SPS is managed by security domain, and consists of four parts: security gateway (GW), policy client (PU), security policy server (PS) and security system database (SPSDB).

SPS system database includes local policy database, cache database and security domain database, where local policy database and cache database are collectively referred to as master files, local policy database stores local security policies, and cache database stores policy caches combined with local and non-local policies. The security domain database contains the security domain authorization information of the policy server.