Mission Operations Reference Model. Draft ... - CCSDS

DRAFT RECOMMENDED PRACTICE FOR MISSION OPERATIONS REFERENCE MODEL4.5.1 MESSAGE PROCESSING SEQUENCEFigure 4-11 shows the message processing sequence for the Access Control component. Onlya single sequence is presented for this component as it is identical regardless of whether amessage is being sent or received. It includes the error cases as alternative fragments.MALAccess ControlAccess Control RulesCheck messageAuthenticate useralt Authentication FailureReturn authentication failureCheck against rulesalt Authorisation FailureReturn authorisation failureUpdate message credentialsReturn messageFigure 4-11: Access Control Processing Sequencea) The MAL component submits a message to the Access Control component forchecking. It includes whether the message is being received or sent by the MAL.b) The first check of the Access Control component is to authenticate the usercredentials of the message.c) If this check fails the Access Control component shall return an Authentication failuremessage to the MAL and the sequence shall end at this point.d) The Access Control component shall then check that the message is authorised to besent/received. The actual checks involved at this point are deployment specific.e) If this check fails the Access Control component shall return an Authorisation failuremessage to the MAL and the sequence shall end at this point.f) If both authentication and authorisation checks pass, then the Access Controlcomponent shall update the message user credentials (if appropriate) and return theupdated message to the MAL.CCSDS 520.1-R-1 Page 4-14 October 2009