Search

Scope: Core (OPC-10000-*) All specs

10 result(s) for GetSecurityKeys

OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.4.5.1 General

consume PubSub NetworkMessages . Separate keys are associated with each SecurityGroupId in the system. The GetSecurityKeys Method exposed by the SKS shall be called to receive necessary key material ... SecurityGroupId . GetSecurityKeys can return more than one key. In this case the next key can be used when the current key is outdated without calling GetSecurityKeys for every key needed
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.4.5.3 Key acquisition handshakes

access to the SecurityGroup . Then it passes the identifier of the SecurityGroup to the GetSecurityKeys Method that verifies the identity and returns the keys used to secure messages ... PubSubGroup . The GetSecurityKeys Method is defined in 8.3.2 . The access to the GetSecurityKeys Method may use SessionlessInvoke Service calls. These calls typically use an Access Token that is retrieved from
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.4.5.4 Authorization Services and Security Key Service

Security Key Service The SKS is a Server that exposes a Method called GetSecurityKeys . The Access Token is used to determine if the calling application is allowed to access ... would be to check the Permissions assigned to the SecurityGroup Object identified by the GetSecurityKeys Method arguments. Publishers and Subscribers can request keys if the Access Token they provide
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

6.2.5.4 SecurityKeyServices

Enum ApplicationType SERVER The security keys are pulled from the SKS using the Method GetSecurityKeys . CLIENT The security keys are pushed from the SKS to the PubSub application using
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

6.2.12.2 SecurityGroupDataType

SecurityGroup . MaxFutureKeyCount UInt32 The maximum number of future keys returned by the Method GetSecurityKeys . MaxPastKeyCount UInt32 The maximum number of historical keys stored by the SKS. SecurityGroupId String The identifier ... Name field. RolePermissions RolePermissionType[] The permissions that apply to the security key access through GetSecurityKeys for the SecurityGroup. GroupProperties KeyValuePair[] Specifies additional properties for the security group. Its representation
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

7.2.4.4.3.1 General

encrypt and sign messages are extracted from the key data returned from the GetSecurityKeys method (see 8.3.2 ). This Method returns a sequence of key data with a length that depends ... SigningKey Byte [SymmetricSignatureAlgorithm Key Length] Signing key part of the key data returned from GetSecurityKeys . The SymmetricSignatureAlgorithm is defined in the SecurityPolicy. EncryptingKey Byte [SymmetricEncryptionAlgorithm Key Length] Encryption key part
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

7.2.4.4.3.2 AES-CTR

Type Description KeyNonce Byte [4] The KeyNonce portion of the key data returned from GetSecurityKeys . MessageNonce Byte [8] The first 8 bytes of the Nonce in the SecurityHeader
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

8.3.2 GetSecurityKeys Method

GetSecurityKeys Method This Method is used to retrieve the security keys for a SecurityGroup . This Method is required to access the security keys of a PubSubGroup where the SecurityGroup manages ... communication is not encrypted. The information necessary to access the Server that implements the GetSecurityKeys Method for the SecurityGroup is also contained in the SecurityKeyServices setting of WriterGroup, ReaderGroup
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

8.4.1 SecurityGroupType definition

SecurityGroupDataType controls the access to the security keys for the SecurityGroup through the Method GetSecurityKeys . The GetSecurityKeys Method is defined in 8.3.2 . The Permission to access the keys is different ... Property SecurityGroupId contains the identifier for the SecurityGroup used in the key exchange Methods GetSecurityKeys and SetSecurityKeys in the PubSubGroupType . The Property KeyLifetime defines the lifetime
OPC-10000-81 – OPC Unified Architecture - Part 81: UAFX Connecting Devices and Information Model

E.5 Interaction with an SKS

model, the set of keys is pulled by the AutomationComponents from the SKS using GetSecurityKeys. The SecurityGroupId links the key generation side (i.e., the SKS) and the key usage side ... Publisher, Subscriber ). If an AutomationComponent calls GetSecurityKeys on the SKS or an SKS calls SetSecurityKeys on the AutomationComponent with a specific SecurityGroupId , all WriterGroups and DataSetReaders utilizing the SecurityGroupId