Content Comparison

...

Communication security between SOL003/SOL005 Adapters and SVNFM/NFVO

Feature Descriptions

Feature

Description

Feature

Description

Secured communication and authentication and authorization support

Secured communication and authentication and authorization support between SOL003/SOL005 Adapter and External NFVO

HTTPS protocol
Authentication and Authorization support via AAF

Epic and User Story

Epic	User Story	Description	Guilin Plan?	JIRA
Secured communication		Support Secure communication for ONAP Internal components and ONAP External components	Yes
	SO needs to a common security communication solution for ONAP internal components	SO needs to a common security communication solution	Yes
	Secured communication between SOL003 Adapter and SVNFM	Secured communication between SOL003 Adapter and SVNFM	Yes	Covered by SOL003 Adapter JIRA
	Secured communication between SOL005 Adapter and external NFVO	Secured communication between SOL005 Adapter and external NFVO	Yes	Covered by SOL005 Adapter JIRA
	Authentication and authorization support between between SOL003 Adapter and SVFNM	Authentication and authorization support between between SOL003 Adapter and SVFNM support of vendor SVNFM authentication and authorization support of SOL003 Adapter authentication and authorization	Yes	Covered by SOL003 Adapter JIRA
	Authentication and authorization support between between SOL005 Adapter and external NFVO	Authentication and authorization support between between SOL005 Adapter and external NFVO support of external NFVO authentication and authorization support of SOL005 Adapter authentication and authorization	Yes	Covered by SOL005 Adapter JIRA
	Authentication and authorization support between between SOL002 Adapter and SVFNM	Authentication and authorization support between between SOL002 Adapter and SVFNM support of vendor SVNFM authentication and authorization - OAuth2 Token-based only support of SOL002 Adapter authentication and authorization - OAuth2 Token-based only	Yes	Covered by SOL002 Adapter JIRA

Communication Security Architecture for SOL005 and SOL003 APIs

ONAP ETSI-Alignment API security conforms to ETSI NFV SEC022 Security specification (SEC022 GS).
Requirement: External NFVO and SVNFM need to validate incoming ETSI package
The SOL003/SOL005 Adapters communicate with the SVNFM and the external NFVO via secured HTTPS protocol with a proper authentication and authorization.
- Support of HTTPs protocol is a must
- SOL003/SOL005 Adapters provide security mechanism for authentication and authorization.
- SVNFM/NFVO provide security mechanism for authentication and authorization.
- authentication federation between the Adapters and the SVNFM/NFVO is under discussion.
<describe authentication choices and use of AAF here>

High-Level View

The following diagram depicts a high-level view of ONAP ETSI-Alignment API security.

Gliffy

macroId	698cf91d-a283-44ee-a8c6-967f41343468
name	ETSI Secure Communication High-level for Guilin
pagePin	2

Detailed View