Control Encryption

URI: Encryption

Package: DataLifecycle

< prev | next >

Description: Data is encrypted. This may apply to a stored or flowing copy of specific data.

A base class for all assets representing Data. Used partly to provide a classifier for the palette.

CSG-DataFlowEncryption	The data *Data* flowing between processes *FlowsFrom* and *FlowsTo* is encrypted by the two processes (i.e. not relying on transport level encryption).
CSG-DataFlowEncryptionFromProcess	The data *Data* sent by *Process* to *FlowsTo* is encrypted end-to-end (i.e. not relying on transport level encryption).
CSG-DataFlowEncryptionToProcess	The data *Data* sent by *FlowsFrom* to *Process* is encrypted end-to-end (i.e. not relying on transport level encryption).
CSG-DataFlowIntegrityProtection	Makes it possible to check that a copy of *Data* flowing from *FlowsFrom* to *FlowsTo* has not been accidentially or deliberately altered by an intermediary or in transit.
CSG-DataFlowSharedKeyInbound	The data *Data* flowing between processes *FlowsFrom* and *FlowsTo* is encrypted end-to-end (i.e. not relying on transport level encryption), and *FlowsTo* has the key needed to decrypt the data on arrival.
CSG-DataFlowSharedKeyOutbound	The data *Data* flowing between processesFlowsTo and *FlowsTo* is encrypted end-to-end (i.e. not relying on transport level encryption), and *FlowsFrom* has the key needed to encrypt the data for transmission.
CSG-DataStorageEncryption	The copy of *Data* stored on *Host* is encrypted.
CSG-DataStorageIntegrityProtection	Makes it possible to check if the stored copy of *Data* on *Host* has been altered by an unauthorised process.
CSG-DistinctProcessAccessKeys	Processes *Service* and *Client* share data *Data* in encrypted form, but use keys to encrypt or decrypt between transfer and processing, implying a need for the keys used with *Data* to also be shared.