[Fiware-middleware] Middleware Security Specification WorkItem

[Dmitri Rubinstein]

For defining security specification we need to clarify meaning of 
following features:

I) FIWARE.Feature.I2ND.Kiara.RPCJavaSecurity.Authentication

What is the main purpose of authentication in case of a client and a 
server based on KIARA? Is it

1) either unidirectional authentication (server to client, or client to 
server) or
     mutual authentication (client and server authenticate each other)

2) other kinds of authentication (Is it possible to give an example?)


In case 1), authentication protocols like SSL produce a 
unidirectional/bidirectional secure channel.
Is it intended to use this channel afterwards for communication?

II) FIWARE.Feature.I2ND.Kiara.RPCJavaSecurity.Encryption

Whether AES (as default plugin for encryption/decryption) is intended 
for field encryption ?

We need an answer as soon as possible, preferably until tomorrow meeting.

Best,

Dmitri