1. Home
  2. TC10.7 - Table with coverage of HTTPS, LDAP, SSO/tokenbased or Keys Based

TC10.7 - Table with coverage of HTTPS, LDAP, SSO/tokenbased or Keys Based

×

Warning message

  • You can't delete this newsletter because it has not been sent to all its subscribers.
  • You can't delete this newsletter because it has not been sent to all its subscribers.
  • You can't delete this newsletter because it has not been sent to all its subscribers.

Test Case Title

TC10.7 - Table with coverage of HTTPS, LDAP, SSO/tokenbased or Keys Based

Goal

Using different level of security.

The Snap4City Tool can integrate with existing tools for authentication

Advanced Smart City API and tools can be accessed

You can connect with multiple tools

Snap4City solution support privacy by design

Prerequisites

Using a PC or Mobile with a web browser.

Expected successful result

Verification of the adoption of HTTPS, LDAP and OAuth.

Steps

  

 

Issue 1: The prototype implements different levels of security and ensures that authentication, authorisation, and accounting is implemented through the platform

 

The most relevant tools and API are covered by LDAP and HTTPS as reported in the following table.

Area and major tool/modules

Roles (LDAP or keys)

SSO KeyCloak or Keys

WEB HTTPS

API HTTPS

Snap4City Portal

YES

YES

YES

--

Dashboard Builder

YES

YES

YES

YES

Dashboards

YES

YES

YES

YES

Notificator

YES

YES

YES

YES

IOT Directory

YES

YES

YES

YES

IOT Application

YES

YES

YES

YES

IOT brokers toward IOT APP with proxy

YES

YES

YES

YES

IOT devices toward IOT Broker

 YES YES

YES

YES

DataGate

YES

YES

YES

YES

Resource Manager, processLoader

YES

YES

YES

YES

AMMA

YES

YES

YES

--

ResDash

YES

YES

YES

--

DevDash

YES

YES

YES

--

DISCES

YES

YES

YES

YES

Auditing

YES

YES

YES

YES

Data Mapping

YES

YES

YES

YES

Monitoring Containers

None

Separate for security

YES

YES

Monitoring Cluster of Container

None

Separate for security

YES

YES

Micro Applications

None

None

YES

YES

External Services

Third party

None

YES

--

ServiceMap

None

None

YES

YES

Servicemap3D

None

None

YES

YES

disit.org">Log.disit.org

None

None

YES

--

FLINT, SPARQL

None

None

YES

--

R Studio Data Analytics

None

Separate for security

YES

YES

Development Environment, ETL via VNC

None

Separate for security

YES

YES

 

Issue 2: The Snap4City Tool can integrate with existing tools for authentication

The LDAP server has been set up. Presently the tools supporting LDAP are:

 

Issue 3: Advanced Smart City API and tools can be accessed via OAuth

See the mobile app “Firenze dove cosa”, “ Toscana dove cosa”, "Helsinki in a Snap", Antwerp in a Snap", "Toscana in a Snap".

Also see the Snap4city Portal Https://www.snap4city.org  . On the portal, it is possible to perform a registration by means of Oauth with G+, Facebook and Twitter, starting in HTTP (for the moment). Once the registration is performed from the city users side, it has to be approved by the administrator.

 

Issue 4: Snap4City solution supports privacy by design

Snap4City solution and the organization proposed is conformant to privacy and ethics issues by design and to GDPR.

The platform is implementing privacy rules as stated by the European Union; The platform requires signed consent by the relevant parties covering its intended use, in other cases the informed consent would be enough; Personal data are protected (by encryption, and multiple hashing) into the store on cloud; The solution prefers to use non personal data or anonymized data; when personal information needs to be shown to others, the users is informed and authorisation obtained; When personal information is stored the users is capable to audit the access to its own data;

 

  • Share