|
Features
Tutorial
Case Studies
|
Security
The objective
of nTegrator is to provide secure access to data distributed over the
Internet and corporate Intranets.
nTegrator
provides security at three levels.
-
Security of
Data - The owner of data must be allowed to decide what portions of
that data can be made available to others. nTegrator is a closed
system in that a specific action must be taken (making the data
accessible through a Data Transport) by an owner to allow access to the
data. Furthermore, the owner can further restrict the type and
amount of data being exposed by adding Agents that intercept all
data access requests. For instance, if a Data Transport allows access to
an entire database, an Agent can be used to restrict that access to
a particular relation or field.
-
Access Control -
Access control defines the ability of the data owner to specify who
is permitted to access a Data Transport and what they are allowed to do
if they have access. This is accomplished in two ways by nTegrator.
First, the data owner can specify which portions of the nTegrator
hierarchy are visible to specific nTegrator servers, individuals,
and groups. Portions of the hierarchy that are not visible simply
cannot be reached. Second, a set of permissions is associated with
each Data Transport that determines what actions a user can perform on
the Data Transport.
-
Security from
observation - All data that leaves the computer on which the server
is running (i.e., through the TCP/IP portal) is encrypted. The
encryption involves the exchange of public keys and the
determination of a one-time session key for encryption.
|
