TWIN-009c — Require Authorization for Resource State Changes

Go to TWIN-009 — Control Twin Interaction

The DIDO-TE SHALL require authorization for each permitted interaction that changes the state of a Resource.

• [DTE1] U.S. Patent Application US20220237111A1, modification of virtual and physical Twin Nodes, comparison of results, and validation
• [DTE2] Non-Traditional BAA Submission, Digital Twin concepts, scenario testing, integration, monitoring, and Twin Nodes Selection
• [DTE9] Distributed Immutable Data Object Reference Architecture (DIDO-RA), Digital Twin and governance concepts

A permitted interaction may change the state of a Resource participating in or affected by a Twin Relationship.

Permission to perform an interaction does not establish authority to change Resource state.

Requiring authorization establishes a separate control decision for a Resource state change. Technical capability, connectivity, interface availability, DDS discovery, Topic matching, or other implementation mechanisms do not establish authority to modify a Resource.

This requirement establishes the authorization prerequisite. TWIN-009d separately prevents an unauthorized interaction from changing Resource state.

• DIDO-TE
• Twin Relationship
• Resource
• Configuration
• Test Execution

Verification confirms that:

1. Each permitted interaction that changes Resource state requires authorization.
2. Interaction permission does not substitute for authorization.
3. Interaction direction does not substitute for authorization.
4. Technical connectivity or interface access does not establish authorization.
5. The authorization requirement is associated with the Resource whose state may change.
6. The authorization requirement is traceable to the governing Configuration.

Verification includes at least one permitted interaction that changes Resource state and confirms that authorization is required independently of interaction permission.

This requirement establishes the authorization prerequisite for a permitted interaction that changes Resource state.

TWIN-009d enforces that prerequisite by preventing an unauthorized interaction from changing Resource state.

TBD

Draft

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:03-functional-requirements:03-03-twin-node-requirements:twin-009-control-twin-interaction:twin-009c-require-authorization-for-resource-state-changes#Statement&noheader&nofooter&noeditbtn}}