Security Management Guide (G06.24+, H06.03+)

Glossary
Security Management Guide—522283-008
Glossary-5
logoff
logoff. To terminate an interactive session that began when a user logged on to the system.
logon. To establish an interactive session and provide necessary authentication information
(such as a user name and password).
logon default security string. A security string associated with a user ID that becomes the
default security string for each new logon by that user ID. See also default security
string and security string.
maintenance. Routine operations required to ensure continued operation of the system.
member name. A name (such as MATHEW) that identifies a user within an administrative
group. The group name and member name form a user’s user name.
modem. Abbreviation for modulator/demodulator. A device that translates logic signals
(such as those from a terminal or computer) into tones that can be sent over phone
lines, and tones into logic signals.
named process. A Guardian process that was given a name when the process was
created. The name uniquely identifies the process on the system.
network. A collection of systems or the interconnected hardware and software required to
connect those systems.
network user. A user ID that is defined on a network of systems as the same user name
and is provided with matching remote passwords. See also remote password
object. The smallest collection of data on which an access control list can be defined.
Examples of objects include program files, data files, processes, disks, tapes,
terminals, and other peripherals. Not all object types are supported by the Guardian
environment or the Safeguard software.
one-way encryption. The encryption of data into a form that cannot be used to recover the
data. See also encryption.
orphan file. A file owned by a user ID not currently defined on the system. A file becomes
an orphan file if the owner’s user ID is deleted or if the file has been given away
through a FUP GIVE operation to a nonexistent user ID. Orphan files can be inherited
by a user who has been newly added to the system, creating a potential security
hazard.
PAID. Abbreviation for process access ID. The PAID of a process is the user ID that
determines the authorizations for that process. By default, the PAID of a process is the
same as the PAID of the process that created that process. The PAID can be altered
through USER_AUTHENTICATE_ procedure calls or by executing a PROGID program
file.
password. A character string used to authenticate a user. The password is kept secret by
the user, who enters it when the system requests it.