Distributed Device Networks with Security Constraints

In today's globalized business world, outsourcing, joint ventures, mobile and cross-border collaborations have led to work environments distributed across multiple organizational and geographical boundaries. The new requirements of portability, configurability and interoperability of distributed device networks put forward new challenges and security risks to the system's design and implementation. There are critical demands on highly secured collaborative control environments and security enhancing mechanisms for distributed device control, configuration, monitoring, and interoperation. This paper addresses the collaborative control issues of distributed device networks under open and dynamic environments. The security challenges of authenticity, integrity, confidentiality, and execution safety are considered as primary design constraints. By adopting policy-based network security technologies and XML processing technologies, two new modules of Secure Device Control Gateway and Security Agent are introduced into regular distributed device control networks to provide security and safety enhancing mechanisms. The core architectures, applied mechanisms, and implementation considerations are presented in detail in this paper.Dans le secteur des affaires d'aujourd'hui, mondialis\ue9, l'approvisionnement ext\ue9rieur, les projets conjoints et les collaborations mobiles et transfrontali\ue8res engendrent des milieux de travail distribu\ue9s, c'est \ue0 dire r\ue9partis dans de nombreuses organisations ou r\ue9gions. Les exigences de ces nouveaux r\ue9seaux \ue0 dispositifs distribu\ue9s ? portabilit\ue9, configurabilit\ue9 et interop\ue9rabilit\ue9 ? s'accompagnent de d\ue9fis et de dangers au titre de la conception et de la mise en oeuvre. Les environnements de collaboration contr\uf4l\ue9s et tr\ue8s s\ue9curis\ue9s et les m\ue9canismes de rehaussement de la s\ue9curit\ue9 (contr\uf4le, configuration, surveillance et interop\ue9ration des dispositifs distribu\ue9s) doivent respecter des exigences cruciales. La pr\ue9sente communication explore les questions de contr\uf4le et de collaboration soulev\ue9es par les r\ue9seaux \ue0 dispositifs distribu\ue9s qui pr\ue9sentent un environnement ouvert et dynamique. On estime que l'authenticit\ue9, l'int\ue9grit\ue9, la confidentialit\ue9 et la s\ue9curit\ue9 d'ex\ue9cution constituent les principales contraintes de conception. Gr\ue2ce \ue0 l'adoption de technologies de s\ue9curit\ue9 de r\ue9seau bas\ue9es sur des politiques et les technologies de traitement XML, deux nouveaux modules (passerelle de contr\uf4le s\ue9curitaire des dispositifs et agent de s\ue9curit\ue9) sont incorpor\ue9s \ue0 des r\ue9seaux ordinaires de contr\uf4le de dispositifs distribu\ue9s comme m\ue9canismes de rehaussement de la s\ue9curit\ue9 et de la s\ufbret\ue9. La communication pr\ue9sente en d\ue9tail les principaux \ue9l\ue9ments : architectures, m\ue9canismes appliqu\ue9s et consid\ue9rations touchant la mise en oeuvre.NRC publication: Ye