UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

CSA - CAN/CSA-ISO/IEC-9579-04

Information Technology - Remote database access for SQL with security enhancement

inactive
Organization: CSA
Publication Date: 1 January 2004
Status: inactive
Page Count: 132
ICS Code (Languages used in information technology): 35.060
scope:

This International Standard, Remote Database Access for SQL (RDA), defines a model for the remote interaction of an SQL-client and one or more SQL-servers through communication media, and defines the encoding of messages, the semantics of messages and associated facilities for mediating the interaction between one SQL-client and one SQL-server.

This International Standard also defines a mapping of the RDA Protocol to the specific communication infrastructures TCP/IP and Transport Layer Security (TLS).

This International Standard relies upon the facilities provided by ISO/IEC 9075 (SQL) and ISO/IEC 9075-3 (SQL/CLI).

 This International Standard also:

- identifies potential security vulnerabilities in remote database access using RDA,

- defines RDA facilities which protect against the potential vulnerabilities.

Normative annexes provide:

- a Conformance Proforma, 

- an optional language independent Application Programming Interface defined in the notational conventions of ISO/IEC 9075-3 (SQL/CLI) for invoking RDA Operations,

- an optional mapping of ISO/IEC 9075-3 (SQL/CLI) functions to RDA Operations,

- definitions of optional SQL-servers, the RDA Location Server and the RDA Support Server, to facilitate interoperation and data distribution in a heterogeneous environment,

- a set of security profiles that identify which RDA facilities and other security facilities are required for different levels of protection against potential vulnerabilities. 

Informative annexes provide:

- an analysis of security service requirements,

- an ASN.1 specification for the RDA Protocol,

- an ASN.1 specification for the encoding of multiple rows.

This International Standard does not constrain:

- conforming RDA-client environments to be implemented using any particular processor decomposition,

- conforming RDA-server environments to be implemented using any particular processor decomposition.

This International Standard refers to but does not define:

- protocols and security mechanisms for communication confidentiality, integrity and authentication of communicating peers,

- digital signature and authentication mechanisms supported by protocol elements of RDA.

This International Standard does not define:

- algorithms for query decomposition or for the combining of results in a distributed database environment,

- mechanisms for recovery in the event that transaction co-ordination fails,

- mechanisms for storage integrity and confidentiality using cryptography,

- mechanisms to counter Denial of Service attacks.

Document History

January 1, 2004
Information technology — Remote database access for SQL with security enhancement
A description is not available for this item.
January 1, 2004
Information technology - Remote database access for SQL with security enhancement
Introduction Remote Database Access for SQL (RDA/SQL) International Standard is a member of a set of International Standards produced to facilitate the interworking of computer systems. This...
January 1, 2004
Information technology - Remote database access for SQL with security enhancement
Introduction Remote Database Access for SQL (RDA/SQL) International Standard is a member of a set of International Standards produced to facilitate the interworking of computer systems. This...
CAN/CSA-ISO/IEC-9579-04
January 1, 2004
Information Technology - Remote database access for SQL with security enhancement
This International Standard, Remote Database Access for SQL (RDA), defines a model for the remote interaction of an SQL-client and one or more SQL-servers through communication media, and defines the...
January 1, 2004
Information technology - Remote database access for SQL with security enhancement
This International Standard does not define: – algorithms for query decomposition or for the combining of results in a distributed database environment, – mechanisms for recovery in the event that...

References

Advertisement