6 Star 5 Fork 42

OpenHarmony / security_dataclassification

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
克隆/下载
README.md 3.30 KB
一键复制 编辑 原始数据 按行查看 历史
Annie_wang 提交于 2022-04-12 09:32 . update docs

Data Transfer Management

Introduction

In OpenHarmony, the data transfer management module provides cross-device data transfer management and control policies for distributed services. The data transfer management module defines a sef of APIs to provide management and control policies for cross-device data transmission and obtain the highest risk level of data to be sent to the peer device.

The figure below illustrates the deployment logic of the data transfer management module.

  • Distributed service: provides distributed data management capabilities, including the distributed file system and distributed data management.

  • Data transfer management module: provides management and control policies for cross-device data transmission and obtains the highest risk level of data to be sent to the peer device.

  • Device security level management module: provides device security level information for data transfer management and control.

Before data is transferred, the distributed service checks whether the security level of the peer device supports the risk level of the data to be transferred. The table below lists the mappings between the device security levels and data risk levels.

Table 1 Mappings between data risk levels and device security levels

Device Security Level SL5 SL4 SL3 SL2 SL1
Data Risk Level S0 to S4 S0 to S4 S0 to S3 S0 to S2 S0 to S1

The distributed service blocks data transmission based on the data risk level returned by the data transfer management module. Before data transmission is denied, a dialog box can be displayed to ask for user's permission. Data can be transferred if the user allows. The device vendors can implement the authorization mechanism.

Directory Structure

/base/security/dataclassification
├── frameworks                   # Framework code
│   └── datatransmitmgr          # Code of basic functions
└── interfaces                   # APIs
    ── innerkits                # Internal APIs
        └── datatransmitmgr      # Code of internal APIs

Available APIs

Table 2 APIs of the data transfer management module

API Description
int32_t DATASL_GetHighestSecLevel(DEVSLQueryParams *queryParams, uint32_t *levelInfo); Obtains the data risk levels supported by the device.
int32_t DATASL_GetHighestSecLevelAsync(DEVSLQueryParams *queryParams, HigestSecInfoCallback *callback); Asynchronously obtains the data risk levels supported by the device.
int32_t DATASL_OnStart(void); Starts initialization.
void DATASL_OnStop(void); Stops initialization.

Repositories Involved

Security subsystem

base/security/dataclassification

1
https://gitee.com/openharmony/security_dataclassification.git
git@gitee.com:openharmony/security_dataclassification.git
openharmony
security_dataclassification
security_dataclassification
master

搜索帮助