Discovery and Connection Management Security for 2110

This session will describe the current workflow of the BCP-003 Security best practices. It elaborates current proposed mechanisms to encrypt NMOS APIs with TLS to prevent man in the middle attacks. Furthermore, AMWA IS-10 is reserved to specify authorization mechanisms to secure access to NMOS APIs like IS-04, -05, or -08. The current concept of an authorization server is explained, as well as how it can issue tokens for controllers and nodes. Access to NMOS-nodes for starting/stopping/configuring media endpoints can then be secured against unwanted access.