Security / Access Control

Goals

  • Centralized access control and user management
  • Enterprise Grade encryption of critical data

Directives

  • avoid any dependency to external entities.
  • have full control over the implemented security systems

Requirements

  • open-source implementations

Candidates

Methods

  • SSH2 with RSA keys

Systems

Implementation

the implementation can happen in phases

  • use standard mechanisms, which depend on a password
  • remove step by step the passwords by keys
  • remove one by one the standard security mechanisms of used products
    • can happen in a collaborative way