Common Data Security Architecture (CDSA)

Common Data Security Architecture (CDSA) is a set of security services and frameworks that allow the creation of a secure infrastructure for client/server applications and services. It is a secure application development framework that equips applications with security capabilities for delivering secure Web and e-commerce applications.

CDSA is made up of three basic layers:

• System Security Services
• The Common Security Services Manager (CSSM)
• Security Add -in Modules

• System Security Services: System Security Services are bet ween applications and CSSM services. Software at this layer provides a high -

level abstraction of security services such as secure e-mail, secure file systems, or secure communications. Applications can invoke the CSSM APIs directly, or use these layered services t o access security services on a platf orm.

• The Common Security Service Manager (CSSM): CSSM provides a set of core services that are common to all categories of security services. CSSM defines five basic categories of services:

Cryptographi c Service Provider (CSP) modules CSPs perf orm crypt ographic operations such as bulk encrypting, digesting, and digital signat ures. Trust Poli cy (TP) modules TPs implement policies def ined by authorities and institutions and set the level of trust required to carry out specif ic actions (such as issuing a check or gaining access to confidential int ellect ual property).