TWIN-009d — Prevent Unauthorized Resource State Changes

Go to TWIN-009 — Control Twin Interaction

The DIDO-TE SHALL prevent each unauthorized interaction from changing the state of a Resource.

• [DTE1] U.S. Patent Application US20220237111A1, modification of virtual and physical Twin Nodes, comparison of results, and validation
• [DTE2] Non-Traditional BAA Submission, Digital Twin concepts, scenario testing, integration, monitoring, and Twin Nodes Selection
• [DTE9] Distributed Immutable Data Object Reference Architecture (DIDO-RA), Digital Twin and governance concepts

TWIN-009c requires authorization for permitted interactions that change the state of a Resource.

This requirement enforces that authorization prerequisite by preventing an unauthorized interaction from changing Resource state.

Separating the authorization requirement from enforcement allows the two obligations to be verified independently. A system may correctly determine that authorization is required while failing to prevent an unauthorized state change.

Technical connectivity, interface availability, DDS discovery, Topic matching, or other implementation mechanisms do not provide authorization to change Resource state.

• DIDO-TE
• Twin Relationship
• Resource
• Configuration
• Test Execution

Verification confirms that:

1. An interaction lacking required authorization does not change Resource state.
2. An interaction for which authorization is denied does not change Resource state.
3. Authorization for one interaction does not authorize a different interaction.
4. Authorization associated with one Resource does not authorize a state change to another Resource.
5. Prevention of the unauthorized state change is traceable to the attempted interaction and authorization decision.

Verification includes an unauthorized interaction that attempts to change Resource state and confirms that the Resource state remains unchanged.

This requirement enforces the authorization prerequisite established by TWIN-009c by preventing unauthorized changes to Resource state.

TBD

Draft

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:03-functional-requirements:03-03-twin-node-requirements:twin-009-control-twin-interaction:twin-009d-prevent-unauthorized-resource-state-changes#Statement&noheader&nofooter&noeditbtn}}