ISO/IEC 9579:2000
(Main)Information technology - Remote database access for SQL with security enhancement
Information technology - Remote database access for SQL with security enhancement
This International Standard, Remote Database Access for SQL (RDA), defines a model for the remote interaction of an SQL-client and one or more SQL-servers through communication media, and defines the encoding of messages, the semantics of messages and associated facilities for mediating the interaction between one SQL-client and one SQL-server. This International Standard also defines a mapping of the RDA Protocol to the specific communication inhastructures TCPIIP and Transport Layer Security (TLS). This International Standard relies upon the facilities provided by ISOIIEC 9075 (SQL) and ISOIIEC 9075-3 (SQLICLI). This International Standard also: - identifies potential security vulnerabilities in remote database access using RDA, - defines RDA facilities which protect against the potential vulnerabilities. Normative annexes provide: - a Conformance Proforma, - an optional language independent Application Programming Interface defined in the notational conventions of ISOIIEC 9075-3 (SQLICLI) for invoking RDA Operations, - an optional mapping of ISOIIEC 9075-3 (SQLICLI) functions to RDA Operations, - definitions of optional SQL-servers, the RDA Location Server and the RDA Support Server, to facilitate interoperation and data distribution in a heterogeneous environment, - a set of security profiles that identify which RDA facilities and other security facilities are required for different levels of protection against potential vulnerabilities. Informative annexes provide: - an analysis of security service requirements, - an ASN. 1 specification for the RDA Protocol, - an ASN. 1 specification for the encoding of multiple rows. This International Standard does not constrain: - conforming RDA-client environments to be implemented using any particular processor decomposition, - conforming RDA-server environments to be implemented using any particular processor decomposition. This International Standard refers to but does not define: - protocols and security mechanisms for communication confidentiality, integrity and authentication of communicating peers, - digital signature and authentication mechanisms supported by protocol elements of RDA. This International Standard does not define: ? algorithms for query decomposition or for the combining of results in a distributed database environment, ? mechanisms for recovery in the event that transaction co-ordination fails, ? mechanisms for storage integrity and confidentiality using cryptography, ? mechanisms to counter Denial of Service attacks.
Technologies de l'information — Accès à la base de données à distance pour SQL avec sécurité accrue
General Information
- Status
- Published
- Publication Date
- 23-Feb-2000
- Technical Committee
- ISO/IEC JTC 1/SC 32 - Data management and interchange
- Drafting Committee
- ISO/IEC JTC 1/SC 32 - Data management and interchange
- Current Stage
- 9093 - International Standard confirmed
- Start Date
- 30-Apr-2021
- Completion Date
- 30-Oct-2025
Relations
- Effective Date
- 15-Apr-2008
Overview
ISO/IEC 9579:2000 - Information technology - Remote database access for SQL with security enhancement (RDA/SQL) - defines a protocol and model for remote interaction between an SQL client and one or more SQL servers. The standard specifies message encoding, message semantics and facilities for mediating client–server SQL interactions. It also provides a mapping of the RDA protocol to common communication infrastructures such as TCP/IP and Transport Layer Security (TLS), and includes security analyses and protection facilities for remote database access.
Key topics and requirements
- RDA protocol model: Defines the interaction model between an SQL-client and an SQL-server, including identification of requests/responses and session management.
- Message encoding and ASN.1: Specifies encoding of protocol elements and includes ASN.1 specifications for the RDA protocol and multi-row encodings (informative annexes).
- Security enhancement: Identifies potential security vulnerabilities in remote SQL access and defines RDA facilities and security profiles that specify required protections for different threat levels.
- Transport mappings: Provides mappings of RDA to TCP/IP and TLS transport providers (how RDA uses underlying network and security services).
- Normative annexes: Include a Conformance Proforma, an optional language‑independent API in the notation of ISO/IEC 9075‑3 (SQL/CLI), optional mapping of SQL/CLI functions to RDA operations, and definitions of optional RDA Location and Support Servers to support heterogeneous environments and data distribution.
- Scope limitations: Explicitly does not define: specific cryptographic algorithms, protocols for confidentiality/integrity/authentication, digital signature mechanisms, query decomposition algorithms, distributed transaction recovery, storage encryption mechanisms, or DoS countermeasures.
Applications and who uses it
ISO/IEC 9579:2000 is intended for:
- Database vendors implementing remote access interfaces for SQL servers.
- Middleware and client-library developers building remote SQL clients or gateways (RDA clients and servers).
- Systems integrators deploying heterogeneous distributed database environments needing standardized remote access.
- Security architects evaluating and specifying security profiles for remote database access. Practical uses include standardized remote SQL execution, multi-vendor interoperability, and defining conformance for products that expose SQL services over networks using TCP/IP and TLS.
Related standards
- ISO/IEC 9075 (SQL) - core SQL language specifications relied upon by RDA.
- ISO/IEC 9075‑3 (SQL/CLI) - SQL Call-Level Interface; RDA provides optional API mappings using SQL/CLI notation.
- Transport and encoding technologies referenced: TCP/IP, TLS, and ASN.1 encodings.
Keywords: ISO/IEC 9579:2000, Remote Database Access, RDA, SQL, security enhancement, RDA protocol, TCP/IP, TLS, ASN.1, SQL/CLI, database interoperability.
ISO/IEC 9579:2000 - Information technology -- Remote database access for SQL with security enhancement
ISO/IEC 9579:2000 - Information technology -- Remote database access for SQL with security enhancement
Frequently Asked Questions
ISO/IEC 9579:2000 is a standard published by the International Organization for Standardization (ISO). Its full title is "Information technology - Remote database access for SQL with security enhancement". This standard covers: This International Standard, Remote Database Access for SQL (RDA), defines a model for the remote interaction of an SQL-client and one or more SQL-servers through communication media, and defines the encoding of messages, the semantics of messages and associated facilities for mediating the interaction between one SQL-client and one SQL-server. This International Standard also defines a mapping of the RDA Protocol to the specific communication inhastructures TCPIIP and Transport Layer Security (TLS). This International Standard relies upon the facilities provided by ISOIIEC 9075 (SQL) and ISOIIEC 9075-3 (SQLICLI). This International Standard also: - identifies potential security vulnerabilities in remote database access using RDA, - defines RDA facilities which protect against the potential vulnerabilities. Normative annexes provide: - a Conformance Proforma, - an optional language independent Application Programming Interface defined in the notational conventions of ISOIIEC 9075-3 (SQLICLI) for invoking RDA Operations, - an optional mapping of ISOIIEC 9075-3 (SQLICLI) functions to RDA Operations, - definitions of optional SQL-servers, the RDA Location Server and the RDA Support Server, to facilitate interoperation and data distribution in a heterogeneous environment, - a set of security profiles that identify which RDA facilities and other security facilities are required for different levels of protection against potential vulnerabilities. Informative annexes provide: - an analysis of security service requirements, - an ASN. 1 specification for the RDA Protocol, - an ASN. 1 specification for the encoding of multiple rows. This International Standard does not constrain: - conforming RDA-client environments to be implemented using any particular processor decomposition, - conforming RDA-server environments to be implemented using any particular processor decomposition. This International Standard refers to but does not define: - protocols and security mechanisms for communication confidentiality, integrity and authentication of communicating peers, - digital signature and authentication mechanisms supported by protocol elements of RDA. This International Standard does not define: ? algorithms for query decomposition or for the combining of results in a distributed database environment, ? mechanisms for recovery in the event that transaction co-ordination fails, ? mechanisms for storage integrity and confidentiality using cryptography, ? mechanisms to counter Denial of Service attacks.
This International Standard, Remote Database Access for SQL (RDA), defines a model for the remote interaction of an SQL-client and one or more SQL-servers through communication media, and defines the encoding of messages, the semantics of messages and associated facilities for mediating the interaction between one SQL-client and one SQL-server. This International Standard also defines a mapping of the RDA Protocol to the specific communication inhastructures TCPIIP and Transport Layer Security (TLS). This International Standard relies upon the facilities provided by ISOIIEC 9075 (SQL) and ISOIIEC 9075-3 (SQLICLI). This International Standard also: - identifies potential security vulnerabilities in remote database access using RDA, - defines RDA facilities which protect against the potential vulnerabilities. Normative annexes provide: - a Conformance Proforma, - an optional language independent Application Programming Interface defined in the notational conventions of ISOIIEC 9075-3 (SQLICLI) for invoking RDA Operations, - an optional mapping of ISOIIEC 9075-3 (SQLICLI) functions to RDA Operations, - definitions of optional SQL-servers, the RDA Location Server and the RDA Support Server, to facilitate interoperation and data distribution in a heterogeneous environment, - a set of security profiles that identify which RDA facilities and other security facilities are required for different levels of protection against potential vulnerabilities. Informative annexes provide: - an analysis of security service requirements, - an ASN. 1 specification for the RDA Protocol, - an ASN. 1 specification for the encoding of multiple rows. This International Standard does not constrain: - conforming RDA-client environments to be implemented using any particular processor decomposition, - conforming RDA-server environments to be implemented using any particular processor decomposition. This International Standard refers to but does not define: - protocols and security mechanisms for communication confidentiality, integrity and authentication of communicating peers, - digital signature and authentication mechanisms supported by protocol elements of RDA. This International Standard does not define: ? algorithms for query decomposition or for the combining of results in a distributed database environment, ? mechanisms for recovery in the event that transaction co-ordination fails, ? mechanisms for storage integrity and confidentiality using cryptography, ? mechanisms to counter Denial of Service attacks.
ISO/IEC 9579:2000 is classified under the following ICS (International Classification for Standards) categories: 35.100.70 - Application layer. The ICS classification helps identify the subject area and facilitates finding related standards.
ISO/IEC 9579:2000 has the following relationships with other standards: It is inter standard links to ISO/IEC 9579:1999. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
You can purchase ISO/IEC 9579:2000 directly from iTeh Standards. The document is available in PDF format and is delivered instantly after payment. Add the standard to your cart and complete the secure checkout process. iTeh Standards is an authorized distributor of ISO standards.
Standards Content (Sample)
INTERNATIONAL ISO/IEC
STANDARD 9579
Second edition
2000-02-15
Information technology — Remote
database access for SQL with security
enhancement
Technologies de l'information — Accès à la base de données à distance
pour SQL avec sécurité accrue
Reference number
©
ISO/IEC 2000
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not
be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In downloading this
file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat accepts no liability in this
area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters
were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event
that a problem relating to it is found, please inform the Central Secretariat at the address given below.
© ISO/IEC 2000
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic
or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISO's member body
in the country of the requester.
ISO copyright office
Case postale 56 � CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 734 10 79
E-mail copyright@iso.ch
Web www.iso.ch
Printed in Switzerland
ii © ISO/IEC 2000 – All rights reserved
(E) 2000 ©
................................ ................................ ................................ ................................ ........... ...i
................................ ................................ ................................ ............. ...............................iiiv
................................ ................................ ................................ ................................ ............. ix
d. . . . .x
n. . . . .ix
1 Scope. . . . .1
2 s. . . .3
2.1 . . . .3
2.2 . . .3
2.3 s. . .4
3 y. . . .5
3.1 s. . .5
3.2 s. .5
3.3 s. . .5
4 s. . .6
4.1 s. . . .6
4.2 s. . . .7
4.2.1 s. . . .7
4.2.2 s. . . .7
4.2.3 s. . . .7
4.2.4 s.7
4.2.5 s. . . .7
iii
Remote Database Access for SQL (RDA/SQL)
Evaluation of Rule
tion of RDA Protocol, RDA Operations and RDA encoding element Specifica
Naming of Parameter
Naming of Concept
Convention for Figure
Convention
Definition
Definitions, Conventions and Notation
Interoperability with future edition
rability with conforming OSI implementation Interope
Interoperability between implementation
Interoperabilit
Institute of Electrical and Electronics Engineer
Internet Engineering Task Force
International Standards
Normative Reference
Introductio
Forewor
Figures
Tables
ii Contents
Contents
ISO/IEC 9579: ISO/IEC
4.3 s. . . .9
4.3.1 s. . . .9
4.3.2 s. . . .9
4.3.3 s. . . .9
4.3.4 x. . .9
5 s. . . .10
5.1 l. . . . .10
5.2 -t. . .11
5.2.1 r. . . .11
5.2.2 SQL-s. . . .11
5.2.3 -client Services. . . .12
5.2.4 g. . . .12
5.2.5 -client. . . .12
5.2.6 . . . .13
5.3 -t. . .14
5.3.1 g. . . .14
5.3.2 -server Services. . . .14
5.3.3 -server. . . .15
5.3.4 SQL-r. . . .15
5.3.5 r. . . .15
5.4 s. .16
5.4.1 s. . .16
5.4.1.1 s. . . .16
5.4.1.2 s. . . .16
5.4.1.3 s. . . .16
5.4.2 T. . . .17
5.4.3 SQL--n. . .17
5.4.4 . . .17
5.4.5 -. . . .17
5.4.6 s. . . .17
5.4.7 t. . . .18
5.4.8 t. . . .18
5.4.9 t. . . .18
5.4.10 s. . . .18
5.5 t. . . .19
5.5.1 r. . . .19
5.5.2 s. . . .19
5. 5.3 -e. . .19
5.5.4 n. . . .19
5.5.5 s. . . .19
5.6 s. . .21
5.6.1 y. . .21
5.6.2 y. . . .21
5.7 -n. . .22
5.7.1 - Facility. . .22
vi
Contents
ordination RDA Transaction Co
ordinatio RDA Facilities for Transaction Co
RDA Encoding Facilit
RDA Suspend and Resume Facilit
RDA Facilities for Transport Connection
Transport Facilitie
Transport Connectio
server Nam Destination SQL
Transport Addres
Transport Provide
RDA Model of Transpor
Encoding
Request Iden
Statement Iden
Connection Iden
SQL/CLI Handle
site Transactions Multi
SQL User Name and Password
connectio session and SQL
SQL_TEX
Descriptor area
Diagnostics area
Attribute
Application Communication Area
RDA concepts and the mapping of SQL/CLI concept
RDA Support Serve
serve
RDA
RDA
rt Mappin Transpo
server environmen The RDA
RDA Location Server
RDA
Transport Mappin
RDA
client Service
Service Use
client environmen The RDA
Mode
Model and Facilitie
Notation for encoding synta
Encoding Attribute
Implicit encoding definition
SQL/CLI function
Notation
ISO/IEC ISO/IEC 9579:2000 (E)©
5.8 y. . . .23
5.8.1 s. . . .23
5.8.2 s. . .23
5. 8.3 t. . .24
5.8.4 e. . .24
6 l. . . .26
6.1 e. . .26
6.2 e. . . .27
6.2.1 t. . .27
6.2.2 t. . .30
6.3 s. . .32
6.3.1 -t. .32
6.3.2 -t. .33
6.3.3 -server ent. .34
6.3.4 -. .35
6.3.5 n. . . .35
7 . . . .37
7.1 s. . . .37
7.1.1 n. . . .37
7.1.2 . . . .40
7.1.3 n. . . .41
7.1.4 n. . .43
7.1.5 n. . .44
7.1.6 n. . .45
7.1.7 n. . .46
7.1.8 n. . .49
7.1.9 n. . .50
7.1.10 n. . .52
7.1.11 n. . .53
7.1.12 n. . .54
7.1.13 n. . .55
7.1.14 n. . . .56
7.1.15 n. . .57
7.2 t. . .58
7.3 s. . . .62
7.3.1 t. . .62
7.3.2 . .65
7.3.3 t. . .66
7.3.4 s. . .68
8 s. . . . .69
8.1 -s. . .69
v
ase Access for SQL (RDA/SQL) Remote Datab
specific Condition Exception codes for RDA
Exception
RDARow and RDAValue encoding element
RDAItemDescriptor encoding elemen
d RDADiagnosticStatus encoding elements RDADiagnostic an
RDAAttribute encoding elemen
Encoding component
RDA response encoding elemen
eratio RDAGetTypeInfo Op
RDAGetInfo Operatio
RDAGetCursorName Operatio
RDASetCursorName Operatio
io RDAStatementCancel Operat
RDAStatementCloseCursor Operatio
RDAStatementFetchRows Operatio
RDAStatementExecDirect Operatio
RDAStatementExecute Operatio
RDAStatementDeallocate Operatio
RDAStatementPrepare Operatio
Attribute Operatio RDAClient
RDAEndTran Operatio
RDADisconnect Operation
RDAConnect Operatio
RDA request operation
RDA Operations
Transport Fail Indicatio
client environment Evaluation of the Response in the RDA
vironmen Invocation of the Response in the RDA
server environmen Evaluation of the Request in the RDA
client environmen Invocation of the Request in the RDA
Invocation of RDA Operation
MessageAuthentication encoding elemen
RDAMessage protocol elemen
RDAMessag
The RDA Protocol Exchang
RDA Protoco
Use of MessageAuthentication in RDAMessag
Use of Authentication in RDAConnec
Use of Transport Provider security facilitie
RDA Security Service
RDA Facilities for Securit
8.2 r. . . .70
9 s. . . . .71
9.1 g. . . .72
9.2 g. . . .73
10 s. . . .74
10.1 P. . . .75
10.1.1 s. . . .75
10.1.2 nect. . .75
10.1.3 t. . .75
10.1.4 l. . . .75
10.1.5 d. . . .75
10.1.6 of Transport Receive. . .75
10.1.7 s. . .75
10.1.8 g. . . .75
10.2 . . . .76
10.2.1 t. . .76
10.2.2 s. . . .76
10.2.3 s. . .76
10.2.4 s. . .76
10.2.5 s. . .76
11 e. . . .77
11.1 -client Conformance. . . .77
11.2 -e. . . .77
11.3 e. . . .77
a. . . .79
n. . . .79
s. . . .79
s. . . .80
t. . . .80
-clients only. . .81
-servers only. . .82
e. . .83
B.1. s. . .84
B.2. e. . .84
B.3. s. . . .84
iv
Contents
Transport Handle
Mapping RDA/API to a programming languag
Notation for defining RDA/API function
gramming Interfac RDA Pro Annex B
Optional facilities for RDA A.6.
Optional facilities for RDA A.5.
RDA Suppor A.4.
Implementation Detail A.3.
Supplier Detail A.2.
Identificatio A.1.
Conformance Proform Annex A
Claims of Conformanc
server Conformanc RDA
RDA
Conformanc
Provision of optional security facilitie
Provision of mandatory security facilitie
Mapping of Transport Error
Mapping of encoding
port Connec Mapping of Trans
Mapping to TLS
Default Encodin
Mapping of Transport Error
Mapping
Mapping of Transport Sen
Mapping of Transport Fai
Mapping of Transport Disconnec
Mapping of Transport Con
Transport Addres
Mapping to TCP/I
Transport Mapping
The ASN.1 PER Encodin
The Base Encodin
Encoding
Exception Behaviou
ISO/IEC ISO/IEC 9579:2000 (E)©
B.4. s. . . .84
B.5. t. . .85
B.6. s. . . .85
B.7. n. . .85
B.8. s. . .86
I. . . .93
C.1. t. . . .94
C.2. n. . . .94
C.3. r. .94
C.4. >. . . .95
r. . . .97
D.1. a. . .97
D.2. e. . . .98
r. . . .99
E.1. a. . .99
E.2. e. . . .99
E.3. e. . . .101
s. . .103
F.1. s. . . .103
F.2. n. . . .104
F.3. l. . . .105
F.4. y. . . .106
F.5. y. . . .106
F.6. y. . . .106
F.7. y. . . .107
F.8. -repudiation. . . .107
s. . . .109
n. .111
s. . .115
vii
ase Access for SQL (RDA/SQL) Remote Datab
Encoding of Multiple Row Annex I
RDA Operations and Protocol in ASN.1 notatio Annex H
Security Profile Annex G
Non
identialit Storage Conf
Storage Integrit
Transfer Confidentialit
Transfer Integrit
Access Contro
Authenticatio
Potential Vulnerabilitie
Security Service Requirement Annex F
Request Log Tabl
Server Information Tabl
RDA Support Server name and schem
RDA Support Serve Annex E
Server Location Tabl
RDA Location Server name and schem
RDA Location Serve Annex D
r, SQLSetStmtAttr and SQLSetEnvAtt SQLSetConnectAtt
SQLEndTra
SQLDisconnec
Mapping of SQL/CL Annex C
RDA/API function parameter
RDA/API function invocatio
RDA/API function
Transport Connection Managemen
Transport Mapping Code
0 (E)2 ©
Tables
–l. . .27
–n. . .27
3– . . .28
–s. . .31
– 9075-3. . .41
–s. . .62
–s. .62
–s. . . .63
– 9075-3. . .63
–t. . . .64
–s. .66
–-tions. .69
–s. .70
–g. . .71
–s. . . .74
–s. . . .84
– . .93
– –d. . .109
– – . . .109
iv
ii Tables
Services Provided Security Profile Table G.2
Facilities Use Security Profiles Table G.1
RDA Operations invoked when evaluating an SQL/CLI function Table C.1
Transport Mapping Code Table 16
Transport Mapping Table 15
Codes used to identify TCP/IP encodin Table 14
RDAResponse Parameter settings for RDA generated condition Table 13
specific condi SQLSTATE class and subclass values for RDA Table 12
RDADescriptorEntries required for SQL Data Type Table 11
Values of Statement Iden Table 10
Extension to Table 19 of ISO/IEC Table 9
Prohibited attribute Table 8
Codes used for RDA defined Connection Attribute Table 7
for attribute type Codes used Table 6
Extension to Table 14 of ISO/IEC Table 5
Use of MessageAuthenticateParameter Table 4
Codes used to identify an RDA message type Table
Codes used to identify the protocol versio Table 2
Codes used to identify the protoco Table 1
ISO/IEC 9579:00
ISO/IEC
ISO/IEC ISO/IEC 9579:2000 (E)©
Figures
–-t. . .10
–-t. . .11
–t. . .14
ix
ase Access for SQL (RDA/SQL) Remote Datab
Model of the RDA server environmen Figure 3
client environmen Model of the RDA Figure 2
environmen RDA model of SQL Figure 1
0259 CEI/O ©
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical activity.
ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work.
International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 3.
In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1. Draft International Standards adopted by the joint technical committee are circulated to
national bodies for voting. Publication as an International Standard requires approval by at least 75% of
the national bodies casting a vote.
Attention is drawn to the possibility that some of the elements of this International Standard may be the
subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights.
International Standard ISO/IEC 9579 was prepared by Joint Technical Committee ISO/IEC JTC 1,
Information technology, Subcommittee SC 32, Data management and interchange.
This second edition cancels and replaces the first edition (ISO 9579:1999), which has been technically
revised.
Annexes A to E and G form a normative part of this International Standard. Annexes F, H and I are for
information only.
x Foreword
ISO/IEC IS 79: 00 (E)
ISO/IEC ISO/IEC 9579:2000 (E)©
–
of Data Management.
–
–
–
–
-
xi
ase Access for SQL (RDA/SQL) Remote Datab
database system interworking. support multi
An application may itself be a database system and therefore this International Standard can be used to
exploiting different technologies.
of different levels of complexity,
rent managements, under diffe
from different manufacturers,
outside this International Standard, the interconnection of applications and database systems:
The goal of Remote Database Access for SQL is to allow, with a minimum of technical agreement
(Database Language SQL). system conforming to ISO/IEC
Remote Database Access for SQL can be used to provide remote data access to a database management
Reference Model Information technology Standard conforms to the model defined in ISO/IEC 10032,
tional International Standards produced to facilitate the interworking of computer systems. This Interna
Remote Database Access for SQL (RDA/SQL) International Standard is a member of a set of
Introduction
(E) ISO/IEC ©
–
– -
–
–
Remote Database Access for SQL (RDA/SQL)
mechanisms to counter Denial of Service attacks.
mechanisms for storage integrity and confidentiality using cryptography,
ordination fails, mechanisms for recovery in the event that transaction co
environment,
a distributed database algorithms for query decomposition or for the combining of results in
This International Standard does not define:
9:2000 ISO/IEC 957
ISO/IEC ISO/IEC 9579:2000 (E)©
2.1
2 Normative References
,T,
acni
C EI
Internatio nal Standards
ISO/IEC 8824- – Abstract Syntax Notation One (ASN.1): Specification
of basic notation
ISO/IEC 8825- – ASN.1 encoding rules: Specification of Basic
Encoding Rules (BER), Canonical Enc oding Rules (CER) and Distinguished
Encoding Rules (DER)
ISO/IEC 8825- – ASN.1 encoding rules: Specification of Packed
ISO/IEC 7498- Information processing systems – – Ba
–
ISO/IEC – Database Languages SQL
ISO/IEC 9075- – Database Languages SQL – Part 3: Call Level
ISO/IEC 9075- Information technol – Database Languages SQL –
ISO/IEC 9594- | 5 -
net– – The
ISO/IEC Informatio –
ISO/IEC 10646- – Universal Multiple-Octet Coded Character Set (UCS) –
Part 1: Architecture and Basic Multilingual Plane
Internet Engineering Task Force
RFC 791 l
RFC 793 Transmission Control Protocol
RFC 819 The Domain Naming Convention for Internet User Applications
RFC 1122 Requirements for Internet Hosts – Communication Layers
RFC 1123 Requirements for Internet Hosts – Application and Support
RFC 2246 The TLS
ftp://ftp.int.
References Normative
ernic.net and http://www.internic.net Directory and Database Services at
Internet Engineering Task Force standards may be obtained in electronic form from the InterNIC
Protocol
Internet Protoco
2.2
Information technology 1:1993
Reference Model of Data Management n technology 10032:1995
Directory: Authentication Framework.
Open Systems Interconnection chologyInformation
T Recommendation X.509 8:199ITU
Modules
Part 4: Persistent Stored ogy 4:1996
Interface
Information technology 3:1995
Information technology 9075:1992
Part 2: Security Architecture Reference Model
sic Open Systems Interconnection 2:1989
Encoding Rules (PER)
Information technology 2:1996
Information technology 1:1995
Information technology 1:1995
2.1
of andISO maintain registers of currently valid International Standards.
investigate the possibility of applying the most recent editions of the standards di ted below. Members
eements based on this International Standard are encouraged to are subject to revision, and parties to agr
this International Standard. At the time of publication, the editions indicated were valid. All standards
he following standards contain provisions which through reference in this text constitute provisions of
Standards International
(E) ISO/IEC ©
2.3
Institute of Electrical and Electronics Engineers
-1985 Standard for Binary Floating-
IEEE Customer
Service, 445 Hoes Lane, P.O. Box -1331, USA
.
Remote Database Access for SQL (RDA/SQL)
http://www.ieee.org
or ordered electronically from 1331, Piscataway, NJ 08855
Institute of Electrical and Electronic Engineers (IEEE) standards may be obtained from
Point Arithmetic IEEE 754
2.3
Institute of Electrical and Electronics Engineers
9:2000 ISO/IEC 957
ISO/IEC ISO/IEC 9579:2000 (E)©
3.1
3 Interoperability
--
--
Interoperability between implementations
A--
--
-
-
NOTE 1 – Cryptographic algorithms are not defined by this International Standard.
TE 2 – There are circumstances under which the RDA Protocol and RDA Operations defined by
this International Standard require that RDA Messages between interoperating implementations are
rejected. These circumstances inc
implementation of an encoding that is not supported by the other (the Default Encoding is always
Interoperability with conforming OSI implementations
-
Interoperability with future editions
–
–
Interoperability
after raising an exception. recognised by implementations of this edition and discarded
Changes to the Operations, Protocols and encodings in future editions will be extensions that are
same encodings.
and Protocol defined by this edition will be retained in future editions using the RDA Operations
Future editions of this International Standard will be compatible with this edition to the extent that:
which version of the protocol a client has implemented and to behave appropriately.
Protocol to permit server implementations to detect Features have been included in this version of the
3.3
cannot directly interoperate.
exist with implementations conforming to this International Standard but Standard can therefore co
nforming to the obsolete International RDA Protocol to a TCP/IP transport provider. Implementations co
Service and Protocol to an OSI transport provider. This edition of this International Standard maps the
art) version of this International Standard published in 1997, now seperceded, maps the An earlier (three p
3.2
supported).
lude the failure to satisfy authentication requirements and the use by one
NO
server if they are to interoperate. and RDA
client cryptographic algorithms and authentication mechanisms must be common to both the RDA Any
provided that the implementations use the same Transport Mapping.
client that conforms to this International Standard server or RDA interoperate with any other RDA
server implementation that conforms to this International Standard will client or RDA An RD
3.1
International Standard.
implementations respectively of the Operations and Protocol defined by this and other editions of this
client server or RDA fined by this edition of this International Standard with RDA and Protocol de
server implementations of the Operations client or RDA This clause defines the compatibility of RDA
implementations between Interoperability
(E) ISO/IEC ©
4.1
4 Definitions, Conventions and Notations
Definitions
ISO/IEC 9075-
791, RFC 793, RFC 819, RFC 1122, RFC
Push.
7498-
-
9594--T
--
-
9075-
-
-
Remote Database Access for SQL (RDA/SQL)
the purpose of forwarding them to the intended recipient.
a system that receives RDA protocol elements as defined in this International Standard for RDA Relay:
ange. server, together with the encoding of the exchange, and rules governing the exch an RDA
client and the set of permissible exchanges of requests and responses between an RDA RDA Protocol:
3 (SQL/CLI) for invoking RDA Operations. conventions of ISO/IEC the notational
a language independent Application Programming Interface defined in RDA Programming Interface:
from an invocation of the facility, and rules governing the invocation of the facility.
tocol, the encoding of parameters that influence or result means of invoking the facility through a pro
server, together with the a facility that is accessible remotely provided by an RDA RDA Operation:
server. client and an RDA RDA
a protocol element as defined by this International Standard exchanged between an RDA Message:
In addition, the following definitions apply:
Distribution Controller.
10032: The following term is defined in ISO/IEC
Public Key Certificate.
Attribute Certificate,
X.509 (1997): 8:1997 | ITU e following terms are defined in ISO/IEC Th
repudiation. Non
Integrity,
Confidentiality,
Authentication,
Access Control,
2: The following terms are defined in ISO/IEC
Port Number,
Foreign Socket,
Local Socket,
IP Address,
1123: ms are defined in RFC The following ter
3 (SQL/CLI) and the following definitions apply.
9075 (SQL) and For the purposes of this International Standard, the definitions given in ISO/IEC
4.1
Definitions
9:2000 ISO/IEC 957
ISO/IEC ISO/IEC 9579:2000 (E)©
4.2
4.2.1
ISO/IEC 10032.
4.2.2
-
4.2.3
NOTE 3 – For data values of type other than RDAOctetString the encoding of this value may differ
between the parameter in the RDA-client environment, the parameter in the protocol and the parameter in
-server environment. This m ay be due to, for example, architecture, precision or language
4.2.4
four parts
– function
–
–
– rules
--
4.2.5
–
–
Conventions and Notations Definitions,
to specify RDA Operation Rules.
to specify RDA Protocol Rules,
Rules are used:
Evaluation of Rules
server environment as indicated. client environment or the RDA RDA
be evaluated within the , a sequence of Protocol Rules or Operation Rules for the element to
element,
, a definition of the RDA Protocol parameters or RDA Operation parameters for the parameters
parameters,
the encoding of the element in terms of RDA Protocol or RDA Operation , the syntax for encoding
, a short statement of the purpose of the element,
The definition of each RDA protocol element, RDA Operation element or Encoding component has up to
ion of RDA Protocol, RDA Operations and RDA encoding elements Specificat
or RDA/API parameter is determined by the context.
Whether an identifier designates an SQL/CLI parameter, RDA/API client parameter, protocol parameter
the SQL/CLI parameter name is used.
parameter is semantically equivalent to the RDA parameter, or an RDA/API parameter, and the SQL/CLI
Where there is a parameter in an SQL/CLI function which corresponds to an RDA Operation parameter
differences between the client and the server system.
the RDA
Operation parameter where the items are semantically equivalent.
The same identifier is used to designate both an RDA/API routine parameter and an RDA Protocol or
Naming of Parameters
’ are defined in this International Standard. ith ‘RDA Concepts whose name begins w
9075 (SQL) is used for that concept. name used in ISO/IEC
9075 (SQL) and used in this International Standard, the Where a concept has been defined in ISO/IEC
Naming of Concepts
Reference Model of Data Management, The convention used for figures is that defined in the
Convention for Figures
Conventions 4.2
Conventions
(E) ISO/IEC ©
4.2
.
R r 9075-3
9075-3
R.
Remote Database Access for SQL (RDA/SQL)
been raised by
is deemed to have (SQL/CLI). If such evaluation causes an exception to be raised, then the exception
(SQL/CLI) then that sequence of General Rules is evaluated in the manner defined by ISO/IEC
esults in the evaluation of a sequence of General Rules of ISO/IEC If the evaluation of a Rule
Rules causing the exception is terminated after raising the exception.
If the evaluation of a sequence of Rules causes an exception to be raised, evaluation of the sequence of
R1 es not of itself terminate the evaluation of do R2 . Termination of R1 referred to in
R2 may involve the evaluation of another sequence of Rules R1 Evaluation of a sequence of Rules
has been evaluated.
ed by a specific Rule that is evaluated, evaluation of Rules terminates when the last in a sequence impli
either a change in sequence or termination of the evaluation of the Rules. Unless otherwise specified or
Rule and evaluating the rules in numerical sequence until a rule is evaluated that specifies or implies
be obtained by beginning with the first When Rules are evaluated, the required effect is that which would
Conventions
9:2000 ISO/IEC 957
ISO/IEC
...
INTERNATIONAL ISO/IEC
STANDARD 9579
Second edition
2000-02-15
Information technology — Remote
database access for SQL with security
enhancement
Technologies de l'information — Accès à la base de données à distance
pour SQL avec sécurité accrue
Reference number
©
ISO/IEC 2000
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not
be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In downloading this
file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat accepts no liability in this
area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters
were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event
that a problem relating to it is found, please inform the Central Secretariat at the address given below.
© ISO/IEC 2000
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic
or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISO's member body
in the country of the requester.
ISO copyright office
Case postale 56 � CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 734 10 79
E-mail copyright@iso.ch
Web www.iso.ch
Printed in Switzerland
ii © ISO/IEC 2000 – All rights reserved
(E) 2000 ©
................................ ................................ ................................ ................................ ........... ...i
................................ ................................ ................................ ............. ...............................iiiv
................................ ................................ ................................ ................................ ............. ix
d. . . . .x
n. . . . .ix
1 Scope. . . . .1
2 s. . . .3
2.1 . . . .3
2.2 . . .3
2.3 s. . .4
3 y. . . .5
3.1 s. . .5
3.2 s. .5
3.3 s. . .5
4 s. . .6
4.1 s. . . .6
4.2 s. . . .7
4.2.1 s. . . .7
4.2.2 s. . . .7
4.2.3 s. . . .7
4.2.4 s.7
4.2.5 s. . . .7
iii
Remote Database Access for SQL (RDA/SQL)
Evaluation of Rule
tion of RDA Protocol, RDA Operations and RDA encoding element Specifica
Naming of Parameter
Naming of Concept
Convention for Figure
Convention
Definition
Definitions, Conventions and Notation
Interoperability with future edition
rability with conforming OSI implementation Interope
Interoperability between implementation
Interoperabilit
Institute of Electrical and Electronics Engineer
Internet Engineering Task Force
International Standards
Normative Reference
Introductio
Forewor
Figures
Tables
ii Contents
Contents
ISO/IEC 9579: ISO/IEC
4.3 s. . . .9
4.3.1 s. . . .9
4.3.2 s. . . .9
4.3.3 s. . . .9
4.3.4 x. . .9
5 s. . . .10
5.1 l. . . . .10
5.2 -t. . .11
5.2.1 r. . . .11
5.2.2 SQL-s. . . .11
5.2.3 -client Services. . . .12
5.2.4 g. . . .12
5.2.5 -client. . . .12
5.2.6 . . . .13
5.3 -t. . .14
5.3.1 g. . . .14
5.3.2 -server Services. . . .14
5.3.3 -server. . . .15
5.3.4 SQL-r. . . .15
5.3.5 r. . . .15
5.4 s. .16
5.4.1 s. . .16
5.4.1.1 s. . . .16
5.4.1.2 s. . . .16
5.4.1.3 s. . . .16
5.4.2 T. . . .17
5.4.3 SQL--n. . .17
5.4.4 . . .17
5.4.5 -. . . .17
5.4.6 s. . . .17
5.4.7 t. . . .18
5.4.8 t. . . .18
5.4.9 t. . . .18
5.4.10 s. . . .18
5.5 t. . . .19
5.5.1 r. . . .19
5.5.2 s. . . .19
5. 5.3 -e. . .19
5.5.4 n. . . .19
5.5.5 s. . . .19
5.6 s. . .21
5.6.1 y. . .21
5.6.2 y. . . .21
5.7 -n. . .22
5.7.1 - Facility. . .22
vi
Contents
ordination RDA Transaction Co
ordinatio RDA Facilities for Transaction Co
RDA Encoding Facilit
RDA Suspend and Resume Facilit
RDA Facilities for Transport Connection
Transport Facilitie
Transport Connectio
server Nam Destination SQL
Transport Addres
Transport Provide
RDA Model of Transpor
Encoding
Request Iden
Statement Iden
Connection Iden
SQL/CLI Handle
site Transactions Multi
SQL User Name and Password
connectio session and SQL
SQL_TEX
Descriptor area
Diagnostics area
Attribute
Application Communication Area
RDA concepts and the mapping of SQL/CLI concept
RDA Support Serve
serve
RDA
RDA
rt Mappin Transpo
server environmen The RDA
RDA Location Server
RDA
Transport Mappin
RDA
client Service
Service Use
client environmen The RDA
Mode
Model and Facilitie
Notation for encoding synta
Encoding Attribute
Implicit encoding definition
SQL/CLI function
Notation
ISO/IEC ISO/IEC 9579:2000 (E)©
5.8 y. . . .23
5.8.1 s. . . .23
5.8.2 s. . .23
5. 8.3 t. . .24
5.8.4 e. . .24
6 l. . . .26
6.1 e. . .26
6.2 e. . . .27
6.2.1 t. . .27
6.2.2 t. . .30
6.3 s. . .32
6.3.1 -t. .32
6.3.2 -t. .33
6.3.3 -server ent. .34
6.3.4 -. .35
6.3.5 n. . . .35
7 . . . .37
7.1 s. . . .37
7.1.1 n. . . .37
7.1.2 . . . .40
7.1.3 n. . . .41
7.1.4 n. . .43
7.1.5 n. . .44
7.1.6 n. . .45
7.1.7 n. . .46
7.1.8 n. . .49
7.1.9 n. . .50
7.1.10 n. . .52
7.1.11 n. . .53
7.1.12 n. . .54
7.1.13 n. . .55
7.1.14 n. . . .56
7.1.15 n. . .57
7.2 t. . .58
7.3 s. . . .62
7.3.1 t. . .62
7.3.2 . .65
7.3.3 t. . .66
7.3.4 s. . .68
8 s. . . . .69
8.1 -s. . .69
v
ase Access for SQL (RDA/SQL) Remote Datab
specific Condition Exception codes for RDA
Exception
RDARow and RDAValue encoding element
RDAItemDescriptor encoding elemen
d RDADiagnosticStatus encoding elements RDADiagnostic an
RDAAttribute encoding elemen
Encoding component
RDA response encoding elemen
eratio RDAGetTypeInfo Op
RDAGetInfo Operatio
RDAGetCursorName Operatio
RDASetCursorName Operatio
io RDAStatementCancel Operat
RDAStatementCloseCursor Operatio
RDAStatementFetchRows Operatio
RDAStatementExecDirect Operatio
RDAStatementExecute Operatio
RDAStatementDeallocate Operatio
RDAStatementPrepare Operatio
Attribute Operatio RDAClient
RDAEndTran Operatio
RDADisconnect Operation
RDAConnect Operatio
RDA request operation
RDA Operations
Transport Fail Indicatio
client environment Evaluation of the Response in the RDA
vironmen Invocation of the Response in the RDA
server environmen Evaluation of the Request in the RDA
client environmen Invocation of the Request in the RDA
Invocation of RDA Operation
MessageAuthentication encoding elemen
RDAMessage protocol elemen
RDAMessag
The RDA Protocol Exchang
RDA Protoco
Use of MessageAuthentication in RDAMessag
Use of Authentication in RDAConnec
Use of Transport Provider security facilitie
RDA Security Service
RDA Facilities for Securit
8.2 r. . . .70
9 s. . . . .71
9.1 g. . . .72
9.2 g. . . .73
10 s. . . .74
10.1 P. . . .75
10.1.1 s. . . .75
10.1.2 nect. . .75
10.1.3 t. . .75
10.1.4 l. . . .75
10.1.5 d. . . .75
10.1.6 of Transport Receive. . .75
10.1.7 s. . .75
10.1.8 g. . . .75
10.2 . . . .76
10.2.1 t. . .76
10.2.2 s. . . .76
10.2.3 s. . .76
10.2.4 s. . .76
10.2.5 s. . .76
11 e. . . .77
11.1 -client Conformance. . . .77
11.2 -e. . . .77
11.3 e. . . .77
a. . . .79
n. . . .79
s. . . .79
s. . . .80
t. . . .80
-clients only. . .81
-servers only. . .82
e. . .83
B.1. s. . .84
B.2. e. . .84
B.3. s. . . .84
iv
Contents
Transport Handle
Mapping RDA/API to a programming languag
Notation for defining RDA/API function
gramming Interfac RDA Pro Annex B
Optional facilities for RDA A.6.
Optional facilities for RDA A.5.
RDA Suppor A.4.
Implementation Detail A.3.
Supplier Detail A.2.
Identificatio A.1.
Conformance Proform Annex A
Claims of Conformanc
server Conformanc RDA
RDA
Conformanc
Provision of optional security facilitie
Provision of mandatory security facilitie
Mapping of Transport Error
Mapping of encoding
port Connec Mapping of Trans
Mapping to TLS
Default Encodin
Mapping of Transport Error
Mapping
Mapping of Transport Sen
Mapping of Transport Fai
Mapping of Transport Disconnec
Mapping of Transport Con
Transport Addres
Mapping to TCP/I
Transport Mapping
The ASN.1 PER Encodin
The Base Encodin
Encoding
Exception Behaviou
ISO/IEC ISO/IEC 9579:2000 (E)©
B.4. s. . . .84
B.5. t. . .85
B.6. s. . . .85
B.7. n. . .85
B.8. s. . .86
I. . . .93
C.1. t. . . .94
C.2. n. . . .94
C.3. r. .94
C.4. >. . . .95
r. . . .97
D.1. a. . .97
D.2. e. . . .98
r. . . .99
E.1. a. . .99
E.2. e. . . .99
E.3. e. . . .101
s. . .103
F.1. s. . . .103
F.2. n. . . .104
F.3. l. . . .105
F.4. y. . . .106
F.5. y. . . .106
F.6. y. . . .106
F.7. y. . . .107
F.8. -repudiation. . . .107
s. . . .109
n. .111
s. . .115
vii
ase Access for SQL (RDA/SQL) Remote Datab
Encoding of Multiple Row Annex I
RDA Operations and Protocol in ASN.1 notatio Annex H
Security Profile Annex G
Non
identialit Storage Conf
Storage Integrit
Transfer Confidentialit
Transfer Integrit
Access Contro
Authenticatio
Potential Vulnerabilitie
Security Service Requirement Annex F
Request Log Tabl
Server Information Tabl
RDA Support Server name and schem
RDA Support Serve Annex E
Server Location Tabl
RDA Location Server name and schem
RDA Location Serve Annex D
r, SQLSetStmtAttr and SQLSetEnvAtt SQLSetConnectAtt
SQLEndTra
SQLDisconnec
Mapping of SQL/CL Annex C
RDA/API function parameter
RDA/API function invocatio
RDA/API function
Transport Connection Managemen
Transport Mapping Code
0 (E)2 ©
Tables
–l. . .27
–n. . .27
3– . . .28
–s. . .31
– 9075-3. . .41
–s. . .62
–s. .62
–s. . . .63
– 9075-3. . .63
–t. . . .64
–s. .66
–-tions. .69
–s. .70
–g. . .71
–s. . . .74
–s. . . .84
– . .93
– –d. . .109
– – . . .109
iv
ii Tables
Services Provided Security Profile Table G.2
Facilities Use Security Profiles Table G.1
RDA Operations invoked when evaluating an SQL/CLI function Table C.1
Transport Mapping Code Table 16
Transport Mapping Table 15
Codes used to identify TCP/IP encodin Table 14
RDAResponse Parameter settings for RDA generated condition Table 13
specific condi SQLSTATE class and subclass values for RDA Table 12
RDADescriptorEntries required for SQL Data Type Table 11
Values of Statement Iden Table 10
Extension to Table 19 of ISO/IEC Table 9
Prohibited attribute Table 8
Codes used for RDA defined Connection Attribute Table 7
for attribute type Codes used Table 6
Extension to Table 14 of ISO/IEC Table 5
Use of MessageAuthenticateParameter Table 4
Codes used to identify an RDA message type Table
Codes used to identify the protocol versio Table 2
Codes used to identify the protoco Table 1
ISO/IEC 9579:00
ISO/IEC
ISO/IEC ISO/IEC 9579:2000 (E)©
Figures
–-t. . .10
–-t. . .11
–t. . .14
ix
ase Access for SQL (RDA/SQL) Remote Datab
Model of the RDA server environmen Figure 3
client environmen Model of the RDA Figure 2
environmen RDA model of SQL Figure 1
0259 CEI/O ©
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical activity.
ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work.
International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 3.
In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1. Draft International Standards adopted by the joint technical committee are circulated to
national bodies for voting. Publication as an International Standard requires approval by at least 75% of
the national bodies casting a vote.
Attention is drawn to the possibility that some of the elements of this International Standard may be the
subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights.
International Standard ISO/IEC 9579 was prepared by Joint Technical Committee ISO/IEC JTC 1,
Information technology, Subcommittee SC 32, Data management and interchange.
This second edition cancels and replaces the first edition (ISO 9579:1999), which has been technically
revised.
Annexes A to E and G form a normative part of this International Standard. Annexes F, H and I are for
information only.
x Foreword
ISO/IEC IS 79: 00 (E)
ISO/IEC ISO/IEC 9579:2000 (E)©
–
of Data Management.
–
–
–
–
-
xi
ase Access for SQL (RDA/SQL) Remote Datab
database system interworking. support multi
An application may itself be a database system and therefore this International Standard can be used to
exploiting different technologies.
of different levels of complexity,
rent managements, under diffe
from different manufacturers,
outside this International Standard, the interconnection of applications and database systems:
The goal of Remote Database Access for SQL is to allow, with a minimum of technical agreement
(Database Language SQL). system conforming to ISO/IEC
Remote Database Access for SQL can be used to provide remote data access to a database management
Reference Model Information technology Standard conforms to the model defined in ISO/IEC 10032,
tional International Standards produced to facilitate the interworking of computer systems. This Interna
Remote Database Access for SQL (RDA/SQL) International Standard is a member of a set of
Introduction
INTERNATIONAL STANDARD O ISOIIEC ISO/IEC 9579:2000 (E)
Information technology - Remote database access for SQL
with security enhancement
1 Scope
This International Standard, Remote Database Access for SQL (RDA), defines a model for the remote
interaction of an SQL-client and one or more SQL-servers through communication media, and defines
the encoding of messages, the semantics of messages and associated facilities for mediating the
interaction between one SQL-client and one SQL-server.
This International Standard also defines a mapping of the RDA Protocol to the specific communication
inhastructures TCPIIP and Transport Layer Security (TLS).
This International Standard relies upon the facilities provided by ISOIIEC 9075 (SQL) and
ISOIIEC 9075-3 (SQLICLI).
This International Standard also:
-
identifies potential security vulnerabilities in remote database access using RDA,
-
defines RDA facilities which protect against the potential vulnerabilities.
Normative annexes provide:
- a Conformance Proforma,
-
an optional language independent Application Programming Interface defined in the notational
conventions of ISOIIEC 9075-3 (SQLICLI) for invoking RDA Operations,
-
an optional mapping of ISOIIEC 9075-3 (SQLICLI) functions to RDA Operations,
-
definitions of optional SQL-servers, the RDA Location Server and the RDA Support Server, to
facilitate interoperation and data distribution in a heterogeneous environment,
-
a set of security profiles that identify which RDA facilities and other security facilities are required
for different levels of protection against potential vulnerabilities.
Informative annexes provide:
-
an analysis of security service requirements,
-
an ASN. 1 specification for the RDA Protocol,
-
an ASN. 1 specification for the encoding of multiple rows.
This International Standard does not constrain:
-
conforming RDA-client environments to be implemented using any particular processor
decomposition,
-
conforming RDA-server environments to be implemented using any particular processor
decomposition.
This International Standard refers to but does not define:
-
protocols and security mechanisms for communication confidentiality, integrity and authentication
of communicating peers,
-
digital signature and authentication mechanisms supported by protocol elements of RDA.
Scope 1
(E) ISO/IEC ©
–
– -
–
–
Remote Database Access for SQL (RDA/SQL)
mechanisms to counter Denial of Service attacks.
mechanisms for storage integrity and confidentiality using cryptography,
ordination fails, mechanisms for recovery in the event that transaction co
environment,
a distributed database algorithms for query decomposition or for the combining of results in
This International Standard does not define:
9:2000 ISO/IEC 957
ISO/IEC ISO/IEC 9579:2000 (E)©
2.1
2 Normative References
,T,
acni
C EI
Internatio nal Standards
ISO/IEC 8824- – Abstract Syntax Notation One (ASN.1): Specification
of basic notation
ISO/IEC 8825- – ASN.1 encoding rules: Specification of Basic
Encoding Rules (BER), Canonical Enc oding Rules (CER) and Distinguished
Encoding Rules (DER)
ISO/IEC 8825- – ASN.1 encoding rules: Specification of Packed
ISO/IEC 7498- Information processing systems – – Ba
–
ISO/IEC – Database Languages SQL
ISO/IEC 9075- – Database Languages SQL – Part 3: Call Level
ISO/IEC 9075- Information technol – Database Languages SQL –
ISO/IEC 9594- | 5 -
net– – The
ISO/IEC Informatio –
ISO/IEC 10646- – Universal Multiple-Octet Coded Character Set (UCS) –
Part 1: Architecture and Basic Multilingual Plane
Internet Engineering Task Force
RFC 791 l
RFC 793 Transmission Control Protocol
RFC 819 The Domain Naming Convention for Internet User Applications
RFC 1122 Requirements for Internet Hosts – Communication Layers
RFC 1123 Requirements for Internet Hosts – Application and Support
RFC 2246 The TLS
ftp://ftp.int.
References Normative
ernic.net and http://www.internic.net Directory and Database Services at
Internet Engineering Task Force standards may be obtained in electronic form from the InterNIC
Protocol
Internet Protoco
2.2
Information technology 1:1993
Reference Model of Data Management n technology 10032:1995
Directory: Authentication Framework.
Open Systems Interconnection chologyInformation
T Recommendation X.509 8:199ITU
Modules
Part 4: Persistent Stored ogy 4:1996
Interface
Information technology 3:1995
Information technology 9075:1992
Part 2: Security Architecture Reference Model
sic Open Systems Interconnection 2:1989
Encoding Rules (PER)
Information technology 2:1996
Information technology 1:1995
Information technology 1:1995
2.1
of andISO maintain registers of currently valid International Standards.
investigate the possibility of applying the most recent editions of the standards di ted below. Members
eements based on this International Standard are encouraged to are subject to revision, and parties to agr
this International Standard. At the time of publication, the editions indicated were valid. All standards
he following standards contain provisions which through reference in this text constitute provisions of
Standards International
(E) ISO/IEC ©
2.3
Institute of Electrical and Electronics Engineers
-1985 Standard for Binary Floating-
IEEE Customer
Service, 445 Hoes Lane, P.O. Box -1331, USA
.
Remote Database Access for SQL (RDA/SQL)
http://www.ieee.org
or ordered electronically from 1331, Piscataway, NJ 08855
Institute of Electrical and Electronic Engineers (IEEE) standards may be obtained from
Point Arithmetic IEEE 754
2.3
Institute of Electrical and Electronics Engineers
9:2000 ISO/IEC 957
ISO/IEC ISO/IEC 9579:2000 (E)©
3.1
3 Interoperability
--
--
Interoperability between implementations
A--
--
-
-
NOTE 1 – Cryptographic algorithms are not defined by this International Standard.
TE 2 – There are circumstances under which the RDA Protocol and RDA Operations defined by
this International Standard require that RDA Messages between interoperating implementations are
rejected. These circumstances inc
implementation of an encoding that is not supported by the other (the Default Encoding is always
Interoperability with conforming OSI implementations
-
Interoperability with future editions
–
–
Interoperability
after raising an exception. recognised by implementations of this edition and discarded
Changes to the Operations, Protocols and encodings in future editions will be extensions that are
same encodings.
and Protocol defined by this edition will be retained in future editions using the RDA Operations
Future editions of this International Standard will be compatible with this edition to the extent that:
which version of the protocol a client has implemented and to behave appropriately.
Protocol to permit server implementations to detect Features have been included in this version of the
3.3
cannot directly interoperate.
exist with implementations conforming to this International Standard but Standard can therefore co
nforming to the obsolete International RDA Protocol to a TCP/IP transport provider. Implementations co
Service and Protocol to an OSI transport provider. This edition of this International Standard maps the
art) version of this International Standard published in 1997, now seperceded, maps the An earlier (three p
3.2
supported).
lude the failure to satisfy authentication requirements and the use by one
NO
server if they are to interoperate. and RDA
client cryptographic algorithms and authentication mechanisms must be common to both the RDA Any
provided that the implementations use the same Transport Mapping.
client that conforms to this International Standard server or RDA interoperate with any other RDA
server implementation that conforms to this International Standard will client or RDA An RD
3.1
International Standard.
implementations respectively of the Operations and Protocol defined by this and other editions of this
client server or RDA fined by this edition of this International Standard with RDA and Protocol de
server implementations of the Operations client or RDA This clause defines the compatibility of RDA
implementations between Interoperability
(E) ISO/IEC ©
4.1
4 Definitions, Conventions and Notations
Definitions
ISO/IEC 9075-
791, RFC 793, RFC 819, RFC 1122, RFC
Push.
7498-
-
9594--T
--
-
9075-
-
-
Remote Database Access for SQL (RDA/SQL)
the purpose of forwarding them to the intended recipient.
a system that receives RDA protocol elements as defined in this International Standard for RDA Relay:
ange. server, together with the encoding of the exchange, and rules governing the exch an RDA
client and the set of permissible exchanges of requests and responses between an RDA RDA Protocol:
3 (SQL/CLI) for invoking RDA Operations. conventions of ISO/IEC the notational
a language independent Application Programming Interface defined in RDA Programming Interface:
from an invocation of the facility, and rules governing the invocation of the facility.
tocol, the encoding of parameters that influence or result means of invoking the facility through a pro
server, together with the a facility that is accessible remotely provided by an RDA RDA Operation:
server. client and an RDA RDA
a protocol element as defined by this International Standard exchanged between an RDA Message:
In addition, the following definitions apply:
Distribution Controller.
10032: The following term is defined in ISO/IEC
Public Key Certificate.
Attribute Certificate,
X.509 (1997): 8:1997 | ITU e following terms are defined in ISO/IEC Th
repudiation. Non
Integrity,
Confidentiality,
Authentication,
Access Control,
2: The following terms are defined in ISO/IEC
Port Number,
Foreign Socket,
Local Socket,
IP Address,
1123: ms are defined in RFC The following ter
3 (SQL/CLI) and the following definitions apply.
9075 (SQL) and For the purposes of this International Standard, the definitions given in ISO/IEC
4.1
Definitions
9:2000 ISO/IEC 957
ISO/IEC ISO/IEC 9579:2000 (E)©
4.2
4.2.1
ISO/IEC 10032.
4.2.2
-
4.2.3
NOTE 3 – For data values of type other than RDAOctetString the encoding of this value may differ
between the parameter in the RDA-client environment, the parameter in the protocol and the parameter in
-server environment. This m ay be due to, for example, architecture, precision or language
4.2.4
four parts
– function
–
–
– rules
--
4.2.5
–
–
Conventions and Notations Definitions,
to specify RDA Operation Rules.
to specify RDA Protocol Rules,
Rules are used:
Evaluation of Rules
server environment as indicated. client environment or the RDA RDA
be evaluated within the , a sequence of Protocol Rules or Operation Rules for the element to
element,
, a definition of the RDA Protocol parameters or RDA Operation parameters for the parameters
parameters,
the encoding of the element in terms of RDA Protocol or RDA Operation , the syntax for encoding
, a short statement of the purpose of the element,
The definition of each RDA protocol element, RDA Operation element or Encoding component has up to
ion of RDA Protocol, RDA Operations and RDA encoding elements Specificat
or RDA/API parameter is determined by th
...














Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...