From 79c5df5f97317a5712ebc8e9cbc72f7d49ee7d19 Mon Sep 17 00:00:00 2001 From: Instrumental Date: Fri, 25 May 2018 20:54:35 -0500 Subject: Create Security Overview Issue-ID: AAF-331 Change-Id: If588c053710e35554aa31d7dd41d9191be155840 Signed-off-by: Instrumental --- .../architecture/images/SecurityArchAAF.svg | 55 +++++ .../architecture/images/SecurityArchAAFOrg.svg | 128 +++++++++++ .../architecture/images/SecurityArchBasic_1.svg | 48 ++++ .../architecture/images/SecurityArchBasic_TLS.svg | 62 +++++ .../architecture/images/SecurityArchCADI.svg | 64 ++++++ .../architecture/images/SecurityArchFull.svg | 255 +++++++++++++++++++++ docs/sections/architecture/images/aaf-cm.png | Bin 0 -> 149239 bytes .../architecture/images/aaf-object-model.jpg | Bin 0 -> 189989 bytes 8 files changed, 612 insertions(+) create mode 100644 docs/sections/architecture/images/SecurityArchAAF.svg create mode 100644 docs/sections/architecture/images/SecurityArchAAFOrg.svg create mode 100644 docs/sections/architecture/images/SecurityArchBasic_1.svg create mode 100644 docs/sections/architecture/images/SecurityArchBasic_TLS.svg create mode 100644 docs/sections/architecture/images/SecurityArchCADI.svg create mode 100644 docs/sections/architecture/images/SecurityArchFull.svg create mode 100644 docs/sections/architecture/images/aaf-cm.png create mode 100644 docs/sections/architecture/images/aaf-object-model.jpg (limited to 'docs/sections/architecture/images') diff --git a/docs/sections/architecture/images/SecurityArchAAF.svg b/docs/sections/architecture/images/SecurityArchAAF.svg new file mode 100644 index 00000000..34b592ab --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchAAF.svg @@ -0,0 +1,55 @@ + + + + + + + + Service + + + + + + Cert Man + + + + + + OAuth + + + + + AAF + + (Application Authorization Framework) + + + + + Authn + + + + + + Authz + + + + + + Locator + + + + + + GUI + (Management) + + + + diff --git a/docs/sections/architecture/images/SecurityArchAAFOrg.svg b/docs/sections/architecture/images/SecurityArchAAFOrg.svg new file mode 100644 index 00000000..f003b810 --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchAAFOrg.svg @@ -0,0 +1,128 @@ + + + + + + + + + + + + + + Sign + CSRs + + + Delegate + by Domain + + + + + + + + + + + Service + + + + + + Cert Man + + + + + + OAuth + + + + + AAF + + (Application Authorization Framework) + + + + + Authn + + + + + + Authz + + + + + + Locator + + + + + + GUI + (Management) + + + + + + + + Certificate + Authority + + + + + + DNS + (Externally + Visible) + + + + + + + + Formal + Organization + + + + + + Notification + System + + + + + + Identity/ + Hierarchy + + + + + + Company + Authn(s) + + + + + Organizationally Defined + + + diff --git a/docs/sections/architecture/images/SecurityArchBasic_1.svg b/docs/sections/architecture/images/SecurityArchBasic_1.svg new file mode 100644 index 00000000..1066f2c3 --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchBasic_1.svg @@ -0,0 +1,48 @@ + + + + + + + Application + Two + + + + + + User One + (Person) + + + + + + + + + + + + Application + One + + + + Application + Two + + + + + + User One + (Person) + + + + Application + One + + + diff --git a/docs/sections/architecture/images/SecurityArchBasic_TLS.svg b/docs/sections/architecture/images/SecurityArchBasic_TLS.svg new file mode 100644 index 00000000..664593bd --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchBasic_TLS.svg @@ -0,0 +1,62 @@ + + + + + + TLS 1.2+ + + + TLS 1.2+ + + + HTTP/S + + + HTTP/S + + + + + + Application + Two + + + + + + User One + (Person) + + + + + + + + + + + + Application + One + + + + Application + Two + + + + + + User One + (Person) + + + + Application + One + + + diff --git a/docs/sections/architecture/images/SecurityArchCADI.svg b/docs/sections/architecture/images/SecurityArchCADI.svg new file mode 100644 index 00000000..b05a7f90 --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchCADI.svg @@ -0,0 +1,64 @@ + + + + + + X509 Client + + + X509 Client + + + or BasicAuth + + + + + + + + CADI Filter + + + + + + + + + CADI Filter + + + + + Application + Two + + + + + + User One + (Person) + + + + HTTP/S + + + + + + + + + + + Application + One + + + HTTP/S + + + diff --git a/docs/sections/architecture/images/SecurityArchFull.svg b/docs/sections/architecture/images/SecurityArchFull.svg new file mode 100644 index 00000000..0093eaa1 --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchFull.svg @@ -0,0 +1,255 @@ + + + + + + + + + + + + + + 1) User/Password + validation (if Basic Auth) + + + 2) Obtain + AAF Permissions + + + + + + + Batch + Maintenance + + + + + + + + Expiring + Events + + + + + + + + + + + + + + + Cassandra + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Sign + CSRs + + + Delegate + by Domain + + + + + + + + + + + Service + + + + + + Cert Man + + + + + + OAuth + + + + + AAF + + (Application Authorization Framework) + + + + + Authn + + + + + + Authz + + + + + + Locator + + + + + + GUI + (Management) + + + + + + + + Certificate + Authority + + + + + + DNS + (Externally + Visible) + + + + + + + + Formal + Organization + + + + + + Notification + System + + + + + + Identity/ + Hierarchy + + + + + + Company + Authn(s) + + + + + Organizationally Defined + + + + + X509 Client + + + X509 Client + + + or BasicAuth + + + + + + + + CADI Filter + + + + + + + + + CADI Filter + + + + + Application + Two + + + + + + User One + (Person) + + + + HTTP/S + + + + + + + + + + + Application + One + + + HTTP/S + + + diff --git a/docs/sections/architecture/images/aaf-cm.png b/docs/sections/architecture/images/aaf-cm.png new file mode 100644 index 00000000..602f17e4 Binary files /dev/null and b/docs/sections/architecture/images/aaf-cm.png differ diff --git a/docs/sections/architecture/images/aaf-object-model.jpg b/docs/sections/architecture/images/aaf-object-model.jpg new file mode 100644 index 00000000..30caa7d5 Binary files /dev/null and b/docs/sections/architecture/images/aaf-object-model.jpg differ -- cgit 1.2.3-korg