 |
| Success Story : Internet Application SecurAdmin |
 |
| Client and Requirements |
Our client Securmark AG offers a service for users, to register their precious
goods through a .NET Web Application. For administrative purposes of this
registered goods, a corresponding tool was not at hand.
Securmark AG contracted our company to develop such an administration tool
that must adhere to the following base requirements:
-> Develop an application for the administration of their existing .NET
internet product Securmark® - Register.
-> Administrative activities and reporting can be carried out only through
successfully authenticated administrators.
-> Complete language independent because administrators are located in
different countries, hence they use their language.
-> Maintenance and deployment for future updates must be kept at a
minimum. This is true as well for the languages.
|
| Solution |
Based on the requirements, our solution is a language independent .NET Web
Application with Forms Authentication and a database that contains the specific
languages, which the .NET Web application dynamically calls at runtime.
|
Use Case Analysis
|
Through several interviews we analyzed the business and use cases for the
administrative tool. Herewith we established a common language, helped the
client to identify the stakeholders goals and supported him to define the
functionality the tool must deliver. Because of our experience, this process
was done in a very short time, which helped the client to save time and costs.
|
Iterative Development
|
Simultaneously, we developed the base software architecture and implemented
some major use cases (functionality). With this first Web administration tool
release, we built an excellent base to demonstrate the client how things are
working and to figure out, if the application meets the clients goals.
Proceeding like this, we adopted the iterative development process and the
Web administrative tool evolved gradually, thus our client could see the
development progress and we finally met the clients goals and qualities.
|
Security
|
During development we paid strong attention on the security, which was very
much appreciated by our client. All input is checked against plausibility and
validity (semantic and syntax), i.e. the input of an email address must conform
to a predefined email format, otherwise the input is rejected with a corresponding
message for the user.
As a matter of course, authentication is implemented as well. As soon as the
administrator is successfully authenticated, the communication between the
browser and the server is secured with SSL, hence the data transfer is 128 bit
encoded.
|
Database
|
As backend serves the Microsoft SQL Server 2000 database, which contains
all the data from the users and their precious goods. To realize the Web
administration tool inherently language independent, we took the solution to
manage the languages completely within the database. Thus, decoupling the
Web application source from the languages, gives our client the advantage of
dynamically change or add languages according his needs without to change
anything within the application source code.
|
Technologies
|
We used the well established Microsoft technologies ASP.NET and ADO.NET
in conjunction with the Microsoft database SQL Server 2000. The applied
programming languages are C# and T-SQL for the stored procedures and
triggers.
|
Architecture
|
The solution is implemented with a classical 3-tier architecture. Because of
the complexity of certain database queries and to accomplish high cohesion
as well as separation of concerns, we developed a database access component.
|
| Conclusion |
Through our straight engagement and our .NET and software engineering
expertise, our client has now a secure and reliable .NET Web administration
tool, which he uses for his daily duty.
|