Framework security features
The framework ensures security in several ways to protect its systems from inadvertent or malicious tampering:
- All modules are code-signed.
- The underlying station file structure is designed to support secure operations. Core software functions are stored separately
from user data. Application access to data is strictly controlled.
- Access to each platform, station, and other system features require user name and password credentials.
- After a period of inactivity, stations log out automatically.
- In addition to access credentials, other features require user credentials.
- Roles assign permissions to the user based on the user category. User access to system components is limited as per the assigned
role.
- Client/server authentication is provided by the industry-standard TLS (Transport Layer Security) protocol.
- Use of the TLS protocol provides data encryption during transmission.
- Data traveling from one location to another is encrypted.
- As an additional security precaution, using a web browser to view QNX platform diagnostics (known as Daemon Debug) has been
disabled.