Download UNICORN Version 4.0 Administration and Technical Manual

Security features
1
Security features
This chapter considers security features in UNICORN, under the
topics
• access security
• system connection security
• data security
• security recommendations for control stations
1.1 Access security
Operation of UNICORN is restricted to authorised users, defined in
the system by the system administrator (see “User administration” on
page 53). User access may be protected by a password. The minimum
password length for users is defined when UNICORN is installed (see
“Software installation” on page 25). In installations where access
security is important, passwords should be enforced and should be
changed regularly (see “Changing user passwords” on page 63).
Each user is assigned an access level that defines the operations that the
user can perform and the folders the user is allowed to access (see
“User administration” on page 53). For system security, administrative
routines such as user and system definition should be permitted only
to the system administrator.
Installation of UNICORN establishes a default user with full access
rights in the system. It is important for system security that this user is
deleted when the site-specific users have been created.
1.2 Connection security
To prevent conflicts in System Control requests, each system in an
installation may have only one control mode connection at any one
time.
A running system may be left in a view mode connection and locked
with a password (independent of the user's logon password) to prevent
users without access from establishing a control mode connection and
interfering with the control of the separation process. Otherwise, if the
system is left unlocked in a view mode connection, any user may
establish a control mode connection to the system.
• p1
1