nmfta-repo / vcr-experiment

MIT License
1 stars 4 forks source link

AGW-F-005 Protect Confidentiality: Functional group or not? #5

Closed BenGardiner closed 2 years ago

BenGardiner commented 2 years ago

AGW-F-005 Protect Confidentiality is the child of AGW-F-004. This is perhaps a security requirement in the functional requirements section. Should it move to security requirements and keep the same parent? OR is the protection of confidentiality of vehicle data (for the fleet) a functional requirement of the gateway and this is correctly rooted?

BenGardiner commented 2 years ago

It does seem like 'protecting vehicle network data confidentiality' is a functional requirement of an intended vehicle gateway; however, the model here uses NGW-F-001 Won't be Gateways to 'define' what is permitted by devices which are 'multi homed' but not intended to perform any gateway functions. In this model it would be not great to hence require that these unintended gateway devices NOT protect confidentiality of vehicle network data.

The AGW-F-005 Protect Confidentiality should be moved to a child of AGW-S-004 as an AGW-S- requirement.