2.9 Security

This section documents the system-wide security issues that are not otherwise described in the specifications for the member protocols. It does not duplicate what is already in the member protocol specifications unless there is a unique aspect that applies to the system as a whole.

Transaction processing services are designed to protect the following assets:

  • Transaction information, see Transaction Information Security (section 2.9.1)

  • System configuration, see System Configuration Security (section 2.9.2)

  • Messages, see Message Security (section 2.9.3)

  • Events, see Event Security (section 2.9.4)

This is illustrated in the following diagram, where the system is shown communicating with a resource manager and an application service.

Transaction processing services assets

Figure 11: Transaction processing services assets