Download General Specifications
Transcript
21 <<Contents>> <<Index>> Data Security There are a number of security aspects associated with this feature Firstly the data exposed through the RDBMS connector is only data that has been explicitly mapped at engineering time, including the items that can be written back by the application. Data that has not been mapped is simply not available to the application. Secondly since the tables are exposed through an ODBC interface that is not running on the FAST/TOOLS server, the database administrator is responsible for controlling user access to the linked tables (GRANT, DENY), without comprising FAST/ TOOLS data. Set-up options There are several setup options to fit any specific customer and performance requirements. In the picture below each functional module operates independently and could be deployed on any combination between one and three physical (or virtual) machines. F31E.ai For example, all three modules may run on one machine, or each may have its own dedicated machine (server or PC). Another possibility is to run the RDBMS engine (Exposure Module) on the same physical system as the existing customer RDBMS system, which may be a good solution if the additional load of this functionality does not impact the existing RDBMS server in a way that would compromise its existing purposes. Importantly, the communication between each of these three modules should be transparent once configuration of the connections between them is completed. A connection between the FAST/TOOLS server (left-hand module) and its RDBMS engine (middle module) is established via FAST/TOOLS internal secure domain and media independent communications infrastructure BUS/ FAST in a manner similar to make connections between FAST/TOOLS servers in a distributed architecture. The right-hand module represents the existing customer RDBMS system that the customer may wish to use in order to access the FAST/TOOLS data stored within the embedded RDBMS engine. In case the FAST/TOOLS server and its RDBMS engine are not running on the same physical server and network connection is lost all data will be redirected to a preservation location on the local disk so that it may be send properly once the connection has been restored. All Rights Reserved. Copyright © 2008, Yokogawa Electric Corporation GS 50A01A10-01EN May 29, 2015-00