Download General Specifications

Transcript
21
<<Contents>> <<Index>>
Data Security
There are a number of security aspects associated with this feature Firstly the data exposed through the RDBMS
connector is only data that has been explicitly mapped at engineering time, including the items that can be written
back by the application. Data that has not been mapped is simply not available to the application. Secondly since
the tables are exposed through an ODBC interface that is not running on the FAST/TOOLS server, the database
administrator is responsible for controlling user access to the linked tables (GRANT, DENY), without comprising FAST/
TOOLS data.
Set-up options
There are several setup options to fit any specific customer and performance requirements. In the picture below each
functional module operates independently and could be deployed on any combination between one and three physical
(or virtual) machines.
F31E.ai
For example, all three modules may run on one machine, or each may have its own dedicated machine (server or
PC). Another possibility is to run the RDBMS engine (Exposure Module) on the same physical system as the existing
customer RDBMS system, which may be a good solution if the additional load of this functionality does not impact
the existing RDBMS server in a way that would compromise its existing purposes. Importantly, the communication
between each of these three modules should be transparent once configuration of the connections between them is
completed.
A connection between the FAST/TOOLS server (left-hand module) and its RDBMS engine (middle module) is
established via FAST/TOOLS internal secure domain and media independent communications infrastructure BUS/
FAST in a manner similar to make connections between FAST/TOOLS servers in a distributed architecture.
The right-hand module represents the existing customer RDBMS system that the customer may wish to use in order
to access the FAST/TOOLS data stored within the embedded RDBMS engine.
In case the FAST/TOOLS server and its RDBMS engine are not running on the same physical server and network
connection is lost all data will be redirected to a preservation location on the local disk so that it may be send properly
once the connection has been restored.
All Rights Reserved. Copyright © 2008, Yokogawa Electric Corporation
GS 50A01A10-01EN May 29, 2015-00