Security 2.0
The Security 2.0 feature is an enhancement to the existing AllJoyn Security.
The goal of the Security 2.0 feature is to allow an application to validate access to secure interfaces or secure objects based on policies installed by the owner. This feature is part of the AllJoyn Core library. It is not an option for the application to enforce permission. It is up to the user to dictate how the application performs based on the access control lists (ACLs) defined for the application. The AllJoyn Core Permission Management component does all the enforcement including the concept of mutual authorization before any message action can be taken.
The Security Manager is an optional service that helps the user with key management and permission rules building. Using policy templates defined by application developer, the Security Manager builds the application manifest to let the user authorize which interactions the application can do.
Phil Nguyen philn@qce.qualcomm.com is the primary design document maintainer.
Security Manager Release Planning
Weekly Meetings
The Security 2 project of the AllSeen Alliance Core Working Group held weekly calls to discuss status, technical details and triage during the development phase of the feature. The weekly meetings were suspended in Nov 2015 as the team felt a meeting dedicated to the topic is no longer needed.
To request a topic be added to the agenda for an upcoming call, send an e-mail to the core working group mail list.
Ad hoc technical discussions will be scheduled as needed if the topic cannot be covered in a regularly scheduled core working group call. Monitor the core working group mail list for announcements.
Documents
Schedule Documents
Feature Matrix
High Level Design Documents
-
- Note: Revision 1 update 6 is locked for the Security 2.0 release as part of the Core 15.08 release tracked in JIRA linked here.
- Use the following process to add comments and/or making changes to the HLD
- Submit comments/questions to the Core WG mail list with the subject prefix [Security 2.0]
- Once there is resolution make the proposed changes to the HLD following the alliance webdocs process
- Additional comments are captured through the gerrit approval process
- Note: Once a proposed change is approved, a request must be sent to the documentation mail list (allseen-tech-documentation-website@lists.allseenalliance.org) to have the web site updated.
- To make updates, follow the alliance documentation process detailed here
- View the source documentation using this link
- Use git to access the documentation via gerrit (one time action)
- To view and edit the documentation use the following commands.
- Sign in using your AllSeen Aliance credentials
- Select `clone with commit-msg hook`
- Select `HTTP`
- Use the provided git clone command to download the webdocs project
Archived versions
- Draft Version
- Latest versions
- Older versions
Newly Proposed Interface Descriptions For IRB Review
Outdated Interface Descriptions
Security Manager Documentation
Test Documents
Technical Meeting Minutes
- Technical Discussion Notes for Nov 9, 2015 regarding concerns of fine grained interfaces potential to cause large manifests
- Technical Discussion Notes for June 18, 2015 regarding ASACORE-2067 and Delegation
- Technical Discussion Notes for May 05, 2015
- Technical Discussion Notes for April 21, 2015
- Technical Discussion Notes for April 7, 2015 HLD Review #2 discussion
- Technical Discussion Notes for March 19, 2015 HLD Review #2 discussion
- Technical Discussion Notes for March 13, 2015 Follow up from mail thread discussions
- Technical Discussion Notes for March 10, 2015
- Technical Discussion Notes for March 06, 2015 HLD Review part 2
- Technical Discussion Notes for February 24, 2015
- Technical Discussion Notes for February 10, 2015
- Technical Discussion Notes for January 27, 2015
- January 13, 2015 Security 2.0 Root Of Trust - Technical Discussion WebEx Recording
- Technical Discussion Notes for October 2, 2014
- Technical Discussion Notes for September 23, 2014
- Technical Discussion Notes for September 3, 2014
- Collaboration Meeting Notes for August 12-14, 2014
Status Meeting Minutes
- November 02, 2015 WebEx Recording Meeting Slides
- October 12, 2015 WebEx Recording Meeting Slides
- October 05, 2015 WebEx Recording
- September 28, 2015 WebEx Recording Meeting Slides
- September 21, 2015 WebEx Recording Meeting Slides
- September 15, 2015 WebEx Recording Meeting Slides
- September 08, 2015 WebEx Recording Meeting Slides
- August 31, 2015 WebEx Recording Meeting Slides
- August 24, 2015 WebEx Recording
- August 17, 2015 WebEx Recording Meeting Slides
- August 10, 2015 WebEx Recording Meeting Slides
- August 03, 2015 WebEx Recording Meeting Slides
- July 27, 2015 WebEx Recording Meeting Slides
- July 20, 2015 WebEx Recording Meeting Slides
- July 13, 2015 WebEx Recording Meeting Slides
- July 07, 2015 WebEx Recording Meeting Slides
- June 29, 2015 WebEx Recording Meeting Slides
- June 22, 2015 WebEx Recording Meeting Slides
- June 15, 2015 WebEx Recording Meeting Slides
- June 08, 2015 WebEx Recording
- June 01, 2015 WebEx Recording
- May 11, 2015 WebEx RecordingMeeting Notes
- April 28, 2015 WebEx Recording Meeting Notes
- April 14, 2015 WebEx Recording
- March 31, 2015 Meeting Notes WebEx Recording
- March 17, 2015 WebEx Recording
- March 03, 2015 -Includes HLD review part 1- WebEx Recording
- February 17, 2015 Meeting Notes WebEx Recording
- February 03, 2015 Meeting Notes WebEx Recording
- January 20, 2015 Meeting Notes WebEx Recording
- January 06, 2015 WebEx Recording
- December 09, 2014 WebEx Recording
- November 25, 2014 WebEx Recording
- October 28, 2014 WebEx Recording
- October 14, 2014 Meeting Slides/Notes WebEx Recording
- September 30, 2014 Meeting Minutes WebEx Recording
- September 16, 2014 Meeting Minutes WebEx Recording
- September 09, 2014 Meeting Minutes WebEx Recording
- September 02, 2014 Meeting Minutes WebEx Recording
- August 26, 2014 Meeting Minutes WebEx Recording