Connectivity Framework Annex A : Assessment Template : DDS
A . 6.3 Usage Viewpoint
A . 6.3.6 Security ( Section 2.3.5 )
A . 6.3.7 Safety ( Section 2.3.9 )
A . 6.3.8 Gateways ( Section 3.3 )
What are the system security implications of this connectivity technology ?
DDS-Security v1.0 specification defines a fine-grained security model at the level of data objects that includes authentication , encryption , access control , data integrity and logging capabilities to enable secure data connectivity end-to-end in an IoT system . This security model applied on top of the network layer , and can therefore support secure multicast , when needed .
In addition , DDS the transport layer security mechanisms such as TLS ( Transport Layer Security ) and DTLS ( Datagram Transport Layer Security ) can also be used , although they may be unnecessary when the DDS security model is used . For systems that need it , are certifiable implementations available ?
Yes , certifiable DDS implementations are available , including for example , DO-178C Level A for flight safety critical systems . Certifications for IEC 60601 ( class 3 medical devices ) and ISO 26262 ( automotive road functional safety ) are in process . HIPAA-compliant security is available for the medical industry .
List of gateways to core connectivity standards and other relevant connectivity technologies .
Standardized gateways are available to the following connectivity standards :
• DDS-Web v1.0 — access to the data space via RESTful or HTTP technologies and
• OPC-UA-DDS — access to the DDS data space via OPC-UA , and access to data objects on the OPC-UA address space .
• oneM2M-DDS gateway is under development
IIoT System
Mobile and Web User Interfaces Manufacturing Workcells
Autonomy |
Light-Weight Clients |
Sleep / Wake Clients |
Equipment |
Real-Time Decisions
DDS-WEB Gateway
Connectivity Core Standard ( HTTP / REST )
Connectivity Core Standard ( OPC-UA )
OPC-UA-DDS Gateway
DDS Databus
Databus Gateway
Bespoke gateways to many IIoT vertical specific connectivity technologies exist , including DNP3 , C37.118 , Modbus , HLA , JMS and so on .
IIC : PUB : G5 : V1.0 : PB : 20170228 - 65 -