Mission Operations Reference Model. Draft ... - CCSDS

More documents

Recommendations

Info

DRAFT RECOMMENDED PRACTICE FOR MISSION OPERATIONS REFERENCE MODEL4.5 ACCESS CONTROL COMPONENT ARCHITECTUREThe Access Control component resides at the Message Abstraction Layer and is used by theMAL to provide Authentication and Authorisation checks on a message:Access ControlAccess Control ServiceFigure 4-10: Access Control ArchitectureThe implementation rules and checks made by the Access Control component are completelydeployment specific; however, the interface used by the MAL and the behaviour of thecomponents in regards to that interface are part of the MAL standard.<strong>CCSDS</strong> 520.1-R-1 Page 4-13 October 2009
DRAFT RECOMMENDED PRACTICE FOR MISSION OPERATIONS REFERENCE MODEL4.5.1 MESSAGE PROCESSING SEQUENCEFigure 4-11 shows the message processing sequence for the Access Control component. Onlya single sequence is presented for this component as it is identical regardless of whether amessage is being sent or received. It includes the error cases as alternative fragments.MALAccess ControlAccess Control RulesCheck messageAuthenticate useralt Authentication FailureReturn authentication failureCheck against rulesalt Authorisation FailureReturn authorisation failureUpdate message credentialsReturn messageFigure 4-11: Access Control Processing Sequencea) The MAL component submits a message to the Access Control component forchecking. It includes whether the message is being received or sent by the MAL.b) The first check of the Access Control component is to authenticate the usercredentials of the message.c) If this check fails the Access Control component shall return an Authentication failuremessage to the MAL and the sequence shall end at this point.d) The Access Control component shall then check that the message is authorised to besent/received. The actual checks involved at this point are deployment specific.e) If this check fails the Access Control component shall return an Authorisation failuremessage to the MAL and the sequence shall end at this point.f) If both authentication and authorisation checks pass, then the Access Controlcomponent shall update the message user credentials (if appropriate) and return theupdated message to the MAL.<strong>CCSDS</strong> 520.1-R-1 Page 4-14 October 2009
Page 2:
Institutional Commercial Real Estat
Page 6 and 7: DRAFT RECOMMENDED PRACTICE FOR MISS
show all

Mission Operations Reference Model. Draft ... - CCSDS

Create successful ePaper yourself

Delete template?

Save as template?