===== Service Plugin Interface (SPI) =====
[[ddsf:public:guidebook:06_append:glossary:start| Return to Glossary ]]
 
  * **<color #FF0000><todo @nick>Glossary 'S': Please Review</todo></color>**

**Service Plugin Interface** (SPI)-> This specification defines five SPIs that when combined together provide Information Assurance to [[ddsf:public:guidebook:06_append:glossary:d:data_distribution_service_dds]] systems:

  * **Authentication Service Plugin.** Provides the means to verify the identity of the application and/or user that invokes operations on DDS. Includes facilities to perform mutual [[ddsf:public:guidebook:06_append:glossary:a:authentication|authentication]] between participants and establish a shared secret.
  * **AccessControl Service Plugin.** Provides the means to enforce policy decisions on what DDSrelated operations an authenticated user can perform. For example, which domains it can join, which Topics it can publish or subscribe to, etc.
  * **Cryptographic Service Plugin.** Implements (or interfaces with libraries that implement) all cryptographic operations including [[ddsf:public:guidebook:06_append:glossary:e:encryption|encryption]], decryption, hashing, digital signatures, etc. This includes the means to derive keys from a shared secret.
  * **[[ddsf:public:guidebook:06_append:glossary:d:datalog|Logging]] Service Plugin.** Supports auditing of all DDS security-relevant events.
  * **Data Tagging Service Plugin.** Provides a way to add tags to [[ddsf:public:guidebook:06_append:glossary:d:ddssample]] data.
<figure>
{{  :ddsf:resources:overall_architecture_for_dds_security.png?600  |}}
<caption>Overall architecture for DDS Security</caption>
</figure>

Source: [[ddsf:private:guidebook:02_body:14_security]]


/**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
/* To add a discussion page to this page, comment out the line that says 
  ~~DISCUSSION:off~~
*/
~~DISCUSSION:on|Outstanding Issues~~
~~DISCUSSION:off~~