TP01100 Datasheet, PDF (47/64 Pages) List of Unclassifed Manufacturers – TotalPlant Solution (TPS) System

Security
Security Approach
The following are the key points of the TPS system security.
• Implement security facilities on the NT side of TPS system , with little or no
modification of the current TPS Networkside security implementation
• Use the Windows NT security subsystem as the foundation for TPS system security
• Augment NT security only where required to provide TPS system specific security
features, and ensure that the augmentations are well integrated with the NT security
mechanisms
NT Domain
An NT Domain contains a Primary Domain Controller (PDC) and zero or more Backup
Domain Controllers (BDC). The PDC provides for centralized administration of logon
accounts, clustering of TPS nodes into a TPS domain, and centralized access to shared
resources. In order for the TPS nodes to provide security when connected to a network,
the PDC also provides the security control for access to shared resources in the NT
domain. An NT domain may also be physically separated into an NT resource domain
and an NT account domain. Security within a TPS system accommodates this
approach.
TPS Domain
A TPS Domain consists of all physical TPS nodes defined to be a part of the same
namespace. Security on HCI managed components within that namespace is based on
NT’s security mechanisms.
User ID Verification
In TPS system, a user’s identification must be verified to ensure that the user is really
who he/she claims to be. In most cases, this is accomplished through the standard NT
log-on mechanism by entering a user identifier and verifying it by supplying a
password. Although not required, it is recommended that every user have a unique user
ID. This enables every action on the system to be associated with an individual, i.e., it
provides individual accountability. Also, there is less chance of compromise with
individual user ID/password combinations than with group user IDs and passwords.
Group user IDs and passwords tend to be more readily passed around by word of mouth
or by labeling the console, resulting in no security.
11/98
TPS System Overview
47
R100
Honeywell Inc.