Search

Scope: Core (OPC-10000-*) All specs

21 result(s) for SecurityGroupId

OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

3.1.9 SecurityGroup

messages from a Publisher . A SecurityGroup is identified with a unique identifier called the SecurityGroupId . The SecurityGroupId is unique within the Security Key Service
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.3.7 SecurityGroup

more detail in 5.4.5 . A SecurityGroup is identified with a unique identifier called the SecurityGroupId . It is unique within the SKS. A Publisher for its PublishedDataSets needs to know ... SecurityGroupId . For Subscribers the SecurityGroupId is distributed as metadata together with the DataSetMetaData . The metadata for a SecurityGroupId includes the EndpointDescription of the responsible SKS. Publishers and Subscribers
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.4.1.2 Message sending

this message is protocol specific. If the SecurityMode (see 6.2.5.2 ) requires message security, the SecurityGroupId (see 6.2.5.3 ) is used to fetch the SecurityPolicy and the security keys from
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.4.5.1 General

keys used to publish or consume PubSub NetworkMessages . Separate keys are associated with each SecurityGroupId in the system. The GetSecurityKeys Method exposed by the SKS shall be called to receive ... necessary key material for a SecurityGroupId . GetSecurityKeys can return more than one key. In this case the next key can be used when the current key is outdated without calling
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

5.4.5.2 SecurityGroup Management

SecurityGroup relation on the Publishers and Subscribers , the SecurityGroupId and the SKS EndpointDescriptions are configured in a PubSub group
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

6.2.5.3 SecurityGroupId

SecurityGroupId The SecurityGroupId with DataType String is the identifier for a SecurityGroup in the Security Key Server . It is unique within a SKS. The parameter is null if the SecurityMode ... NONE . If the SecurityMode is not NONE the SecurityGroupId identifies the SecurityGroup . The SecurityGroup defines the SecurityPolicy and the security keys used for the NetworkMessage security. The PubSubGroup defines
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

6.2.5.4 SecurityKeyServices

Endpoint for an SKS that can supply the security keys for the SecurityGroupId . Multiple Endpoints exist because an SKS may have multiple redundant instances. If the SKS supports non-transparent ... endpoint information necessary to connect to the SKS. The combination of SecurityGroupId and SKS ApplicationUri is the unique key for a SecurityGroup in a PubSub application. Table 40 - SecurityKeyService parameter
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

6.2.12.2 SecurityGroupDataType

Method GetSecurityKeys . MaxPastKeyCount UInt32 The maximum number of historical keys stored by the SKS. SecurityGroupId String The identifier for the SecurityGroup . The SecurityGroupId shall match the Name field. RolePermissions RolePermissionType
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

8.3.2 GetSecurityKeys Method

where the SecurityGroup manages the security keys for PubSubGroups . The PubSubGroup Object contains the SecurityGroupId that shall be passed to this Method in order to access the keys ... PubSubGroup . Note that multiple PubSubGroups can share a SecurityGroupId . The configuration parameter RolePermissions contained in the SecurityGroupDataType controls the access to the security keys for the SecurityGroupId . If the user
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

8.3.3 GetSecurityGroup Method

provides a direct lookup of the NodeId of a SecurityGroupType Object based on a SecurityGroupId . It is used by a security administration tool to get the SecurityGroup Object for configuration ... access permissions for the keys. The SecurityGroupId is the identifier for the SecurityGroup in Publishers , Subscribers and the key Server . This Method returns the NodeId of the corresponding SecurityGroup Object
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

8.5.2 AddSecurityGroup Method

Duration KeyLifetime, [in] String SecurityPolicyUri, [in] UInt32 MaxFutureKeyCount, [in] UInt32 MaxPastKeyCount, [out] String SecurityGroupId, [out] NodeId SecurityGroupNodeId ); Argument Description SecurityGroupName Name of the SecurityGroup to add. KeyLifetime The lifetime ... caller should get the revised value by reading the MaxPastKeyCount of the created SecurityGroup . SecurityGroupId The identifier for the SecurityGroup . The SecurityGroupId shall match the SecurityGroupName . SecurityGroupNodeId The NodeId
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

9.1.3.3 SetSecurityKeys

ApplicationUri in the SecurityKeyServices parameter of the WriterGroup , ReaderGroup or DataSetReader objects using the SecurityGroupId . Signature SetSecurityKeys ( [in] String SecurityGroupId, [in] String SecurityPolicyUri, [in] IntegerId CurrentTokenId, [in] ByteString CurrentKey ... ByteString[] FutureKeys, [in] Duration TimeToNextKey, [in] Duration KeyLifetime ); Argument Description SecurityGroupId The identifier for the SecurityGroup . SecurityPolicyUri The URI for the set of algorithms and key lengths used to secure
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

9.1.3.7.2 PubSubConfigurationRefMask

following structure fields are used for the match, the others are ignored. SecurityMode SecurityGroupId SecurityKeyServices MaxNetworkMessageSize PublishingInterval KeepAliveTime Priority HeaderLayoutUri TransportSettings MessageSettings For the ReaderGroupDataType , the following structure fields ... used for the match, the others are ignored. SecurityMode SecurityGroupId SecurityKeyServices MaxNetworkMessageSize TransportSettings MessageSettings For the ConnectionProperties and GroupProperties only the entries are compared for the match that are provided
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

9.1.6.2 PubSubGroupType

BaseObjectType defined in OPC 10000-5 . HasProperty Variable SecurityMode MessageSecurityMode PropertyType Mandatory HasProperty Variable SecurityGroupId String PropertyType Optional HasProperty Variable SecurityKeyServices EndpointDescription[] PropertyType Optional HasProperty Variable MaxNetworkMessageSize UInt32 PropertyType Mandatory ... PubSubStatusType Mandatory Conformance Units PubSub Model Base The SecurityMode is defined in 6.2.5.2 . The SecurityGroupId is defined in 6.2.5.3 . If the SecurityMode is not NONE , the Property shall provide
OPC-10000-14 – OPC Unified Architecture - Part 14: PubSub

9.1.8.2 DataSetReaderType

HasProperty Variable HeaderLayoutUri String PropertyType Mandatory HasProperty Variable SecurityMode MessageSecurityMode PropertyType Optional HasProperty Variable SecurityGroupId String PropertyType Optional HasProperty Variable SecurityKeyServices EndpointDescription[] PropertyType Optional HasProperty Variable DataSetReaderProperties KeyValuePair[] PropertyType Mandatory ... value is not INVALID , it overwrites the settings on the group. The SecurityGroupId is defined in 6.2.9.10 . The SecurityKeyServices is defined in 6.2.9.11 . The DataSetReaderProperties is defined
OPC-10000-17 – OPC Unified Architecture - Part 17: Alias Names

D.1.3 PubSub AliasName Notification Configuration

type of security ( None , Sign , SignAndEncrypt ) assigned to the messages. The SecurityGroupId that is associated with the published messages. It is the unique identifier for a SecurityGroup within
OPC-10000-81 – OPC Unified Architecture - Part 81: UAFX Connecting Devices and Information Model

6.13.3.2 PubSubCommunicationFlowConfigurationType definition

HasComponent Variable 4:SecurityMode 0:MessageSecurityMode 0:SelectionListType O 0:HasComponent Variable 4:SecurityGroupId 0:String 0:SelectionListType O 0:HasComponent Object 4:<SubscriberConfiguration> 4:SubscriberConfigurationType OP ConformanceUnits ... used for the information flow. For the definition of SecurityMode , see OPC 10000-14 . SecurityGroupId specifies the security group to be used for the information flow. For the definition
OPC-10000-81 – OPC Unified Architecture - Part 81: UAFX Connecting Devices and Information Model

E.5 Interaction with an SKS

keys is pulled by the AutomationComponents from the SKS using GetSecurityKeys. The SecurityGroupId links the key generation side (i.e., the SKS) and the key usage side (i.e., Publisher, Subscriber ... calls SetSecurityKeys on the AutomationComponent with a specific SecurityGroupId , all WriterGroups and DataSetReaders utilising the SecurityGroupId on the AutomationComponent will get the new set of keys. PubSubKeyPushTargets are used
OPC-10000-81 – OPC Unified Architecture - Part 81: UAFX Connecting Devices and Information Model

E.6.2 ConnectionConfigurationSet and WriterGroup

information in the PubSubConnection , whereas HeaderLayoutUri , PublishingInterval, Qos, SecurityMode and SecurityGroupId are used to set up the information in the WriterGroup . The PubSubConnection elements ConnectionProperties and TransportSettings are transport-specific
OPC-10000-81 – OPC Unified Architecture - Part 81: UAFX Connecting Devices and Information Model

E.6.3 ConnectionConfigurationSet and ReaderGroup

AutomationComponent contains a ReaderGroup for each PubSubCommunicationFlowConfiguration. By this, common parameters (e.g., SecurityGroupId, SecurityKeyServices, TransportSettings, or MessageSettings ) are configured on the ReaderGroup and do not need to be repeated ... information in the PubSubConnection , whereas HeaderLayoutUri , PublishingInterval, Qos, SecurityMode and SecurityGroupId are used to set up the information in the ReaderGroup . The PubSubConnection elements ConnectionProperties and TransportSettings are transport-specific
OPC-10000-81 – OPC Unified Architecture - Part 81: UAFX Connecting Devices and Information Model

F.1.7 PubSubCommunicationFlowConfigurationConfDataType

True SecurityModeModify 0:Boolean Flag indicating if the SecurityMode options can be modified. True SecurityGroupId 0:String The optional SecurityGroupId specifies the security group to be used for the information ... flow. True SecurityGroupIdSelection 0:String[] Selection list options for SecurityGroupId. True SecurityGroupIdModify 0:Boolean Flag indicating if the SecurityGroupId options can be modified. True SubscriberConfigurations 4:SubscriberConfigurationConfDataType[] Defines the configuration