Executive Summary
In today’s industrial landscape, Enterprise Asset Management (EAM) systems hold highly sensitive operational, financial, and strategic data. Teknora EAM is engineered with a "Security-by-Design" philosophy, ensuring that data integrity, user authentication, and system availability are inherently woven into its core architecture. This document outlines the comprehensive, multi-layered security protocols implemented within the Teknora EAM platform.
1. Identity and Access Management (IAM)
Teknora employs a rigorous authentication framework designed to thwart unauthorized access and credential compromise.
- Multi-Factor Authentication (MFA / 2FA): Teknora mandates an optional but highly recommended two-step verification process. Users can authenticate via Time-based One-Time Passwords (TOTP) using standard Authenticator apps or through secure Email OTPs. This mitigates risks associated with compromised passwords.
- Stateless JWT Authentication: Session management is powered by JSON Web Tokens (JWT) via Bearer Auth. Tokens are strictly time-bound and cryptographically signed, ensuring that user sessions cannot be hijacked or tampered with.
- Automated Session Management: The platform includes idle-session timeouts and automatic session extension mechanisms to protect unattended terminals in industrial environments.
2. Granular Role-Based Access Control (RBAC) & Multi-Tenancy
Access to data and system functions is strictly governed by the Principle of Least Privilege (PoLP).
- Multi-Tier Data Isolation (Tenancy): Teknora architecture natively supports enterprise hierarchies. Data is strictly siloed at the Organization (org_id) and Site (site_id) levels.
- Standard Users: Inherently restricted to viewing and interacting with assets, inventory, and work orders solely within their assigned site.
- Super Administrators: Granted cross-site visibility via the GLOBAL_VIEW architecture, strictly validated at the backend level.
- Component-Level Permissions: Frontend UI components and backend API endpoints dynamically adapt to user roles. Actions such as Create, Update, and Delete are mathematically validated against the user's specific permission matrix before execution.
3. Application & API Security
The Teknora backend is built on a high-performance, asynchronous framework (FastAPI) that inherently protects against common web vulnerabilities.
- Endpoint Shielding: Every secure API route is fortified by dependency injection protocols (e.g., get_current_user). If a request lacks a valid token or attempts to bypass role restrictions, it is immediately rejected at the gateway level.
- Strict Payload Validation: All incoming data payloads are strictly validated and serialized using advanced data-parsing models (Pydantic), neutralizing SQL Injection (SQLi) and Cross-Site Scripting (XSS) attempts.
- Smart Query Filtering: Backend queries automatically append organizational and site-level filters. Even if a malicious actor attempts to manipulate URL parameters, the backend enforces the user's architectural boundaries, preventing Insecure Direct Object References (IDOR).
4. Infrastructure & Network Security
Teknora's deployment environment is fortified against interception and downtime.
- End-to-End Encryption: All data in transit between the client browser and Teknora servers is encrypted using industry-standard SSL/TLS protocols (managed via robust Nginx reverse-proxy configurations and Let's Encrypt / Certbot).
- Web Socket Security: Real-time features, such as Digital Twin telemetry and live dashboard updates, operate over secure WebSocket connections (wss://), ensuring real-time data streams are impenetrable.
5. Auditability and Data Integrity
In enterprise environments, accountability is as critical as preventative security.
- Immutable Audit Trails: Teknora records systemic changes. Features like the AuditHistoryModal and StatusHistoryModal track the lifecycle of assets, work orders, and inventory.
- Traceability: Every major transaction records the acting user (changeby) and the exact timestamp (changedate), creating a transparent and indisputable operational history.
Conclusion
Teknora EAM does not treat security as an afterthought. By combining state-of-the-art authentication (2FA/JWT), rigid multi-tenant data isolation, and continuous audit trails, Teknora provides a resilient, enterprise-grade fortress for your most critical operational data.