|
DNAOS Quick Glossary
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
ENCRYPTION
a security process where
information is encrypted and can only be accessed by owners of the corresponding decrypting key.
All communication and long term persistence of private contents,
profiles, and
resources should be encrypted,
and keys managed the accordingly. See also
Authorization Authentication Entitlement.
ENTITLEMENT
a resourcerelation
type that defines access
rights,
policies, and tracking between the
associated Resources.
The process of
securing resources
by constraining access of subject resources over object resources,
in real-time, on every access, with unlimited
granularity,
to ensure that: users are given access only to all resources that they are entitled to, for any given context.
Entitlement is also expressed, modeled, and managed as a Resource
relation
type, that defines access rights and policies between Resources.
Entitlement is at the root of distributed virtual profile applications,
because of the important associated security considerations. See also
Entitlement is a fundamental information sharing enabler, combining
Encryption Authorization Authentication
with resource management to offer secure information sharing and access.
ENTITY
All DNAOS resources
operate with similar patterns but some of them can be characterized by the fact
that they also define a specific relationship between two other resources.
Correspondingly to this natural pattern, some resources also have 'from' and 'to'
references to the other two resources, used to relate them. Often these
resources are called
'relations'
while the others are commonly referred to as 'entities'.
|