The service shall ensure point-to-point confidentiality in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile through the use of Transport Layer Security (TLS) 1.2 or above.
SECURITY_CONSTRAINT
The service shall ensure that satisfactory authorisation is put in place according to EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile requirement SWIM-TIYP-0070. The specific details of the authorization verification are left as an implementation choice for the service provider, they could include aspects like: Number of active contract requests by the consumer, Number of pending contract requests by the consumer, Consumer permissions.
The service shall ensure consumer authentication in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile requirement SWIM-TIYP-0042 (use of a X.509 certificate). The service shall ensure provider authentication in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile requirement SWIM-TIYP-0042 (use of a X.509 certificate).
The requested information may contain a signature using SHA256.
SSL Encryption is in effect for AMQPS and HTTPS services.
The usage is limited to authorised users with HTTPS Basic Authentication and JWT Token authorisation.
The requested information may contain a signature using SHA256.
The communication is encrypted by SSL.
The usage is limited to authorized users with HTTP Basic Authentication.
The service shall ensure point-to-point integrity in accordance with EUROCONTROL Specification for SWIM Technical Infrastructure (TI) Yellow Profile through the use of Transport Layer Security (TLS) 1.2 or above.