DOI: 10.17587/prin.10.99-104

Access Control in Automated Systems Based on 'Baguette' Real-Time Operating Systems

A. I. Gryuntal, grntl@niisi.ras.ru, S. G. Dyshlenko, dishlenko@niisi.ras.ru, Federal state institution Federal scientific center research Institute of system studies of the Russian Academy of Sciences, Moscow, 117218, Russian Federation

Corresponding author: Gryuntal Andrej I., Head of Department, Federal state institution "Federal scientific center research Institute of system studies of the Russian Academy of Sciences", Moscow, 117218, Russian Federation, E-mail: grntl@niisi.ras.ru

The article provides a conceptual basis for automated systems development which exploits the "Baguette" realtime operating systems and provides unauthorized access protection. The "Baguette" operating systems do not include access control means. That is why access control and unauthorized access protection mechanisms are to be implemented using application software. By means of the "Baguette" operating systems configuration facilities interactive programs contained in the OS could be excluded. The "Baguette" operating systems utilize cross-technology application development scheme. This implies that no unauthorized code could be injected or executed in application hardware environment. It follows that the only way to get access to some application resource is to make use of algorithms included in the application algorithms which determine interactive communication with the operator. This means that predetermined access principle is fulfilled — all access attempts are under application software control and any access act could not be carried out in case it is not authorized by the application. Hence access control means could be localized in the application software. This scheme could be used for a system consisting of a single computer with "Baguette" operating system installed, or in case if automated system includes a few computers, which are connected by LAN isolated from other computers. The hardware composition of these automated systems is to be permanent.

Keywords: automated system, unauthorized access, principle of certainty of access, computing domain, interactive domain, real-time operating system

pp. 99–104

For citation:
Gryuntal A. I., Dyshlenko S. G. Access Control in Automated Systems Based on "Baguette" Real-Time Operating Systems, Programmnaya Ingeneria, 2019, vol. 10, no. 3, pp. 99—104.