Security

This directory contains security documentation for the United Manufacturing Hub platform.

Component Scope

The UMH platform consists of two main security domains:

umh-core (Edge Gateway Container)

Documentation: umh-core/deployment-security.md

Security scope:

• Instance-level authentication (AUTH_TOKEN)

• Container security (non-root execution, process isolation)

• Edge gateway security architecture

• Protocol converter and data flow security

• Network security for edge deployment

• Supply chain security (vulnerability scanning, dependencies)

• Industrial protocol handling (OPC UA, Modbus, S7, MQTT)

ManagementConsole (Cloud Platform)

Documentation: management-console/ (separate repository)

Security scope:

• User authentication and multi-factor authentication (MFA)

• Role-based access control (RBAC) for users

• User-level audit trails and action logging

• Cloud security and API protection

• Session management and user permissions

• Organization and team access controls

Security Responsibility Boundary

umh-core handles edge security - authenticating the instance, securing the container, and protecting data flows at the factory edge.

ManagementConsole handles user security - authenticating users, controlling access, and securing the cloud platform.

Together they provide defense-in-depth: instance authentication (umh-core) + user authentication (ManagementConsole) + customer infrastructure security.