info-002 | AMWA INFO-002: NMOS Security Implementation Guide

<!DOCTYPE html> <meta name="viewport" content="width=device-width, initial-scale=1"> <html lang="en-US"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1">  <title>info-002 | AMWA INFO-002: NMOS Security Implementation Guide</title> <meta name="generator" content="Jekyll v3.9.3" /> <meta property="og:title" content="info-002" /> <meta property="og:locale" content="en_US" /> <meta name="description" content="AMWA INFO-002: NMOS Security Implementation Guide" /> <meta property="og:description" content="AMWA INFO-002: NMOS Security Implementation Guide" /> <meta property="og:site_name" content="info-002" /> <meta property="og:type" content="website" /> <meta name="twitter:card" content="summary" /> <meta property="twitter:title" content="info-002" /> <script type="application/ld+json"> {"@context":"https://schema.org","@type":"WebSite","description":"AMWA INFO-002: NMOS Security Implementation Guide","headline":"info-002","name":"info-002","url":"/info-002/"}</script>  <link rel="stylesheet" href="/info-002/assets/css/style.css?v="> </head> <body> <div class="container-lg px-3 my-5 markdown-body adaptive-width"> <div id="logo-banner" class="adaptive-width"> <a href="https://specs.amwa.tv/nmos"><img id="nmos-logo" src="/info-002/assets/images/NMOS-logo.png" alt="NMOS logo"/></a> <span id="title">Networked Media Open Specifications</span> <a href="https://www.amwa.tv/"><img id="from-amwa-logo" src="/info-002/assets/images/from-AMWA-logo.png" target="_blank" alt="from AMWA logo"/></a> </div> <div id="menu-header" class="header adaptive-width"> <a href="/info-002/">HOME</a> <span class="dropdown">DOCS <div class="dropdown-content"> <p><b>Docs for main</b></p> <p><a href="/info-002/branches/main/docs/Overview.html">Overview</a></p> <p><a href="/info-002/branches/main/docs/Prerequisites.html">Prerequisites</a></p> <p><a href="/info-002/branches/main/docs/JSON_Web_Tokens_(JWT).html">JSON Web Tokens (JWT)</a></p> <p><a href="/info-002/branches/main/docs/Authorization_Server_Setup.html">Authorization Server Setup</a></p> <p><a href="/info-002/branches/main/docs/Implementing_Authenticated_API_Calls.html">Implementing Authenticated API Calls</a></p> <p><a href="/info-002/branches/main/docs/Node_to_Authorization_Server_Interactions.html">Node to Authorization Server Interactions</a></p> <p><a href="/info-002/branches/main/docs/Node_to_Registry_Interactions_(IS-04).html">Node to Registry Interactions (IS-04)</a></p> <p><a href="/info-002/branches/main/docs/Controller_to_Authorization_Server_Interactions.html">Controller to Authorization Server Interactions</a></p> <p><a href="/info-002/branches/main/docs/Controller_to_Registry_(IS-04)_and_Node_Interactions_(IS-05,_IS-08).html">Controller to Registry (IS-04) and Node Interactions (IS-05, IS-08)</a></p> <p><a href="/info-002/branches/main/docs/Event_and_Tally_Interactions_(IS-07).html">Event and Tally Interactions (IS-07)</a></p> <p><a href="/info-002/branches/main/docs/Validating_Access_Tokens.html">Validating Access Tokens</a></p> <p><a href="/info-002/branches/main/docs/Development_Resources.html">Development Resources</a></p> </div> </span> <span class="dropdown">VERSIONS <div class="dropdown-content"> <p><b>Branches</b></p> <p><a href="/info-002/branches/main">main</a></p> <p><em>No releases yet</em></p> </div> </span> <span class="dropdown">IS <div class="dropdown-content"> <p><b>Interface Specifications</b></p> <p><a href="https://specs.amwa.tv/is-04">IS-04: Discovery & Registration</a></p> <p><a href="https://specs.amwa.tv/is-05">IS-05: Device Connection Management</a></p> <p><a href="https://specs.amwa.tv/is-07">IS-07: Event & Tally</a></p> <p><a href="https://specs.amwa.tv/is-08">IS-08: Audio Channel Mapping</a></p> <p><a href="https://specs.amwa.tv/is-09">IS-09: System Parameters</a></p> <p><a href="https://specs.amwa.tv/is-10">IS-10: Authorization</a></p> <p><a href="https://specs.amwa.tv/is-11">IS-11: Stream Compatibility Management</a></p> <p><a href="https://specs.amwa.tv/is-12">IS-12: Control Protocol</a></p> <p><a href="https://specs.amwa.tv/is-13">IS-13: Annotation</a></p> <p><a href="https://specs.amwa.tv/is-14">IS-14: Device Configuration</a></p> </div> </span> <span class="dropdown">BCP <div class="dropdown-content"> <p><b>Best Common Practices</b></p> <p><a href="https://specs.amwa.tv/bcp-002-01">BCP-002-01: Natural Grouping</a></p> <p><a href="https://specs.amwa.tv/bcp-002-02">BCP-002-02: Asset Distinguishing Information</a></p> <p><a href="https://specs.amwa.tv/bcp-003-01">BCP-003-01: Secure Communications in NMOS Systems</a></p> <p><a href="https://specs.amwa.tv/bcp-003-02">BCP-003-02: Authorization in NMOS Systems</a></p> <p><a href="https://specs.amwa.tv/bcp-003-03">BCP-003-03: Certificate Provisioning in NMOS Systems</a></p> <p><a href="https://specs.amwa.tv/bcp-004-01">BCP-004-01: Receiver Capabilities</a></p> <p><a href="https://specs.amwa.tv/bcp-005-01">BCP-005-01: EDID to Receiver Capabilities Mapping</a></p> <p><a href="https://specs.amwa.tv/bcp-006-01">BCP-006-01: NMOS With JPEG XS</a></p> <p><a href="https://specs.amwa.tv/bcp-006-02">BCP-006-02: NMOS With H.264</a></p> <p><a href="https://specs.amwa.tv/bcp-006-03">BCP-006-03: NMOS With H.265</a></p> <p><a href="https://specs.amwa.tv/bcp-007-01">BCP-007-01: NMOS With NDI</a></p> <p><a href="https://specs.amwa.tv/bcp-008-01">BCP-008-01: NMOS Receiver Status</a></p> </div> </span> <span class="dropdown">MS <div class="dropdown-content"> <p><b>Data Model Specifications</b></p> <p><a href="https://specs.amwa.tv/ms-04">MS-04: ID & Timing Model</a></p> <p><a href="https://specs.amwa.tv/ms-05-01">MS-05-01: NMOS Control Architecture</a></p> <p><a href="https://specs.amwa.tv/ms-05-02">MS-05-02: AMWA NMOS Control Framework</a></p> <p><a href="https://specs.amwa.tv/ms-05-03">MS-05-03: AMWA NMOS Control Block Specs</a></p> </div> </span> <span class="dropdown">INFO <div class="dropdown-content"> <p><b>Informative Documents</b></p> <p><a href="https://specs.amwa.tv/info-002">INFO-002: Security Implementation Guide</a></p> <p><a href="https://specs.amwa.tv/info-003">INFO-003: Sink Metadata Processing Architecture</a></p> <p><a href="https://specs.amwa.tv/info-004">INFO-004: Implementation Guide for DNS-SD</a></p> <p><a href="https://specs.amwa.tv/info-005">INFO-005: Implementation Guide for NMOS Controllers</a></p> <p><a href="https://specs.amwa.tv/info-006">INFO-006: Implementation guide for NMOS Device Capabilities Control</a></p> </div> </span> <span class="dropdown">REG <div class="dropdown-content"> <p><b>Parameter Registers</b></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/common">General Procedures and Criteria</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/capabilities">Capabilities</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/device-control-types">Device Control Types</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/device-types">Device Types</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/flow-attributes">Flow Attributes</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/formats">Formats</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/node-service-types">Node Service Types</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/sender-attributes">Sender Attributes</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/source-attributes">Source Attributes</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/tags">Tags</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/transports">Transports</a></p> <p><a href="https://specs.amwa.tv/nmos-parameter-registers/branches/main/transport-parameters">Transport Parameters</a></p> </div> </span> <span class="dropdown">F-SETS <div class="dropdown-content"> <p><b>Control Feature Sets</b></p> <p><a href="https://specs.amwa.tv/nmos-control-feature-sets/branches/main/identification">Identification</a></p> <p><a href="https://specs.amwa.tv/nmos-control-feature-sets/branches/main/monitoring">Monitoring</a></p> </div> </span> <span class="dropdown">DEVEL <div class="dropdown-content"> <p><b>Developer Links</b></p> <p><a href="https://github.com/AMWA-TV/info-002">GitHub Repo</a></p> <p><a href="https://specs.amwa.tv/nmos-testing">API Testing Tool</a></p> <p><a href="https://specs.amwa.tv/nmos-dashboard/dashboard.html">CI Dashboard</a></p> </div> </span> <span class="dropdown">SEARCH <div class="dropdown-content"> <script async src="https://cse.google.com/cse.js?cx=70787015d40930818"></script> <div class="gcse-searchbox-only"></div> </div> </span> </div> <div class="content"> <br/>  <h1 id="amwa-info-002-nmos-security-implementation-guide">AMWA INFO-002: NMOS Security Implementation Guide</h1> <h2 id="about-info-002">About INFO-002</h2> <h3 id="what-does-it-do">What does it do?</h3> <ul> <li>It鈥檚 a guide for implementers who want to add security to their NMOS Nodes and/or NMOS Controllers, according to the <a href="https://specs.amwa.tv/is-10/">IS-10</a>, <a href="https://specs.amwa.tv/bcp-003-01/">BCP-003-01</a>, <a href="https://specs.amwa.tv/bcp-003-02/">BCP-003-02</a> and <a href="https://specs.amwa.tv/bcp-003-03/">BCP-003-03</a> specifications.</li> <li>Please note that this guide is informative and therefore is not a substitute for reading the normative specifications.</li> </ul> <h3 id="why-does-it-matter">Why does it matter?</h3> <ul> <li>This guide makes the job of adding security to your NMOS implementations easier.</li> </ul> <h3 id="how-does-it-work">How does it work?</h3> <ul> <li>It details what you need to know, and the steps you need to take when implementing security.</li> <li>It also mentions some tools to help in your implementation.</li> </ul> <hr /> <p>INFO-002 has been developed by the <a href="https://www.amwa.tv">Advanced Media Workflow Association</a> as part of the <a href="https://www.amwa.tv/nmos-overview">Networked Media Open Specifications</a> initiative. See <a href="https://specs.amwa.tv/nmos">here</a> for an overview of NMOS specifications.</p> <p>The <a href="https://specs.amwa.tv/nmos-testing">NMOS Testing Tool</a> creates a simple web service for testing implementations of all NMOS APIs.</p> <p>The links to documentation, API and examples below, and for SPEC links in the page menu bar are for this release or branch: <strong>branches/main</strong>. Links to <a href="releases/">other published releases</a> and <a href="branches/">other live branches</a> appear later in the page, or in the VERSIONS menu.</p> <h2 id="documentation">Documentation</h2> <ul> <li><a href="branches/main/docs/Overview.html">Overview</a></li> <li><a href="branches/main/docs/Prerequisites.html">Prerequisites</a> <ul> <li><a href="branches/main/docs/JSON_Web_Tokens_(JWT).html">JSON Web Tokens (JWT)</a></li> </ul> </li> <li><a href="branches/main/docs/Authorization_Server_Setup.html">Authorization Server Setup</a></li> <li><a href="branches/main/docs/Implementing_Authenticated_API_Calls.html">Implementing Authenticated API Calls</a> <ul> <li><a href="branches/main/docs/Node_to_Authorization_Server_Interactions.html">Node to Authorization Server Interactions</a></li> <li><a href="branches/main/docs/Node_to_Registry_Interactions_(IS-04).html">Node to Registry Interactions (IS-04)</a></li> <li><a href="branches/main/docs/Controller_to_Authorization_Server_Interactions.html">Controller to Authorization Server Interactions</a></li> <li><a href="branches/main/docs/Controller_to_Registry_(IS-04)_and_Node_Interactions_(IS-05,_IS-08).html">Controller to Registry (IS-04) and Node Interactions (IS-05, IS-08)</a></li> <li><a href="branches/main/docs/Event_and_Tally_Interactions_(IS-07).html">Event and Tally Interactions (IS-07)</a></li> <li><a href="branches/main/docs/Validating_Access_Tokens.html">Validating Access Tokens</a></li> </ul> </li> <li><a href="branches/main/docs/Development_Resources.html">Development Resources</a></li> </ul> <h2 id="published-releases">Published Releases</h2> <h2 id="live-branches">Live Branches</h2> <p><a href="branches/main/">main</a></p> <hr /> <p>These pages are rendered from the source of the specification, which is in <a href="https://github.com/AMWA-TV/info-002">this GitHub repository</a>.</p> <table> <thead> <tr> <th>Repository</th> <th>Default Branch</th> <th>Lint (default)</th> <th>Render (all)</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/AMWA-TV/info-002">info-002</a></td> <td>main</td> <td><a href="https://github.com/AMWA-TV/info-002/actions?query=workflow%3ALint"><img src="https://github.com/AMWA-TV/info-002/workflows/Lint/badge.svg" alt="Lint Status" /></a></td> <td><a href="https://github.com/AMWA-TV/info-002/actions?query=workflow%3ARender"><img src="https://github.com/AMWA-TV/info-002/workflows/Render/badge.svg" alt="Render Status" /></a></td> </tr> </tbody> </table> </div> <div class="footer border-top border-gray-light mt-5 pt-3 text-center text-gray"> Documentation built at 04:51:06 CDT on 2024-08-29. <br/> (c) AMWA 2024. RAML/JSON licensed under <a href="https://www.apache.org/licenses/LICENSE-2.0.html">Apache 2.0</a>. Documentation licensed under <a href="http://creativecommons.org/licenses/by-nd/4.0/">CC BY-ND 4.0</a>. </div> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/anchor-js/4.1.0/anchor.min.js" integrity="sha256-lZaRhKri35AyJSypXXs4o6OPFTbTmUoltBbDCbdzegg=" crossorigin="anonymous"></script> <script>anchors.add();</script> <script> window.onscroll = function() {myFunction()}; var header = document.getElementById("menu-header"); var sticky = header.offsetTop; function myFunction() { if (window.pageYOffset > sticky) { header.classList.add("sticky"); } else { header.classList.remove("sticky"); } } </script> </body> </html>

CINXE.COM

info-002 | AMWA INFO-002: NMOS Security Implementation Guide