Security and User Access Control

The Systems Administration and comprehensive Security features are controlled through the User Manager function. The Audit trails, Error and User logs and Password properties are all configurable to meet the needs of the organization.

Access to each individual function and application component is set-up by the Systems Administrator using permit or deny entries, either at User or Group level.  Search and viewing capabilities are also controlled from this applet.  Users can be restricted down the search value level (For example: only reports that contain your account number).  Viewing, printing and use of exporting tools can also be restricted based on cabinet, user, field, etc... 

Functions such as Indexing and the use of application setup are restricted to the Administrator or automation tools that have administrator rights to the system.

Data integrity and security is further enhanced by the methods that are employed for storing and accessing data.  In both the thick client and WEB based systems, data is stored in a highly compressed format.  Direct access by client side software to the data is never allowed in either system.  Data volumes on the DataStore Host machine do not require shares and access is limited to the local machine user.  In the event that local machine user security was breached, the format of the data managed by DataStore is such that a proprietary decompression and viewing application is required to view information.  Without the proprietary application only unusable encrypted data is viewable.  The information below is an
 example of an attempt to view encrypted data.



When accessing the system, client side software first requires user authentication with a name and password.  The authentication process automatically limits search requests to cabinets assigned to the individual user or group.  Each individual or group can be limited to very specific search criteria.  For instance, and individual user or group may only be able to search for pages that contain very specific information.  This information could be a department number or an individual social security number.  Trying to retrieve unauthorized information causes a message to be displayed notifying the user that the data is not available.

If a request for information is valid, special middleware software executes the search and accesses the data.  The search process pulls only individual pages authorized by the security module for delivery to the end user.

DataStore can be deployed on local and wide area networks including Virtual Private Networks.  Web based applications can also utilize SSL certificates to keep all traffic encrypted.

 



Click Here to go back to the DataStore page.