterdb parties current_affiliation. Tivoli Privacy Manager IT staff PII, policy. PII 1. 1. - PII voterdb:parties:current_affiliation voterdb:addresses:street voterdb:addresses:zip_code voterdb:voter_info:gender PII PII. 1, PII PII. PII., policy 8 IBM Tivoli Privacy Manager for e-business:

PII policy. policy PII policy. PII. policy. policy. (Authorized members of legislature Election board officials). policy.,., (StateSenate HouseOfRepresentatives), policy Authorized members of legislature. Tivoli Privacy Manager IT policy. Tivoli Privacy Manager. 2. - policy HouseOfRepresentatives StateSenate BoardOfElections Policy Tivoli Privacy Manager PII. policy IBM Tivoli Privacy Manager. policy policy IT staff IT Tivoli Privacy Manager. Tivoli Privacy Manager...,.. Tivoli Privacy Manager. IBM Tivoli Privacy Manager. 1 IBM Tivoli Privacy Manager 9

, Tivoli Privacy Manager ID, PII,. Tivoli Privacy Manager policy policy. CPO staff policy 51 4 policy. 4 Tivoli Privacy Manager policy. 4. Tivoli Privacy Manager.,. PII,. Tivoli Privacy Manager., policy. Tivoli Privacy Manager policy. 73. 10 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager.., policy Tivoli Privacy Manager.. 45. 5 Tivoli Privacy Manager. 5. Tivoli Privacy Manager. Tivoli Privacy Manager, policy..,. IBM Tivoli Privacy Manager. 1 IBM Tivoli Privacy Manager 11

Tivoli Privacy Manager Tivoli Privacy Manager LDAP ( LDAP ). v LDAP. v. v Tivoli Privacy Manager. v, policy. LDAP Tivoli Privacy Manager. 13 Tivoli Privacy Manager. Tivoli Privacy Manager LDAP LDAP.,. Tivoli Privacy Manager SDK API. IBM Tivoli Privacy Manager Monitor Developer s Guide. Tivoli Privacy Manager API Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager. 15 Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager.. v policy,, v Tivoli Privacy Manager v, Tivoli Privacy Manager ( : Microsoft Internet Explorer)., (CPO staff, IT staff, Administrator Auditor). 12 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager IBM Tivoli Privacy Manager. IBM Tivoli Privacy Manager Prerequisites Installation Guide. Tivoli Privacy Manager Tivoli Privacy Manager. v Tivoli Privacy Manager CPO staff, IT staff, Administrator Auditor v Tivoli Privacy Manager v WebSphere Application Server Tivoli Privacy Manager v Tivoli Privacy Manager WebSphere., WebSphere Tivoli Privacy Manager WebSphere. WebSphere Application Server Tivoli Privacy Manager IBM Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager Tivoli Privacy Manager Monitor Software Developer s Toolkit( SDK). PII. Tivoli Privacy Manager. v, v ( : ) Tivoli Privacy Manager v ( : ) Tivoli Privacy Manager v, policy LDAP : Tivoli Privacy Manager LDAP.. 1 IBM Tivoli Privacy Manager 13

. IBM Tivoli Privacy Manager Monitor Developer s Guide. v Tivoli Privacy Manager. ( : PII, ) Tivoli Privacy Manager.. LDAP Tivoli Privacy Manager LDAP LDAP LDAP. LDAP LDAP., LDAP LDAP. LDAP Tivoli Privacy Manager LDAP. LDAP LDAP,, LDAP. LDAP Tivoli Privacy Manager LDAP. LDAP IBM Tivoli Privacy Manager. 84 LDAP. LDAP LDAP Tivoli Privacy Manager. LDAP LDAP attributetypes( ) Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager., policy PII. LDAP DIT(Directory Index Tree). 82 PII LDAP DN. 14 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manager,.. SDK Tivoli Privacy Manager. 25 6. Tivoli Privacy Manager. Tivoli Privacy Manager IBM Tivoli Privacy Manager Monitor Developer s Guide. IIOP Tivoli Privacy Manager J2EE JNDI. Tivoli Privacy Manager WebSphere Application Server JNDI. Tivoli Privacy Manager. Tivoli Privacy Manager. Tivoli Privacy Manager, XML.. LDAP, LDAP. LDAP.., - PII LDAP.MONITOR.DN.FILTER PII LDAP DIT DN. Tivoli Privacy Manager LDAP. LDAP Tivoli Privacy Manager. LDAP Tivoli Privacy Manager. PII, PII,. 1 IBM Tivoli Privacy Manager 15

LDAP LDAP. LDAP, LDAP LDAP LDAP. Policy policy policy PII Tivoli Privacy Manager policy.. v PII v v, (,, ) Tivoli Privacy Manager. PII. Tivoli Privacy Manager - PII IT staff IBM Tivoli Privacy Manager. Tivoli Privacy Manager. policy. Tivoli Privacy Manager - ( : ). Tivoli Privacy Manager,.. Tivoli Privacy Manager LDAP,., LDAP. v LDAP : Tivoli Privacy Manager.. - PII 16 IBM Tivoli Privacy Manager for e-business:

- (Tivoli Privacy Manager LDAP LDAPMonitorFullyQualifiedDN.) - - - ( ) - ( ) Tivoli Privacy Manager PII, policy.., ( )., ( PII PII ). : (, ) Tivoli Privacy Manager. IBM Tivoli Privacy Manager Monitor Developer s Guide. Tivoli Privacy Manager (, - PII ), LDAP. Tivoli Privacy Manager ( - PII ), LDAP ( ). : PII PII. v LDAP ( :, ), LDAP Tivoli Privacy Manager ( ). v, Tivoli Privacy Manager LDAP Tivoli Privacy Manager LDAP, LDAP (Tivoli Privacy Manager.). 1 IBM Tivoli Privacy Manager 17

,,., Tivoli Privacy Manager LDAP., LDAP. v LDAP : Tivoli Privacy Manager.. Tivoli Privacy Manager., WebSphere Application Server. ( Tivoli Privacy Manager.). LDAP. v LDAP ( :, ), LDAP Tivoli Privacy Manager ( ). v, Tivoli Privacy Manager LDAP Tivoli Privacy Manager LDAP, LDAP Tivoli Privacy Manager. : Tivoli Privacy Manager LDAP Tivoli Privacy Manager,., LDAP LDAP LDAP., Tivoli Privacy Manager. Tivoli Privacy Manager. 18 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager LDAP, ( )., LDAP. LDAP LDAP : v Tivoli Privacy Manager.. PII (Tivoli Privacy Manager LDAP LDAPMonitorFullyQualifiedDN.) ( ) Tivoli Privacy Manager PII policy., policy. v LDAP. LDAP LDAP, Tivoli Privacy Manager. LDAP. Tivoli Privacy Manager 1.2,. ID ID ID.... 1 IBM Tivoli Privacy Manager 19

... policy policy Tivoli Privacy Manager. policy,.. P3P PII PII P3P PII. CPO staff PII. Tivoli Privacy Manager Red Hat Linux SuSE SLES zlinux. IBM AIX Sun Solaris. IBM Tivoli Privacy Manager. WebSphere WebSphere Application Server 5.0... Tivoli Privacy Manager. PII PII policy PII.. 20 IBM Tivoli Privacy Manager for e-business:

WebSphere Application Server. Tivoli Privacy Manager. Tivoli Privacy Manager LDAP Tivoli Privacy Manager LDAP. LDAP.. UNIX LDAP., Tivoli Privacy Manager RMI/IIOP LDAP.. v. - ID - policy v Tivoli Privacy Manager ( ).. CLI(Command-Line Interface) CLI(cmdReport ). cmdreport. 1 IBM Tivoli Privacy Manager 21

SDK Tivoli Privacy Manager SDK Tivoli Privacy Manager (SOAP/XML ).. RMI/IIOP. submitpii.,.. CheckConf CheckConfInfo. CheckConf Tivoli Privacy Manger 1.1 SDK. API. IBM Tivoli Privacy Manager Prerequisites Installation Guide WebSphere Application Server, IBM DB2 Universal Database Tivoli Access Manager Tivoli Privacy Manager Tivoli Privacy Manager. IBM Tivoli Privacy Manager policy, policy. Tivoli Privacy Manager IBM Tivoli Privacy Manager for e-business. IBM Tivoli Privacy Manager Monitor Developer s Guide. Tivoli Privacy Manager.. 22 IBM Tivoli Privacy Manager for e-business:

2 Tivoli Privacy Manager IBM Tivoli Privacy Manager for e-business(tivoli Privacy Manager). IBM Tivoli Privacy Manager FixPack. IBM Tivoli Privacy Manager Prerequisites Installation Guide. Tivoli Privacy Manager. v IBM WebSphere Application Server(IBM HTTP Server ) v IBM Tivoli Access Manager for e-business v IBM DB2 Universal Database., IBM Tivoli Privacy Manager. IBM Tivoli Privacy Manager Prerequisites Installation Guide. IBM Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manager. IBM Tivoli Privacy Manager Prerequisites Installation Guide. Tivoli Privacy Manager Tivoli Privacy Manager.. Tivoli Privacy Manager,. Tivoli Privacy Manager 75 5 Tivoli Privacy Manager. Copyright IBM Corp. 2002, 2003 23

Tivoli Privacy Manager, policy. Tivoli Privacy Manager Tivoli Privacy Manager.,, 3.. 3. : : IBM Tivoli Privacy Manager v IBM WebSphere Application Server v v v Tivoli Access Manager PDJRTE Tivoli Privacy Manager LDAP IBM DB2 UDB Tivoli Privacy Manager, LDAP, PDJRTE DB2., Tivoli Access Manager (LDAP ) Tivoli Privacy Manager. LDAP Tivoli Privacy Manager policy. policy Tivoli Access Manager. policy policy IBM Tivoli Privacy Manager. LDAP Tivoli Privacy Manager.., policy,. LDAP. 84 LDAP. Tivoli Privacy Manager LDAP 88 Tivoli Privacy Manager LDAP. 24 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager. 6 Tivoli Privacy Manager.. 6. Tivoli Privacy Manager 4. 4. Tivoli Privacy Manager Tivoli Privacy Manager LDAP Tivoli Privacy Manager LDAP IBM DB2 UDB ( WebSphere Application Server WebSphere Application Server Tivoli Access Manager Client Java Runtime Environment(PDJRTE ) (LDAP ) 26 5. 2 Tivoli Privacy Manager 25

5. :. Tivoli Privacy Manager v Tivoli Access Manager v v v Tivoli Privacy Manager IBM DB2 UDB (LDAP ) Tivoli Privacy Manager LDAP Tivoli Access Manager v Tivoli Privacy Manager Tivoli Privacy Manager IBM DB2 UDB v v v v v Tivoli Privacy Manager IBM DB2 UDB (LDAP ) Tivoli Privacy Manager Tivoli Access Manager (LDAP ) (LDAP ) v Tivoli Privacy Manager v v Tivoli Access Manager Tivoli Privacy Manager IBM DB2 UDB IBM WebSphere Tivoli Privacy Manager IBM WebSphere Application Server, WebSphere WebSphere., Tivoli Privacy Manager Java. Tivoli Privacy Manager WebSphere Application Server J2EE. Tivoli Privacy Manager HTTP(hypertext transfer protocol) Tivoli Privacy Manager (Tivoli Privacy Manager ). Tivoli Privacy Manager WebSphere Application Server. strut servlet JSP(JavaServer Page) EJB EJB(Enterprise Java Bean) JNDi(Java Naming Directory Interface). EJB. 27 7 Tivoli Privacy Manager.. 26 IBM Tivoli Privacy Manager for e-business:

7. Tivoli Privacy Manager J2EE Tivoli Privacy Manager WebSphere Application Server,. 1. Tivoli Privacy Manager. 2. WebSphere. a. JDBC b. 3. Tivoli Privacy Manager WebSphere.. v Tivoli Privacy Manager v EJB JNDI v 4. Tivoli Privacy Manager Tivoli Privacy Manager LDAP, JNDI. JNDI WebSphere Application Server. IBM Tivoli Privacy Manager. 2 Tivoli Privacy Manager 27

28 IBM Tivoli Privacy Manager for e-business:

3 Tivoli Privacy Manager Tivoli Privacy Manager.. v v v v Tivoli Privacy Manager v P3P Tivoli Privacy Manager. WebSphere Application Server Tivoli Privacy Manager,,.,,, Tivoli Privacy Manager WebSphere Application Server Tivoli Privacy Manager. 37 Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager (CPO staff, IT staff, Administrator Auditor), Tivoli Privacy Manager. WebSphere Administrative Console Tivoli Privacy Manager. IBM Tivoli Privacy Manager. : IBM Tivoli Privacy Manager ID. Tivoli Privacy Manager. ID. Copyright IBM Corp. 2002, 2003 29

,. Tivoli Privacy Manager IBM Tivoli Privacy Manager. 37 WebSphere.. Tivoli Privacy Manager. 1. (localos LTPA) Tivoli Privacy Manager. 2. WebSphere Application Server. Tivoli Privacy Manager.,, Tivoli Privacy Manager. CPO staff. policy,. Privacy, Tivoli Privacy Manager. 3. Tivoli Privacy Manager.. 4. Tivoli Privacy Manager WebSphere Application Server ( ). 5. Tivoli Privacy Manager WebSphere. Tivoli Privacy Manager Tivoli Privacy Manager. ( : ) WebSphere Application Server J2EE. Tivoli Privacy Manager WebSphere Application Server. Tivoli Privacy Manager, Tivoli Privacy Manager 30 IBM Tivoli Privacy Manager for e-business:

WebSphere Application Server. Tivoli Privacy Manager IBM Tivoli Privacy Manager. Tivoli Privacy Manager (, ) (CPO staff, IT staff, Administrator Auditor) WebSphere Application Server. Tivoli Privacy Manager Tivoli Privacy Manager WebSphere Application Server. (SERVER) Tivoli Privacy Manager WebSphere Application Server. Tivoli Privacy Manager WebSphere ID. : Tivoli Privacy Manager. Tivoli Privacy Manager WebSphere Application Server ID. WebSphere 4.x Tivoli Privacy Manager WebSphere Run As ID. WebSphere 5.x ID. IBM_Tivoli_Privacy_Manager RunAs (MONITOR) Tivoli Privacy Manager WebSphere Application Server. ID. Tivoli Privacy Manager ID. WebSphere Application Server ID ID. 3 Tivoli Privacy Manager 31

ID IBM Tivoli Privacy Manager Monitor Developer s Guide. Tivoli Privacy Manager.,. Tivoli Privacy Manager., WebSphere Application Server, Tivoli Privacy Manager. CPO staff. policy, policy.,. Auditor(AUDIT_STAFF) Auditor. CPO staff IT staff....,... CPO staff(cpo_staff) CPO staff Auditor. policy policy, P3P. policy policy policy, policy 32 IBM Tivoli Privacy Manager for e-business:

, policy, policy, policy. policy Tivoli Privacy Manager Tivoli Privacy Manager P3P policy. policy policy P3P. Tivoli Privacy Manager policy P3P 107 A policy P3P. IT staff(it_staff) IT staff Auditor. policy v v v v v v PII policy ID ID policy policy policy policy. policy IBM Tivoli Privacy Manager.,.,,, WebSphere,. policy : Tivoli Privacy Manager 3 Tivoli Privacy Manager 33

. IT staff, PII PII. PII policy : PII., IT staff PII. policy. policy : ( ). ID policy : ( ) ID( : Tivoli Access Manager ) ( : LDAPMonitorBindEntity).., PII.. policy policy : policy. policy : PII PII. PII PII. -> PII. policy : policy. policy 34 IBM Tivoli Privacy Manager for e-business:

. policy 52 policy. policy policy : policy. IT staff policy. policy policy. IT staff policy policy. policy policy. Tivoli Privacy Manager policy. IT staff Auditor. (ADMIN_STAFF)... ( ),,... (, ). Tivoli Privacy Manager. 3 Tivoli Privacy Manager 35

Access Manager Tivoli Privacy Manager Tivoli Access Manager. WebSphere Tivoli Privacy Manager. WebSphere 5.x. WebSphere 4.x., WebSphere 4.x LocalOS WebSphere. WebSphere 5.x LocalOS LDAP SWAM(Simple WebSphere Authentication Mechanism). Tivoli Privacy Manager LTPA(Lightweight Third-Party Authentication). LDAP LTPA. 6 WebSphere. 6. WebSphere / WebSphere 4.x LocalOS LDAP LTPA LDAP LTPA WebSphere 5.x LocalOS SWAM LDAP LocalOS LTPA LDAP LDAP LTPA WebSphere 4.x LTPA(Lightweight Third-Party Authentication) WebSphere (LocalOS). LTPA, Tivoli Privacy Manager LTPA(Lightweight Third Party Authentication). WebSphere 5.x, LTPA. WebSphere WebSphere InfoCenter. http://www.ibm.com/software/webservers/appserv/library.html 36 IBM Tivoli Privacy Manager for e-business:

WebSphere Tivoli Privacy Manager WebSphere Application Server, Tivoli Privacy Manager... Tivoli Privacy Manager. ID. WebSphere,. IBM Tivoli Privacy Manager. Tivoli Privacy Manager.. Tivoli Privacy Manager., -, Tivoli Privacy Manager - - -.,,. 38 8 Tivoli Privacy Manager. 3 Tivoli Privacy Manager 37

8. Tivoli Privacy Manager - Tivoli Privacy Manager WebSphere WebSphere Application Server HTTP. (Tivoli Privacy Manager HTTP IBM Tivoli Privacy Manager Prerequisites Installation Guide.), HTTP (HTTPS) Tivoli Privacy Manager Tivoli Privacy Manager., WebSphere HTTPS. WebSphere HTTPS WebSphere InfoCenter. http://www.ibm.com/software/webservers/appserv/library.html Tivoli Privacy Manager - Tivoli Privacy Manager Tivoli Privacy Manager WebSphere J2EE (J2EE 26 IBM WebSphere Tivoli Privacy Manager ). 38 IBM Tivoli Privacy Manager for e-business:

WebSphere Application Server Java RMI/IIOP(Remote Method Invocation over the Internet Iinter-ORB Protocol- IIOP )., Tivoli Privacy Manager Tivoli Privacy Manager Tivoli Privacy Manager IIOP. IIOP. Tivoli Privacy Manager 1.2 SOAP XML. Tivoli Privacy Manager,. IIOP. IBM Tivoli Privacy Manager Monitor Developer s Guide. LDAP : Tivoli Privacy Manager LDAP 1.2 Tivoli Privacy Manager. IIOP. LDAP (SOAP/XML) IIOP( ). Tivoli Privacy Manager - Tivoli Access Manager SSL. Tivoli Privacy Manager Tivoli Access Manager, SSL.,,. SSL Tivoli Access Manager SSL 7135. SSL. Tivoli Privacy Manager 40. - (PII, ), Tivoli Privacy Manager ( : ).. v v v v LDAP : Tivoli Privacy Manager LDAP SSL. Tivoli Privacy Manager LDAP LDAP 3 Tivoli Privacy Manager 39

-LDAP, LDAP SSL (636). LDAP IBM Tivoli Privacy Manager. 9 Tivoli Privacy Manager. 9. Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Access Manager Tivoli Access Manager. Tivoli Access Manager,. Tivoli Privacy Manager Tivoli Access Manager Tivoli Access Manager. Tivoli Privacy Manager Tivoli Privacy Manager Tivoli Privacy Manager Tivoli Privacy Manager Tivoli Access Manager 40 IBM Tivoli Privacy Manager for e-business:

.. IBM Tivoli Privacy Manager.. v Tivoli Privacy Manager Tivoli Access Manager ID. Tivoli Privacy Manager ID. ID. v Tivoli Access Manager sec_master ID. Tivoli Access Manager. sec_master. v Tivoli Access Manager. Tivoli Access Manager.. v SSL Tivoli Access Manager. 7135. Tivoli Access Manager.. Tivoli Access Manager.,.. policy policy. Tivoli Access Manager IBM Tivoli Privacy Manager. PII,, Tivoli Access Manager ID., policy, policy ( ) policy. ( ), Tivoli Access Manager ID. 3 Tivoli Privacy Manager 41

Tivoli Access Manager ID Tivoli Privacy Manager LDAP IBM Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Access Manager Tivoli Access Manager Tivoli Privacy Manager, ID Tivoli Privacy Manager. Tivoli Access Manager. Tivoli Privacy Manager Tivoli Access Manager ID ID, ID., LDAP Tivoli Privacy Manager LDAP cn=first_name Last_name First_name Last_name Tivoli Access Manager,., ID,. sec_master ID Tivoli Privacy Manager. Tivoli Access Manager policy policy Tivoli Access Manager, IT staff Tivoli Access Manager Tivoli Access Manager., IT staff Tivoli Access Manager Tivoli Access Manager. Tivoli Access Manager.. v iv-admin 42 IBM Tivoli Privacy Manager for e-business:

v web-seal-servers v sec-mgrd-servers v ivacld-servers v webseal-mpa-servers v securitygroup v remote-acl-users policy PII policy PII. Tivoli Privacy Manager Tivoli Privacy Manager. policy.., ( ) 5. PII 5. policy ( ) ( ). Tivoli Privacy Manager Tivoli Privacy Manager WebSphere. ( : )... Tivoli Privacy Manager ( ). Tivoli Privacy Manager 3 Tivoli Privacy Manager 43

. AIX timed ntpd. (third-party) NTP( network time protocol ). NTP. Tivoli Privacy Manager (UTC). UTC,.. UTC 0. UTC,. Tivoli Privacy Manager. Tivoli Privacy Manager LDAP IBM Tivoli Privacy Manager., Tivoli Privacy Manager,. Tivoli Privacy Manager. ( Java Tivoli Privacy Manager.) Tivoli Privacy Manager.,. Java Java.. Java. IBM Tivoli Privacy Manager Monitor Developer s Guide. ( ).. 44 IBM Tivoli Privacy Manager for e-business:

v.,.. v., Tivoli Privacy Manager LDAP LDAP LDAP LDAP... IBM Tivoli Privacy Manager Monitor Developer s Guide.,.,. :.,.. Tivoli Privacy Manager. LDAP : Tivoli Privacy Manager LDAP,., LDAP server_hostname-ldapmonitor. server_hostname LDAPMonitor. LDAP.. Tivoli Privacy Manager. Tivoli Privacy Manager policy 3 Tivoli Privacy Manager 45

.,. policy. Tivoli Privacy Manager LDAP ( ). IBM Tivoli Privacy Manager Monitor Developer s Guide.. Tivoli Privacy Manager. Tivoli Privacy Manager, policy., Tivoli Privacy Manager. IT staff PII. policy. PII CPO staff IT staff.? -. policy? PII. 75 5 Tivoli Privacy Manager., Tivoli Privacy Manager. Tivoli Privacy Manager LDAP ( ).. v Tivoli Privacy Manager 16 v 83 PII- 46 IBM Tivoli Privacy Manager for e-business:

v 73 LDAP LDAP Tivoli Privacy Manager LDAP LDAP ldapmonitor.properties. LDAP LDAP. LDAP.MONITOR.CLIENT.SIDE.PORT LDAP LDAP.MONITOR.SERVER.SIDE.PORT LDAP LDAP LDAP LDAP.MONITOR.SERVER.SIDE.HOST LDAP LDAP. LDAP IBM Tivoli Privacy Manager. LDAP ID Tivoli Access Manager ID >PII,, Tivoli Access Manager ID., policy, policy ( ) policy. ( ), Tivoli Access Manager ID. Tivoli Access Manager ID Tivoli Privacy Manager LDAP IBM Tivoli Privacy Manager. Tivoli Privacy Manager. (.) ( ) -PII Tivoli Privacy Manager, Tivoli Privacy Manager.. -PII 3 Tivoli Privacy Manager 47

Tivoli Privacy Manager, Tivoli Privacy Manager,.,., Tivoli Privacy Manager., ( ). IBM Tivoli Privacy Manager. P3P Tivoli Privacy Manager P3P 1.0(Platform for Privacy Preferences 1.0). P3P 1.0 PII policy XML. Tivoli Privacy Manager policy, P3P policy. P3P 1.0. http://www.w3.org/p3p/ policy Tivoli Privacy Manager policy policy ( )., policy, policy,., Tivoli Privacy Manager policy. Tivoli Privacy Manager P3P policy, IBM Tivoli Privacy Manager. P3P Tivoli Privacy Manager P3P policy policy. v policy. v policy. 48 IBM Tivoli Privacy Manager for e-business:

v policy Tivoli Privacy Manager, P3P policy. v P3P. Tivoli Privacy Manager P3P policy P3P P3P. 107 A policy P3P Tivoli Privacy Manager (policy ) P3P. 3 Tivoli Privacy Manager 49

50 IBM Tivoli Privacy Manager for e-business:

4 policy policy. policy policy policy. policy. v.. policy (, major_version.minor_version 1.0 ) policy.. policy, PII policy. policy policy. policy., policy v policy( policy ).,. policy policy policy, PII policy Copyright IBM Corp. 2002, 2003 51

Tivoli Privacy Manager policy policy. policy, policy policy. policy policy policy. Tivoli Privacy Manager policy IBM Tivoli Privacy Manager. policy Tivoli Privacy Manager policy PII PII. PII PII., PII policy. policy on off. policy on. Tivoli Privacy Manager policy. policy,. PII., LDAP policy PII ldapadd,. Tivoli Privacy Manager policy,. Tivoli Privacy Manager policy. Tivoli Privacy Manager policy PII,. policy, IT staff PII Tivoli Privacy Manager policy PII.,.. 52 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager policy PII,. policy, IT staff PII Tivoli Privacy Manager policy PII.,,. policy., policy, policy. policy policy 7 policy policy. 7. policy policy policy policy PII.., policy PII, policy. policy. policy. policy Tivoli Privacy Manager policy. policy, PII, PII policy. policy 63 policy. policy : Tivoli Privacy Manager. (PII). policy PII (Telephone.Info PII ). 4 policy 53

10. policy PII, PII PII. : CPO PII policy(p1) IT staff., IT staff. v policy P1 PII. v policy P1. PII policy, IT staff policy., IT staff policy P1. policy, PII,. 54 IBM Tivoli Privacy Manager for e-business:

PII, PII P1 policy P1. policy,. policy. policy : Tivoli Privacy Manager. (PII). policy(p1) PII (Telephone.Info PII ). 11. policy policy, PII PII policy. 4 policy 55

: CPO PII policy(p1) IT staff., IT staff. v policy P1 PII. v policy P1. PII policy, IT staff policy., IT staff policy P1. PII,. PII, PII P1 policy P1. PII PII, policy P1. PII policy, policy. policy.. policy : Tivoli Privacy Manager (PII). PII policy, PII policy. PII policy(p1). policy PII ( ), policy PII policy PII. 56 IBM Tivoli Privacy Manager for e-business:

12. policy : CPO PII policy(p1) IT staff., IT staff. v policy P1 PII. v policy P1. PII policy, IT staff policy., IT staff policy P1. PII,., policy,. 4 policy 57

PII, PII P1 policy P1. policy,. policy. policy : Tivoli Privacy Manager (PII). policy, PII PII policy. policy(p1). 13. policy Tivoli Privacy Manager, PII. policy, Tivoli Privacy Manager PII ( 58 IBM Tivoli Privacy Manager for e-business:

). policy PII. PII. PII policy policy. : CPO PII policy(p1) IT staff., IT staff. v policy P1 PII. v policy P1. PII policy, IT staff policy., IT staff policy P1. PII,. PII, PII P1 policy P1. PII PII, policy P1., policy PII policy. policy.. policy policy : policy, PII PII policy. policy PII. policy. 60 14 policy P1. 4 policy 59

14., PII. : CPO PII policy(p1) IT staff., IT staff. v policy P1 PII. v policy P1. IT staff policy policy. PII, policy P1. PII, PII P1 policy P1. policy,. 60 IBM Tivoli Privacy Manager for e-business:

policy. PII IT staff policy. PII, Tivoli Privacy Manager. PII, policy P1. PII policy P1,. PII, policy. policy policy : policy, policy., 2003 policy 2004 P2. 62 15 policy P1 policy P2. policy policy PII 63 policy. Tivoli Privacy Manager 1.2 policy policy PII policy policy PII. 4 policy 61

15. policy policy : 2003 CPO policy P1 IT staff., IT staff. v policy P1 PII. v policy P1. IT staff policy policy. PII, policy P1. PII, policy policy. PII, PII P1 policy P1. policy,. 62 IBM Tivoli Privacy Manager for e-business:

policy. 2004, v CPO policy policy P2. v IT staff PII policy P2 PII policy P2. v IT staff policy P2. Policy P2 policy P1 policy P1. policy P2 IT staff. v P2. v P1, P1 PII. P2 policy, PII. PII, P2 PII P2 PII, policy P2. policy P1, PII. policy Tivoli Privacy Manager 1.2 policy. policy Tivoli Privacy Manager policy. policy. policy PII policy policy (73 ). policy policy. policy policy PII 4 policy 63

policy. policy ( 52 policy ). policy. policy. policy PII. 73. PII policy. policy. - policy policy. - policy policy. policy. policy policy. policy PII policy 66 policy policy. policy policy Tivoli Privacy Manager. PII Tivoli Privacy Manager policy.,, PII (true) (73 ). 64 IBM Tivoli Privacy Manager for e-business:

policy policy. policy PII policy. 8 policy. 8. policy : policy. : policy. policy policy. policy. policy policy.. policy. v v policy v policy. 9 policy. 9. policy : policy. : policy. policy. policy policy. policy policy. policy., policy policy., policy.,. 4 policy 65

9. policy ( ) :, policy. policy., policy. policy., policy policy. policy 65 9, Tivoli Privacy Manager 1.1 policy., policy PII policy., policy policy. policy policy policy. : policy PII : PII policy PII policy PII policy. policy PII : PII policy. policy PII : policy (69 policy ) policy PII. policy policy 67 10 Tivoli Privacy Manager.. 66 IBM Tivoli Privacy Manager for e-business:

10. ( ) - policy. - - policy. - - policy. - - policy. - - - policy. policy PII, - - policy. policy,., policy policy. policy, policy. policy policy (64 ). 68 11 policy PII policy P1 P2 policy. : Tivoli Privacy Manager 1.1 policy policy policy policy PII. 4 policy 67

11. policy /. policy. v v - - P1 - - P2 policy, policy policy. P1 P2. P2 P1. P1 P2. P1 P2. v P1. v P2 P1 P2. v v. P1. v P2 P1 P2. v v v v v v v. P1. P2.. P1. P2. policy. /. policy policy policy. v v - - P1 - - P2 policy policy. P1 P2. P1 P2. P2 P1. P1 P2. P1 P2. v P1. v P1 P2. v v. P1. v P1 P2. v v. P1. v P1 P2. v v. P1. v P1 P2. v. 68 IBM Tivoli Privacy Manager for e-business:

11. ( ) policy /. policy. v v - - P1 - - P2 P1 P2. P1 P2. P2 P1. P1 P2. v v v v v P1. P2.. P1. P2. v P1. v v P1. P1 P2. P1 P2. v v v v. P1. P1 P2.. policy. PII policy. PII policy..., Tivoli Privacy Manager LDAP. policy policy Privacy Manager 1.2 policy. policy. policy policy. policy IBM Tivoli Privacy Manager. 4 policy 69

Policy policy policy.. policy.. v policy ( policy) policy ( policy). : policy. v PII policy policy policy. 71 : PII policy PII. v policy policy policy policy. 72 : policy PII PII policy policy. : policy policy., policy., policy. policy. policy PII policy., PII, PII policy.. CPO policy. policy P1 policy PII. P1 ( : ) ( : ). policy P2 (PII ), PII PII., policy P2 PII. IT staff policy. 70 IBM Tivoli Privacy Manager for e-business:

v policy PII. v policy. PI PII P2 PII, P1 P2 PII. PII, P1 P2. P1 policy, P1 policy. PII, Tivoli Privacy Manager PII P1 P2. policy PII policy. v IT staff P1 - ( ) P2 - (, ). v policy on. v P1 P2, policy. v, policy policy policy., policy. policy,. policy policy. : PII policy. policy P1 X P2 Y. policy, PII policy -. policy, PII. policy PII, policy PII policy. 4 policy 71

16. policy PII : policy PII A policy Policy A policy Policy B. A Policy A policy Policy B. Policy A, PII policy ( - ). Policy B Policy A off Policy A (, ). Policy B ( ). Policy A PII Policy B PII Policy A., PII Policy A Policy B. policy, policy policy. PII Policy A off Policy B PII. Policy B PII Policy A PII PII, Policy B PII. 72 IBM Tivoli Privacy Manager for e-business:

17. policy PII policy policy PII Tivoli Privacy Manager., policy policy policy PII. Tivoli Privacy Manager PII policy. Tivoli Privacy Manager. v policy. v, PII. policy. 4 policy 73

v Tivoli Privacy Manager, PII, policy. IT staff, PII, Tivoli Privacy Manager. v PII policy. v policy policy (64 ), policy. policy policy policy. policy policy. policy. - policy ( ) (true). - policy PII. - policy ( ) (true). v policy, policy. policy policy. 12 policy. 12. policy OR policy policy., PII, AND policy, PII., AND (true). 74 IBM Tivoli Privacy Manager for e-business:

5 Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manager (seamlessly). Tivoli Privacy Manager,. Tivoli Privacy Manager.,. Tivoli Privacy Manager 76. 80 Tivoli Privacy Manager 96 DB2. WebSphere Application Server Tivoli Privacy Manager WebSphere. 90%. policy. IBM Tivoli Privacy Manager., Tivoli Privacy Manager. Tivoli Privacy Manager 82 Tivoli Privacy Manager. Tivoli Privacy Manager,, Copyright IBM Corp. 2002, 2003 75

. Tivoli Privacy Manager WebSphere Application Server. Tivoli Privacy Manager, WebSphere. Tivoli Privacy Manager, WebSphere DB2.. 78 Tivoli Privacy Manager. policy : policy ( ), policy.. policy policy 52 policy. policy IBM Tivoli Privacy Manager. Tivoli Privacy Manager Tivoli Privacy Manager., 10 PII 100,000., 1,000,000 ( ) 1000. Tivoli Privacy Manager. Tivoli Privacy Manager.,. v.,. 76 IBM Tivoli Privacy Manager for e-business:

v,.. Tivoli Privacy Manager. IBM Tivoli Privacy Manager. v ( ),.. IBM Tivoli Privacy Manager. v,.,. Tivoli Privacy Manager. http://www.ibm.com/software/sysmgmt/products/support/tivoliprivacymanager.html Tivoli Privacy Manager Tivoli Privacy Manager,. Tivoli Privacy Manager. Tivoli Privacy Manager 78 Tivoli Privacy Manager WebSphere. Tivoli Privacy Manager 80 Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manager 82 Tivoli Privacy Manager. 5 Tivoli Privacy Manager 77

..,. Tivoli Privacy Manager IBM WebSphere. ( ).. WebSphere Tivoli Privacy Manager. Tivoli Privacy Manager WebSphere Application Server (26 IBM WebSphere Tivoli Privacy Manager ).. Tivoli Privacy Manager. (80 Tivoli Privacy Manager ).,., Tivoli Privacy Manager. WLM(WebSphere Workload Management).,.. Tivoli Privacy Manager WLM. v WLM policy. v.. 78 IBM Tivoli Privacy Manager for e-business:

v.. v Tivoli Privacy Manager. v Tivoli Privacy Manager. Tivoli Privacy Manager. v WebSphere Application Server localos. LDAP LTPA. v Tivoli Privacy Manager Tivoli Privacy Manager.. ( ),. CPU 85%( ). v WebSphere UNIX (AIX, Sun Solaris Linux) Windows. Tivoli Privacy Manager UNIX Windows WebSphere. v Tivoli Privacy Manager WebSphere Application Server.. WebSphere. AIX, /usr/websphere/appserver. Sun Solaris, /opt/websphere/appserver. Windows, WebSphere. WebSphere Application Server 4.x \WebSphere\AppServer, WebSphere Application Server 5.x \program files\websphere\appserver. WebSphere. v - WebSphere Application Server v IBM WebSphere Application Server V5.0 v IBM WebSphere Application Server, 5- v IBM WebSphere Application Server V4.0 Advanced Edition 5 Tivoli Privacy Manager 79

Tivoli Privacy Manager Tivoli Privacy Manager DB2. IBM DB2 UDB V7.1 Performance Tuning Guide, SG24-6012.. ( ).. DMS(Database Managed Space) SMS(System Managed Storage). : SMS(System Managed Storage) Tivoli Privacy Manager. Tivoli Privacy Manager.,., DMS(Database Managed Space). DMS. DMS,..,.. 13 ( ). 13. ( ) ( ) 177 335 241 771,. 80 IBM Tivoli Privacy Manager for e-business:

. 1000. 500. Tivoli Privacy Manager IBM Tivoli Privacy Manager...,.. IBM DB2.. DB2 96 DB2. 82 18 Tivoli Privacy Manager., WAS_1 PM_1.. WAS_1 ( ) PM_2/WAS_2 PM_3/WAS_3. DB2. DB2 Universal Database Enterprise Extended Edition(DB2EEE) DB2 Universal Database Enterprise Server Edition(DB2 ESE).. 5 Tivoli Privacy Manager 81

18. Tivoli Privacy Manager WebSphere alc DB2 102. Tivoli Privacy Manager Tivoli Privacy Manager. Tivoli Privacy Manger. http://www.ibm.com/software/sysmgmt/products/support/tivoliprivacymanager.html Tivoli Privacy Manager Tivoli Privacy Manager. LDAP 88 Tivoli Privacy Manager LDAP. PII LDAP DN, LDAP DIT DN.,., DIT PII, PII LDAP. DN LDAP.MONITOR.DN.FILTER.x. -PII DN., DN ou,o ( ou 82 IBM Tivoli Privacy Manager for e-business:

), PII, -PII. LDAP.MONITOR.DN.FILTER.1=ou,o, DN. LDAP.MONITOR.DN.FILTER.x LDAP IBM Tivoli Privacy Manager. PII :, policy PII. PII, Tivoli Privacy Manager. policy. v Tivoli Privacy Manager v v., LDAP, LDAP.,, LDAP LDAP. PII- Tivoli Privacy Manager. PII- 45. PII., Tivoli Privacy Manager LDAP LDAP LDAP.,.,.,., Tivoli Privacy Manager LDAP LDAP, 5 Tivoli Privacy Manager 83

LDAP Tivoli Privacy Manager. LDAP LDAP LDAP, LDAP LDAP. LDAP,.,.,. LDAP Tivoli Privacy Manager LDAP LDAP,., LDAP.. Tivoli Privacy Manager LDAP. 19. Tivoli Privacy Manager LDAP.,, -.,,. 84 IBM Tivoli Privacy Manager for e-business:

20. Tivoli Privacy Manager LDAP : LDAP.. 21. Tivoli Privacy Manager 5 Tivoli Privacy Manager 85

Tivoli Privacy Manager LDAP.,.. LDAP.MONITOR.NAME=MONITOR LDAP.MONITOR.CLIENT.SIDE.PORT=1389 LDAP.MONITOR.CLIENT.SERVER.SIDE.HOST=LDAPSERVER LDAP.MONITOR.CLIENT.SERVER.SIDE.PORT=389... LDAP.MONITOR.NAME=MONITOR LDAP.MONITOR.CLIENT.SIDE.PORT=1389 LDAP.MONITOR.CLIENT.SERVER.SIDE.HOST=LDAPSERVER LDAP.MONITOR.CLIENT.SERVER.SIDE.PORT=389... LDAP.MONITOR.NAME=MONITOR LDAP.MONITOR.CLIENT.SIDE.PORT=1389 LDAP.MONITOR.CLIENT.SERVER.SIDE.HOST=LDAPSERVER LDAP.MONITOR.CLIENT.SERVER.SIDE.PORT=389 : 1..,. LDAP (1389),. 2. LDAP. 3., Tivoli Privacy Manager., Tivoli Privacy Manager,. LDAP : LDAP.., ( ). 86 IBM Tivoli Privacy Manager for e-business:

22. Tivoli Privacy Manager Tivoli Privacy Manager LDAP.. LDAP.MONITOR.NAME=MONITOR_A LDAP.MONITOR.CLIENT.SIDE.PORT=1387 LDAP.MONITOR.CLIENT.SERVER.SIDE.HOST=LDAPSERVER_A LDAP.MONITOR.CLIENT.SERVER.SIDE.PORT=389... LDAP.MONITOR.NAME=MONITOR_B LDAP.MONITOR.CLIENT.SIDE.PORT=1388 LDAP.MONITOR.CLIENT.SERVER.SIDE.HOST=LDAPSERVER_B LDAP.MONITOR.CLIENT.SERVER.SIDE.PORT=389... LDAP.MONITOR.NAME=MONITOR_C `LDAP.MONITOR.CLIENT.SIDE.PORT=1389 LDAP.MONITOR.CLIENT.SERVER.SIDE.HOST=LDAPSERVER_C LDAP.MONITOR.CLIENT.SERVER.SIDE.PORT=389 : 1.. LDAP.,. 2., LDAP. 3.. LDAP (389), LDAP. 5 Tivoli Privacy Manager 87

LDAP IBM Tivoli Privacy Manager. Tivoli Privacy Manager LDAP LDAP Tivoli Privacy Manager LDAP. Java (Xms Xmx). JVM(Java Virtual Machine). JVM(Java Virtual Machine) : LDAP JVM. JVM. LDAP LDAP. LDAP, JVM LDAP. JVM, Java Xms Xmx. -Xmsvalue JVM,. -Xmxvalue JVM. pm_install/ldapmon run_ldapmon ws_ldapmon. pm_install Tivoli Privacy Manager. Java Xms Xmx. run_ldapmon.bat : "%JAVA_HOME%\bin\java" "-Xms128m" "-Xmx350m" "-Xbootclasspath... run_ldapmon.sh : CMD="$JAVA_HOME/bin/java" CMD="$CMD -Xms128m -Xmx350m" CMD="$CMD -Xbootclasspath/p:$WAS_BOOTCLASSPATH"... :,, Tivoli Privacy Manager, DB2, JVM. 88 IBM Tivoli Privacy Manager for e-business:

SSA : JVM LDAP SSA(Storage System Adapter). LDAP,. LDAP.MONITOR.SSA.THREAD.MIN SSA. 5. LDAP.MONITOR.SSA.THREAD.INCREMENT SSA. 5. LDAP.MONITOR.SSA.THREAD.MAX SSA. 100. JVM., LDAP., ( ) ( ).. 102 Tivoli Privacy Manager. LDAP IBM Tivoli Privacy Manager.. LDAP,,. LDAP IBM Tivoli Privacy Manager. LDAP : LDAP LDAP LDAP.. LDAP.MONITOR.SERVER.CONNECTIONS.MAX Tivoli Privacy Manager. 10. Tivoli Privacy Manager. Tivoli Privacy Manager WebSphere ORB. 5 Tivoli Privacy Manager 89

. Tivoli Privacy Manager, Tivoli Privacy Manager. Tivoli Privacy Manager,. 102 Tivoli Privacy Manager. LDAP.MONITOR.MAX.QUEUE.LENGTH Tivoli Privacy Manager. 1000., LDAP.. LDAP.MONITOR.SERVER.CONNECTIONS.MAX Tivoli Privacy Manager LDAP.MONITOR.MAX.QUEUE.LENGTH Tivoli Privacy Manager. LDAP.MONITOR.SERVER.CONNECTIONS.MAX Tivoli Privacy Manager. LDAP.MONITOR.MAX.QUEUE.LENGTH Tivoli Privacy Manager., LDAP. LDAP LDAP LDAP.,. Tivoli Privacy Manager (, ), LDAP. Tivoli Privacy Manager. Tivoli Privacy Manager.,.. LDAP,,. LDAP IBM Tivoli Privacy Manager. 90 IBM Tivoli Privacy Manager for e-business:

Tivoli Privacy Manager, Tivoli Privacy Manager Tivoli Privacy Manager Tivoli Privacy Manager.. Tivoli Privacy Manager, DB2, WebSphere. OS WebSphere Tivoli Privacy Manager WebSphere. WebSphere 4.x. WebSphere. 1. WebSphere ( ). 2. JDBC. 3. JDBC ( : DB2UDBjdbcProvider). 4.. 5. PrivacyDataSource. 6.. 7. ConnectionAttribute. cursorhold=1,autocommit=0 8.,., WebSphere. WebSphere 4.x: 1. WebSphere ( ). 2. JDBC. 3. JDBC ( : DB2UDBjdbcProvider). 5 Tivoli Privacy Manager 91

4.. 5. PrivacyDataSource. 6.. 7. 360. : ( ). 8.. WebSphere 5.x: WebSphere 5.x 95., WebSphere. WebSphere 4.x: 1. WebSphere ( ) ( : ).,. 2.. 3.. 600. : (91 ). 4.. WebSphere 5.x: 1. Server1 (Server1 WebSphere 4.x ). 2. 600. : (91 ). 3.. 92 IBM Tivoli Privacy Manager for e-business:

WebSphere 4.x WebSphere 4.x IBM WebSphere V4.0 Advanced Edition Handbook( SG24-6176). 102. : WebSphere 5.x, 94 WebSphere 5x. 22.7 : WebSphere. 1. WebSphere. 2. ( ). 3. Tivoli Privacy Manager.. 4. ORB.. Tivoli Privacy Manager. ORB EJB. Bean RMI/IIOP JVM RMI/IIOP EJB servlet. ORB. ORB Tivoli Privacy Manager 103 Tivoli Privacy Manager. 5. ( : PrivacyDataSource). a. serlvet Bean. 102 Tivoli Privacy Manager. b., (104 ) x 200(Tivoli Privacy Manager SQL ). 5 Tivoli Privacy Manager 93

c. (DB2 ) DB2.,., DB2SmartGuide API ( ) DB2. DB2SmartGuide. : DB2SmartGuide. DB2SmartGuide. 6. JVM JVM JVM. JVM(Java Virtual Machine) Java.,... v JVM JVM.,,? DB2 Tivoli Privacy Manager? Tivoli Privacy Manager 25. v JVM v JVM JVM 4 1 v, JVM : 128MB. 1GB 256MB. 1-2GB 512MB. 2GB 7..,. : MAX. /. WebSphere 5x WebSphere 5.x. WebSphere 4.x 93 WebSphere 4.x. 94 IBM Tivoli Privacy Manager for e-business:

JVM : JVM(Java Virtual Machine) Java.,.. JVM.. JVM Tivoli Privacy Manager JVM 256MB. JVM 512MB. 1-2GB. JVM. v JVM JVM.,,? DB2 Tivoli Privacy Manager? Tivoli Privacy Manager 25. v, JVM. 128MB. 1GB 256MB. 1-2GB 512MB. 2GB JVM. 1. Server1 JVM(Java Virtual Machine). 2.. 3.. : WebSphere 5.x. WebSphere 4.x 91. WebSphere. 1. JDBC DB2 JDBC ( 4). 5 Tivoli Privacy Manager 95

2. WebSphere Application Server Tivoli Privacy Manager ( : PrivacyDataSource). 3.. 4. 20. 5. 200. 6., 360( ) : (92 ). 7.. ORB ORB Java com.ibm.ws.orbthreadpoolgrowable (false). WebSphere. WebSphere 4.x: 1. WebSphere ( ) ( : ). 2.. 3. JVM. 4. JVM. 5.. -Dcom.ibm.ws.OrbThreadPoolGrowable=false 6.. WebSphere 5.x: 1. Server1 ORB (Server1 WebSphere 4.x ). 2.. 3.. 4.,. DB2 Tivoli Privacy Manager. 80 Tivoli Privacy Manager. 96 IBM Tivoli Privacy Manager for e-business:

DB2 APAR. IBM Tivoli Privacy Manager., Tivoli. http://publib.boulder.ibm.com/tividd/td/tdprodlist.html DB2. http://www-3.ibm.com/software/data/pubs/ App_ctl_heap_sz 4KB..... Tivoli Privacy Manager 256.. db2 get db cfg for database_name more database_name Tivoli Privacy Manager. App_ctl_heap_sz. 1. database_name. 2. WebSphere Application Server( (WebSphere 4.x) Server1(WebSphere 5.x)). 3. database_name. 4. db2. db2 update db cfg for database_name using APP_CTL_HEAP_SZ 256 db2stop db2start 5. WebSphere Application Server( (WebSphere 4.x) Server1(WebSphere 5.x)). Applheapsz.. 5 Tivoli Privacy Manager 97

. SQL. Tivoli Privacy Manager 256.. db2 get db cfg for database_name more database_name Tivoli Privacy Manager. Applheapsz. 1. database_name. 2. WebSphere Application Server( (WebSphere 4.x) Server1(WebSphere 5.x)). 3. database_name. 4. DB2. db2 update db cfg for database_name using APPLHEAPSZ 256 db2stop db2start 5. WebSphere Application Server( (WebSphere 4.x) Server1(WebSphere 5.x)). DB2 MaxAppls DB2 MaxAppls Tivoli Privacy Manager. MaxAppls 102 Tivoli Privacy Manager. Tivoli Privacy Manager MaxAppls 250. v database_name. database_name Tivoli Privacy Manager. WebSphere Application Server(WebSphere 4.x, WebSphere 5.x Server1). database_name. v. database_name. # db2 update db cfg for database_name using MAXAPPLS number number 5000. 40. 98 IBM Tivoli Privacy Manager for e-business:

: db2 update db cfg for pm_database using MAXAPPLS 350 v WebSphere Application Server(WebSphere 4.x, WebSphere 5.x Server1). MaxAgents MaxAgents. MaxAgents MaxAppls.. db2 get db cfg for database_name more database_name Tivoli Privacy Manager. MaxAgents. 1. database_name. 2. WebSphere Application Server( (WebSphere 4.x) Server1(WebSphere 5.x)). 3. database_name. 4. DB2. db2 update db cfg for database_name using MAXAGENTS new_value db2stop db2start new_value. 5. WebSphere Application Server( (WebSphere 4.x) Server1(WebSphere 5.x)). DB2, DB2 4K. 1000 4MB. bufferpool. 80%. SQL 512MB DEFAULT. DB2. ALTER BUFFERPOOL IBMDEFAULTBP DEFERRED SIZE 128000 5 Tivoli Privacy Manager 99

Sun Solaris AIX. Sun Solaris Tivoli Privacy Manager Sun Solaris, /etc/system. Tivoli Privacy Manager. set msgsys:msginfo_msgmax = 65535 set msgsys:msginfo_msgmnb = 65535 set msgsys:msginfo_msgmap = 258 set msgsys:msginfo_msgmni = 256 * Increase the following. set msgsys:msginfo_msgssz = 40 set msgsys:msginfo_msgtql = 1024 set msgsys:msginfo_msgseg = 32768 * set shmsys:shminfo_shmmax = 536870912 * Increase the following. set shmsys:shminfo_shmseg = 70 set shmsys:shminfo_shmmni = 300 * set semsys:seminfo_semmni = 1024 set semsys:seminfo_semmap = 1026 set semsys:seminfo_semmns = 2048 set semsys:seminfo_semmnu = 2048 * Increase the following. set semsys:seminfo_semume = 75 set semsys:seminfo_semopm = 60 AIX : DB2, DB2 Tivoli Privacy Manager (25 ). Tivoli Privacy Manager DB2 TCP/IP. 1. AIX TCP/IP. 2. DB2. 3. DB2COMM TCP/IP( : db2set DB2COMM=tcpip). 4. /etc/services DB2.,. db2cdb2 50000/tcp # DB2 connection service port db2idb2 50001/tcp # DB2 interrupt connection # service port 5..,. db2 update dbm cfg using svcename db2cdb2 100 IBM Tivoli Privacy Manager for e-business:

: svcename /etc/services DB2 ( db2cdb2). 6. DB2. % db2stop % db2start AIX : DB2 Tivoli Privacy Manager DB2., policy Tivoli Privacy Manager DB2, DB2. 1..,. db2 catalog tcpip node NodeName remote hostname server db2cdb2 : /etc/services DB2 ( db2cdb2). 2.. db2 list node directory 3.. a. db2 catalog db database_name as database_alias b. db2 uncatalog db database_name c. db2 catalog db database_alias as database_name at node node_name 4. DB2. % db2stop % db2start admin.config dburl. :.. Windows 2000 Windows 2000,.. 1.. 2.. 3. Microsoft. 5 Tivoli Privacy Manager 101

4.. 5.. WebSphere DB2. IBM WebSphere Application Server Library WebSphere Application Server 4.x 5.x InfoCenters. http://www.ibm.com/software/webservers/appserv/library.html IBM DB2 Information Management Library http://www-3.ibm.com/software/data/pubs/ IBM WebSphere Redbook http://www.redbooks.ibm.com Tivoli Privacy Manager WebSphere DB2. Tivoli Privacy Manager WebSphere (26 IBM WebSphere Tivoli Privacy Manager ),. v Tivoli Privacy Manager v Tivoli Privacy Manager (, ). v v Tivoli Privacy Manager v LDAP.. 91 Tivoli Privacy Manager. ORB Tivoli Privacy Manager WebSphere Application Server ORB. 102 IBM Tivoli Privacy Manager for e-business:

,. ORB., Tivoli Privacy Manager ORB, (cap). ORB, Java (false) (96 ORB ). -Dcom.ibm.ws.OrbThreadPoolGrowable=false Tivoli Privacy Manager ORB,. Tivoli Privacy Manager LDAP LDAP.,., ORBThreadPool Size,. LDAP. LDAP,,. LDAP IBM Tivoli Privacy Manager. Tivoli Privacy Manager LDAP API ORB LDAP.MONITOR. SERVER.CONNECTIONS.MAX ( 10. 89 LDAP )., LDAP LDAP.MONITOR.SERVER.CONNECTIONS.MAX. LDAP.MONITOR.SSA. THREAD.MAX ( 100. 89 LDAP ). LDAP, LDAP.MONITOR.SERVER.CONNECTIONS.MAX., Tivoli Privacy Manager ORB. ORB., Tivoli Privacy Manager. 5 Tivoli Privacy Manager 103

ORB. v LDAP.MONITOR.SERVER.CONNECTIONS.MAX v LDAP.MONITOR.SSA.THREAD.MAX v ( ) v 2 x (Tivoli Privacy Manager )., LDAP.MONITOR.SERVER.CONNECTIONS.MAX (ORB ) Tivoli Privacy Manager,. ORB,.,., WebSphere ORB.,. (,.),. ( WebSphere.) v LDAP.MONITOR.SSA.THREAD.MAX v LDAP.MONITOR.SERVER. CONNECTIONS.MAX v 2 x ( LDAP.MONITOR. SERVER.CONNECTIONS.MAX ) v ( ) v 2 x (Tivoli Privacy Manager ) WebSphere, 0.90(WebSphere 10 ). 104 IBM Tivoli Privacy Manager for e-business:

DB2 MaxAppls MaxAppls. WebSphere Application Server, MaxAppls Tivoli Privacy Manager. MaxAppls 98 DB2 MaxAppls. Tivoli Privacy Manager. 1. ORB. 2. Tivoli Privacy Manager LDAP. ORBThreadPoolSize >= LDAP.MONITOR.SERVER.CONNECTIONS.MAX + LDAP.MONITOR.SSA.THREAD.MAX + + 2 x Tivoli Privacy Manager 3.. ( ) = LDAP.MONITOR.SSA.THREAD.MAX + LDAP.MONITOR.SERVER. CONNECTIONS.MAX +2x( LDAP.MONITOR. SERVER.CONNECTIONS.MAX ) + ( ) + 2 x (Tivoli Privacy Manager ) 4. DB2 MaxAppls. MaxAppls >= (Tivoli Privacy Manager ) +( ) 5 Tivoli Privacy Manager 105

: ORB 23 ORB. 23. ORBThreadPool Size Data Source Connection Pool Max 106 IBM Tivoli Privacy Manager for e-business:

A. policy P3P Tivoli Privacy Manager policy P3P. 14. policy P3P Tivoli Privacy Manager policy policy - policy policy - policy - policy - policy URL policy - URL P3P <POLICY name= > <POLICY> <POLICY-VERSION> <POLICY> <POLICY-DESCRIPTION> <POLICY discuri= > <POLICY opturi= > ( ) - - - - - - - - policy - - - policy - - - policy - - - policy - - - policy - <STATEMENT> <STATEMENT> <DESCRIPTION> <STATEMENT> <CONSEQUENCE> <RETENTION> <GROUP-SCHEMA><GROUP> - - <GROUP><NAME> - - <GROUP><DESCRIPTION> - - - <GROUP recipienttag= same > - - - - - - - - - - - - - - - <GROUP recipienttag= ours > <GROUP recipienttag= delivery > <GROUP recipienttag= unrelated > <GROUP recipienttag= other-recipient > <GROUP recipienttag= public > Copyright IBM Corp. 2002, 2003 107

14. policy P3P ( ) Tivoli Privacy Manager policy P3P - - - <EXTENSION ><RECIPIENT-EXT > <RECIPIENT-VALUE-EXT> <RECIPIENT-KEY> - - - <CR description= /> - - - <CR leftside= /> - - - <CR operation= /> - - - <CR RightSide= /> - - - - - - - - - - - - - - - - - - - - - <PURPOSE-SCHEMA><PURPOSE> <PURPOSE><NAME> <PURPOSE><DESCRIPTION> <EXTENSION ><PURPOSE-EXT ><PURPOSE- VALUE-EXT> <OTHER-PURPOSE-KEY> <PURPOSE ><other-purpose required= > <CR description= /> <CR leftside= /> <CR operation= /> <CR RightSide= /> PII PII - PII - PII <DATA optional= no ref= >> <DATASCHEMA> <DATA-DEF name= > <STATEMENT ><DATA-GROUP> <DATA ref= > PII - PII - <DATASCHEMA> <DATA-DEF shortdescription= > PII - PII - <DATASCHEMA> <DATA-DEF> <LONG- DESCRIPTION> - - - - / / - / - - <ENTITY> <DATA-GROUP> <ENTITY> <DATA-GROUP> <DATA ref= #business.name > <ENTITY> <DATA-GROUP> <DATA ref= #business.department > <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.postal.street > <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.postal.city > <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.postal.stateprov > <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.postal.postalcode > <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.postal.country > 108 IBM Tivoli Privacy Manager for e-business:

14. policy P3P ( ) Tivoli Privacy Manager policy P3P - <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.telecom.telephone. intcode > - <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.telecom.telephone. loccode > - <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.telecom.telephone. number > - <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.telecom.telephone. ext > - <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.telecom.telephone. comment > - <ENTITY> <DATA-GROUP> <DATA ref= #business.contact-info.online.email > PII - PII PII - PII PII - PII - PII PII - PII PII - PII <ACCESS> <nonident/> <ACCESS> <none/> <ACCESS> <ident-contact/> <ACCESS> <contact-and-other/> <ACCESS> <other-ident/> <ACCESS> <all/> - <DISPUTES-GROUP> <DISPUTES-GROUP> <DISPUTES resolutiontype= > - <DISPUTES short-description= > - URL <DISPUTES service= > - <DISPUTES verification= > - <DISPUTES> <LONG-DESCRIPTION> - - <DISPUTES> <REMEDIES> <correct/> - - - -... - - URL - - - - - - <DISPUTES> <REMEDIES> <money/> <DISPUTES> <REMEDIES> <law/> <DISPUTES> <IMG source= > <DISPUTES> <IMG width= > <DISPUTES> <IMG height= > <DISPUTES> <IMG alt= > A. policy P3P 109

110 IBM Tivoli Privacy Manager for e-business:

B.. IBM,. IBM. IBM, IBM,. IBM,,. IBM,. IBM... 135-270 467-12,.. : 080-023-8080 2 (DBCS) IBM IBM World Trade Asia Corporation Licensing 2-31 Roppongi 3-chome, Minato-ku Tokyo 106-0032, Japan. IBM, (, )...,. IBM ( ) ( ). Copyright IBM Corp. 2002, 2003 111

IBM,. IBM. IBM. (i) ( ) (ii). 135-270 467-12,.. (, ). IBM IBM, IBM (IPLA)....,.. IBM,. IBM IBM,,. IBM..,,.. 112 IBM Tivoli Privacy Manager for e-business:

International Business Machines Corporation. AIX DB2 IBM IBM SecureWayTivoli Tivoli WebSphere Microsoft, Windows, Windows NT Windows Microsoft Corporation. UNIX Open Group. Java Java Sun Microsystems, Inc..,. B. 113