Search

Scope: Core (OPC-10000-*) All specs

27 result(s) for Discovery

OPC-10000-1 – OPC Unified Architecture - Part 1: Overview and Concepts

2.1.14 Discovery

Discovery process by which Client obtains information about Server s, including endpoint and security information
OPC-10000-1 – OPC Unified Architecture - Part 1: Overview and Concepts

3.2 Specification parts

This access includes both historical data and historical Events . Part 12 ( OPC 10000-12 ) - Discovery and Global Services Part 12 specifies how Discovery Servers operate in different scenarios and describes
OPC-10000-1 – OPC Unified Architecture - Part 1: Overview and Concepts

4.4.1.2 Discovery and Session establishment

Discovery and Session establishment Application level security relies on a secure communication channel that is active for the duration of the application Session and ensures the integrity of all Messages ... described in OPC 10000-4 and OPC 10000-6 . Additional information about the Discovery process is described
OPC-10000-1 – OPC Unified Architecture - Part 1: Overview and Concepts

5.7.2 Discovery Services

Discovery Services Discovery Services enable OPC UA Applications to locate other OPC UA Applications. For example, a Client application can use a Local Discovery Server (LDS) to find Servers ... local network. In a larger, more complex network, a Global Discovery Server (GDS) might be used to discover Servers across different network segments. The Client sends a Discovery request
OPC-10000-1 – OPC Unified Architecture - Part 1: Overview and Concepts

6.2 Discovery Service Set

Discovery Service Set This Service Set defines Services used to discover Servers that are available in a system. It also provides a manner in which clients can read the security ... configuration required for connection to the Server . The Discovery Services are implemented by individual Servers and by dedicated Discovery Servers . Well known dedicated Discovery Servers provide a way for Clients
OPC-10000-1 – OPC Unified Architecture - Part 1: Overview and Concepts

6.3 SecureChannel Service Set

described in the security policies for a Server . These policies are exposed via the Discovery Service Set . A Client selects the appropriate endpoint that supports the desired security policy
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

4.3.12 Rogue Local Discover Server

used to generate incorrect input to a GDS that aggregates information from Local Discovery Servers . A rogue Discovery Server impacts all security objectives except Integrity and Non-Repudiation
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

4.3.17 Downgrade Attack

less secure connection or deprecated security policy. This could be attempted by modifying a Discovery response to remove security options from the available endpoints. Message suppression directly impacts Authentication
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

5.1.11 Rogue Local Discover Server

description of this threat. OPC UA Client can counter a rogue Discovery Server , by only connecting to Servers that are trusted. This protects the Client against malicious Server ... also mitigate the effect of a compromised Local Discovery Server . A GDS, that aggregates information from Local Discovery Server s does not trust the input from the Local Discovery Servers
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

7.1 Overview

require special consideration from a security point of view. These services, also known as Discovery Services, provide capabilities that allow Clients to discover Servers and connect to them. The Discovery
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

7.2 Discovery

Discovery Discovery Services can be provided by a Local Discovery Server or by the Server . A Local Discovery Server is used when more than one OPC UA Application could ... dedicated Server is available on a platform, usually that Server also functions as a Discovery Server . The Local Discovery Server exposes the following services that do not require
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

7.3 Multicast Discovery

Multicast Discovery OPC UA can be configured to support discovery in multiple manners. One of the options is a multi-cast discovery. In this type of Discovery, Servers announce themselves ... environments where an attacker can easily access the network. OPC UA Applications (or Discovery Servers ) are built to ensure that they cannot be overloaded or brought down by high broadcast
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

8.1 Overview

Overview The Global Discovery Server (GDS) is a special OPC UA Server that provides Discovery Services for a plant or entire system. In addition, This Server can include CertificateManager , KeyCredentialService ... There are multiple methods of accessing a GDS: Servers can register with the Discovery Server Clients can query the GDS for available Servers Clients can pull certificates from the CertificateManager
OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model

8.2 Rogue GDS

remember when dealing with a GDS: It is important that Servers register with the Discovery Server they are configured to register with and that Servers do not blindly register with ... been configured to register with. Servers have to be aware that a Discovery Server could be a rogue Server . A Server registers all endpoints that it provides, ensuring that
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

3.1.3 DiscoveryEndpoint

DiscoveryEndpoint Endpoint that allows Clients access to Discovery Services without security Note 1 to entry: A DiscoveryEndpoint allows access to Discovery Services without a Session and without message security
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

4.1 Service Set model

logical grouping used in this document and is not used in the implementation. The Discovery Service Set , illustrated in Figure 1 , defines Services that allow a Client to discover ... Server and to read the security configuration for each of those Endpoints . Figure 1 - Discovery Service Set The SecureChannel Service Set , illustrated in Figure 2 , defines Services that allow
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

5.5.1 Overview

implemented by a Server and to read the security configuration for those Endpoints . The Discovery Services are implemented by individual Servers and by dedicated Discovery Servers . OPC 10000-12 describes ... Discovery Services with dedicated Discovery Servers. Every Server shall have a DiscoveryEndpoint that Clients can access without establishing a Session . This Endpoint may or may not be the same Session
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

5.5.3.1 Description

Description This Service returns the Servers known to a Discovery Server . Unlike FindServers , this Service is only implemented by Discovery Servers . The Client may reduce the number of results returned ... require message security but it may require transport layer security. Each time the Discovery Server creates or updates a record in its cache it shall assign a monotonically increasing identifier
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

5.5.5.1 Description

Description This Service is implemented by Discovery Servers . This Service registers a Server with a Discovery Server . This Service will be called by a Server or a separate configuration utility ... Clients will not use this Service . A Server shall establish a SecureChannel with the Discovery Server before calling this Service . The SecureChannel is described in 5.6 . The Administrator
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

5.5.6.1 Description

Description This Service is implemented by Discovery Servers . This Service allows a Server to register its DiscoveryUrls and capabilities with a Discovery Server . It extends the registration information from RegisterServer ... this Service . Servers that support RegisterServer2 shall try to register with the Discovery Server using this Service and shall fall back to RegisterServer if RegisterServer2 fails with the status
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

5.6.1 Overview

SecureChannel with a given Endpoint . A Client may obtain the EndpointDescription from a Discovery Server , via some non-UA defined directory server or from its own configuration. The exact algorithms
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

6.1.4 Creating a SecureChannel

aware of when using the GetEndpoints Service . The first could come from a rogue Discovery Server that tries to direct the Client to a rogue Server . For this reason
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

6.5.4 Auditing for Discovery Service Set

Auditing for Discovery Service Set This Service Set can be separated into two groups: Services that are called by OPC UA Clients and Services that are invoked ... failed Service invocations. These audit entries shall include the Server URI, Server names, Discovery URIs and isOnline status. Audit entries should not be generated for RegisterServer invocation that does
OPC-10000-4 – OPC Unified Architecture - Part 4: Services

7.31 RegisteredServer

LocalDiscoveryServer starts. If a Semaphore file is specified but does not exist the Discovery Server shall remove the registration from any persistent data store. If the Server has registered with ... semaphoreFilePath, the Discovery Server shall check that this file exists before returning the ApplicationDescription to the Client . If the Server did not register with a semaphoreFilePath (it is null
OPC-10000-6 – OPC Unified Architecture - Part 6: Mappings

7.1.3 Establishing a connection

future (the sequence may pause here). Client may use SecureChannel for Discovery or Session-less Service invocations. Once a SecureChannel is established, the Server shall create a new socket
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

4.1 Overview

Overview The discovery process allows OPC UA Application s to find other OPC UA Application s on the network and then discover how to connect to them. Note that this ... discussion builds on the discovery related concepts defined in OPC 10000-4 . Discoverable applications are generally Servers ; however, some Clients will support reverse connections as described
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

6.5.1 Overview

Overview The GlobalDiscoveryServer Information Model used for discovery is shown in Figure 12 . Most of the interactions between the GlobalDiscoveryServer and Application administrator or the Client will be via Methods