Skip to content

Commit

Permalink
GITBOOK-80: No subject
Browse files Browse the repository at this point in the history
  • Loading branch information
pjoshi751 authored and gitbook-bot committed Jan 5, 2024
1 parent 191517f commit 01c5352
Show file tree
Hide file tree
Showing 4 changed files with 16 additions and 10 deletions.
2 changes: 1 addition & 1 deletion SUMMARY.md
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,7 @@
* [Automation Framework](developer-zone/testing/automation-framework.md)
* [Upcoming Features](developer-zone/upcoming-features/README.md)
* [Key Manager](developer-zone/upcoming-features/key-manager.md)
* [Multi-tenancy in PBMS](developer-zone/upcoming-features/multi-tenancy-in-pbms.md)
* [Multi-tenancy in PBMS](developer-zone/upcoming-features/multi-tenancy-in-pbms.md)

## 👩💻 COMMUNITY

Expand Down
18 changes: 12 additions & 6 deletions developer-zone/upcoming-features/key-manager.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,7 @@
---
description: WORK IN PROGRESS
---

# Key Manager

## Introduction
Expand Down Expand Up @@ -25,21 +29,22 @@ The Key Manager in OpenG2P serves as a centralized entity responsible for the se
### Key generation and storage

1. Utilize the Key Manager to generate strong cryptographic keys.
1. Safely store keys, potentially leveraging Hardware Security Modules (HSMs) for added protection.
2. Safely store keys, potentially leveraging Hardware Security Modules (HSMs) for added protection.

### Database encryption

1. Employ keys from the Key Manager to encrypt sensitive data in databases.
1. Ensure that only authorized entities with the appropriate keys can access and decrypt the data.
2. Ensure that only authorized entities with the appropriate keys can access and decrypt the data.

### Voucher generation security

### Voucher generation security
1. Implement secure voucher generation processes using keys managed by the Key Manager.
1. Protect against fraudulent activities by securing voucher generation operations.
2. Protect against fraudulent activities by securing voucher generation operations.

### Private/public key pair handling

1. Manage private keys securely to prevent unauthorized access.
1. Distribute public keys for use in secure communication channels within the OpenG2P ecosystem.
2. Distribute public keys for use in secure communication channels within the OpenG2P ecosystem.

## Security best practices

Expand All @@ -48,7 +53,7 @@ The Key Manager in OpenG2P serves as a centralized entity responsible for the se
* Regularly rotate cryptographic keys to mitigate the risk of compromise.
* Ensure a seamless transition during key rotation to avoid disruptions.

### Access control
### Access control

Define roles and permissions for users interacting with cryptographic keys.

Expand All @@ -64,4 +69,5 @@ Consider integrating with Hardware Security Modules for enhanced physical and lo
## Docker compose services

## Conclusion

Integrating the Key Manager into OpenG2P provides a robust foundation for securing crucial databases and managing cryptographic keys. By following best practices and leveraging the capabilities of the Key Manager, OpenG2P ensures the confidentiality, integrity, and authenticity of sensitive information.
4 changes: 2 additions & 2 deletions developer-zone/upcoming-features/multi-tenancy-in-pbms.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
description: Work in progress
description: WORK IN PROGRESS
---

# Multi-tenancy in PBMS
# Multi-tenancy in PBMS

## Concept

Expand Down
2 changes: 1 addition & 1 deletion platform/privacy-and-security.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ OpenG2P is a robust and versatile platform built upon the Odoo framework, provid
* **Attachment Security**: Files and attachments uploaded to OpenG2P are securely stored in an S3 bucket and accessed only by authorised users, with unauthorised data exposure.
* **PII Encryption:** OpenG2P has a [privacy module](https://github.com/OpenG2P/openg2p-security) for the registry which encrypts all the PII information stored in the database.

Encryption of data is achieved with production-grade Key Manager module. 
Encryption of data is achieved with production-grade Key Manager module. Learn more >>

## Secure deployment

Expand Down

0 comments on commit 01c5352

Please sign in to comment.