Skip to content

Commit

Permalink
Document timestamp usage of databroker
Browse files Browse the repository at this point in the history
  • Loading branch information
lukasmittag committed Mar 11, 2024
1 parent c11388e commit 26458c1
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions kuksa_databroker/doc/timestamp.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# Databroker Timestamps
The implementation of KUKSA databroker shall represent the latest value of a ```Datapoint```. Therefore it adds a ```timestamp``` to a ```Datapoint```. If an actuator/provider/application has no system time the databroker sets the ```timestamp``` to the current system time. For some use cases it can be interesting to provide a timestamp set by the actuator/provider/application. For this we added a so called source timestamp (short ```source_ts```) to a ```Datapoint```. This source timestamp is optional and per default set to None.

# Potential attacks
If an attacker gets an authorized connection to the databroker he can set the source_timestamp and overwrite the value with a new one. But for this he/she needs read and write access through JWT tokens. If a provider decides to work with ```source_ts``` of a ```Datapoint``` than it should be clear that they can be false/outdated.

0 comments on commit 26458c1

Please sign in to comment.