In this diploma thesis we tackled two major problems related to system security. One is the extension of the existing system for managing users, groups and their rights. The current system does not have functionalities in place that would enable anything related to users, groups and rights. The second part presents the establishment of two secure communication channels between server and client and between two servers. The result of the thesis is an upgrade to the existing system, with new mechanisms and functionalities.
The servers and the user communicate primarily via the HTTP protocol, which is no longer good enough and, above all, not safe enough. We have therefore upgraded the system to enable the use of the HTTPS protocol. We had to delve deep into the problem to determine what the existing solutions were and how they worked.
|
