Skip to main content

NFR-0008

Non-functional requirement

Pilot identity security and data isolation

StatusProposed

Requirement statement

Protect Keycloak-authenticated identity, pilot profiles, preferences, progress, and resumable activity from cross-pilot access or local-credential fallback.

Owner
AeroSim Architecture
Quality attribute
Security and privacy
Scope
AEROSIM-FT-30, AEROSIM-FT-31, AEROSIM-FT-32, AEROSIM-FT-33, AEROSIM-FT-34
Measurable target
Every authenticated operation resolves only the active Keycloak subject’s pilot data; AeroSim stores no local password; cross-pilot access attempts are denied and produce reviewable security evidence.
Verification method
Run authentication-boundary, authorization-isolation, session-expiry, cross-pilot access, and persisted-data integrity tests.

Traceability

Owning Tasks