This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
ddsf:public:guidebook:06_append:glossary:s:securitymodel [2021/07/14 15:43] murphy ↷ Links adapted because of a move operation |
ddsf:public:guidebook:06_append:glossary:s:securitymodel [2021/07/14 16:45] (current) murphy ↷ Links adapted because of a move operation |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ===== Security Model ===== | ===== Security Model ===== | ||
| - | [[ddsf:private:guidebook:06_append:glossary:start| Return to Glossary ]] | + | [[ddsf:public:guidebook:06_append:glossary:start| Return to Glossary ]] |
| - | The **Security Model** for [[ddsf:public:guidebook:06_append:glossary:d:data_distribution_service_dds]] defines the security principals (users of the system), the objects that are being secured, and the operations on the objects that are to be restricted. DDS applications share information on DDS Global Data Spaces (called [[ddsf:public:guidebook:06_append:glossary:d:domain_dds|DDS Domains]]) where the information is organized into [[ddsf:private:guidebook:06_append:glossary:t:topic|Topics]] and accessed by means of read and write operations on data-instances of those Topics. | + | The **Security Model** for [[ddsf:public:guidebook:06_append:glossary:d:data_distribution_service_dds]] defines the security principals (users of the system), the objects that are being secured, and the operations on the objects that are to be restricted. DDS applications share information on DDS Global Data Spaces (called [[ddsf:public:guidebook:06_append:glossary:d:domain_dds|DDS Domains]]) where the information is organized into [[ddsf:public:guidebook:06_append:glossary:t:topic|Topics]] and accessed by means of read and write operations on data-instances of those Topics. |
| Ultimately what is being secured is a specific DDS Global Data Space (domain) and, within the domain, the ability to access (read or write) information (specific Topic or even data-object instances within the Topic) in the DDS Global Data Space. | Ultimately what is being secured is a specific DDS Global Data Space (domain) and, within the domain, the ability to access (read or write) information (specific Topic or even data-object instances within the Topic) in the DDS Global Data Space. | ||
| Line 12: | Line 12: | ||
| * **Message-origin** authentication | * **Message-origin** authentication | ||
| * **Data-origin** authentication | * **Data-origin** authentication | ||
| - | * **[[ddsf:private:guidebook:06_append:glossary:n:nonrepudiation|Non-repudiation]]** of data (Optional) | + | * **[[ddsf:public:guidebook:06_append:glossary:n:nonrepudiation|Non-repudiation]]** of data (Optional) |
| Source: [[https://www.omg.org/spec/DDS-SECURITY/1.1/PDF#Security_mode]] Section 7.1 | Source: [[https://www.omg.org/spec/DDS-SECURITY/1.1/PDF#Security_mode]] Section 7.1 | ||