SNIP_CLASSIC_SECOC_SECTION_7_6_Gateway_functionality

7.6 Gateway functionality The SecOC module supports authentication and verification for I-PDUs that are routed from one source bus to one or more destination busses. This allows for the realization of re-authentication gateways that can be used to realize networks with different security zones or properties. The actions necessary to support the required gateway functionality can be simply derived from the authentication and verification scenarios in Sections 7.4 and 7.5. Each authentication or verification process for a given I-PDU need to be configured separately. This functionality includes:  authentication of outgoing I-PDUs,  verification of incoming I-PDUs,  re-authentication gateways, i.e. the verification of incoming I-PDUs in combination of their immediate re-authentication, when the I-PDU is routed to another lower layer module. Note: “Gatewaying-on-the-fly” is not supported by SecOC