Identitiy and Access Management

[anmittag]

How is our idea to enable IAM with the current Communication Concept ?

[LittleHuba]

There is an IAM concept baked into the binding for IPC.
The concept is based on user IDs. Users must configure their system to have a unique user id per communication partner.
Then they can define a set of allowed consumers (producer side) and a list of allowed producers (consumer side).
The IAM is enforced using operating system features based on file permissions.

[JochenSatETAS]

In the COM-session on 3.11.2025 we identified one issue:
If an evil process E offers the service-instance 1 before the legitimate provider A, then A cannot offer the service instance 1 any more. Hence E can impact the availability. A third process B is able to detect that 1 is not offered by A and therefore rejects this service instance and so the authenticity should not be impacted.