UniOTP Management System

From SecuTech Wiki
Revision as of 13:42, 1 June 2012 by Joseph (talk | contribs)
Jump to navigationJump to search


Introduction

The UniOTP Management System is a web-based management system. Administration and maintenance operations concerning dynamic password system configuration such as user information, token information, operator information, log information and so forth can be performed with this system.

The system employs different levels of privileges for compartmentalization of information and tasks.

Operator Login

On the login page of the UniOTP Management System, input the Operator ID in the [OperatorID] field and enter the corresponding password in the [Password] field. Click [Submit] to log in.

The default Operator ID for the Super Operator is "1000000001" with the corresponding default password "123456", both without quotation marks.

If Operator login was successful, the administration interface will be accessible on the main page, otherwise an error message will appear if login credentials are incorrect.

From the administration interface, actions to perform can be chosen from the menu on the left or from the shortcut icons in the main panel.

Logout

To logout of the system, click [Exit System] located on the top-right of the window, as shown in the screenshot above. For security purposes, please always use this method to log out ofthe system.

File:Uniotpmgs img03.jpg

Change Password

From the administration interface, click on [Change Password] from either under the [Operator Management] menu on the left or the [Change Password] shortcut on the main panel.

In the "Change Password" interface, input the current password in the [Old Password] field, and enter the new password in both the [New Password] and [Confirm] fields, enter the new password. Click [Submit] to apply changes.

A message will appear indicating if the password change was successful or unsuccessful.

Search User

From the administration interface, click on [User Search] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.

Users can be found either directly by User ID or users with

For example, if you enter [US20110127002] in the UserID field, you perform a search concerning information of the user having for ID US20110127002, modify or delete user or his information.

If you enter [t] in the Username field, you will see information about all users whose username contains a [t], you can choose the user you want to manage, modify or delete the user or his information.

Add a User

Refer to the icon on the picture to perform user related information.

In order to add a user, you need to provide a unique username, a unique User ID, phone number, the token serial number that you want to allocate to this user, user mail address, user static PIN, authentication method (We recommend to user the more secure OTP+PIN authentication method), Username and system UserID can be used together to perform binding, the token serial number has to be a valid serial number.

If you enter an invalid token serial number, you will get the error message below.

Fill in valid user information and click [Submit].

User added successfully

User Status change

You can perform settings about user status using this section, report a token a lost, cancel the lost report, or permanently remove the token and related operations.

The picture below shows the user status change page (only supports user ID to perform operations on user status)

Repair a token

For certain reasons, the token can get disabled. In this case, you can try to perform token reparation operation in order to re-enable the token. Refer to the picture below to enter the token reparation interface.

You need to provide two consecutive dynamic passwords in order to synchronize the token.

Token reparation successful

If the two dynamic passwords are not consecutive, or if it exceeds a certain range, the reparation will fail.

Add an operator

This interface is used to add new operators in the system, the user added should not be higher than the operator privilege level, and otherwise the operation will fail.

The picture below shows the add operator page, you need to provide operator first and last name,password, operator privilege level.

If the operation succeeds, the following message will be returned, displaying the OperatorID that you need to use for login, This ID is used by the operator to log in the system.

If privilege is not sufficient, you will get the following error message.

Delete an operator

This interface is used to delete an operator from the database, but your privilege level needs to be higher than the operator you are deleting. Refer to the picture below enter this interface.

Like shown in the picture, you can delete an operator using his operator ID. You can also delete a range of operators from a specific ID to a specific ID.

If you don’t have sufficient privilege to delete the operator, you will get the following error message.

If the operation succeeds, the following message will be displayed.

With Operator information search interface, you can perform search concerning operators, access this page from the left menu or using the shortcut icon in the main panel.

You can indicate the operator ID to search for information concerning this operator, or you can also indicate a specific range of operators to search for all operators that have privilege level inferior to the current operator.

For example, if you enter 1000000001 for the operatorID and click [Submit], information about the operator having for ID [1000000001]( As 1000000001 stands for Super OperatorID, you need to be super operator to be able to see this information). You can use the icon in front of the operator ID to delete the operator, of course, if your privilege level is lower than the user you want to delete, the operation will not succeed.

Search for operator ID in a specific range:

Token/User batch import

Token/User batch import interface allows the service provider to import many tokens information at once inside the database, it also can import many users bound to a token at once inside the database. Refer to the picture below to enter the corresponding interface.

In order to import Token files, you need to provide decryption keys for those files, there is no decryption key function for user import. The extension for token files and user information files is [.unif].

File:Uniotpmgs img36.jpg

If there is an error with the secret key error or if the file is corrupted, the following message will be displayed.

File:Uniotpmgs img37.jpg

the token file part will successfully prompt an error information for the error token , there is no line in front of the failure of the token serial number corresponding to the record, you can export the information to the service provider to determine the cause of the error (duplicate import should be excluded due to errors)

File:Uniotpmgs img38.jpg

If token import succeeds, a message will be displayed specifying the number of token imported

File:Uniotpmgs img39.jpg

In the case user import has failed, the following error message, containing the details about the concerned users, will be displayed.

File:Uniotpmgs img40.jpg

Log information search feature provides a log search, which includes everyday’s operations logs and users’ authentication logs. Refer to the icon pointed in the picture below to enter the log information search interface.

File:Uniotpmgs img41.jpg

In the log information interface, the [LogDomain] field is used to choose the type of logs, Syslos for everyday’s tasks logs, Commonlog for user authentication logs. In the QueryMode field you can choose logs for a specific operator, once you have specified an operator, the logs information displayed are only for the specified operator (If you specify username, the authentication logs information for this user only will be displayed.)

If you select the [Specific Operator] query mode, you have to fill in the [OperatorID] field, if you don’t, the operation will fail.

In the two fields [BeginData] and ]EndData] you can set the dates (from when to when) for the logs, click [submit] to search.

File:Uniotpmgs img42.jpg

The logs from a certain period will look like below:

File:Uniotpmgs img43.jpg

If no corresponding result has been found:

File:Uniotpmgs img44.jpg

Logs export

Export logs information to a file.

File:Uniotpmgs img45.jpg

Set the dates in the two fields BeginDate and EndDate, in the LogDomain field, choose the logs type. In the compress field, choose the type of compression you want to use. Click Submit to backup the selected logs.

File:Uniotpmgs img46.jpg

Clear logs

Before clearing all logs, we recommend to make a logs backup.

File:Uniotpmgs img47.jpg

File:Uniotpmgs img48.jpg

When clearing logs succeeds, the following message will be displayed.

File:Uniotpmgs img49.jpg

Database backup

The database backup feature is used to restore all the needed information.

File:Uniotpmgs img50.jpg

In the [Backup Mode] choose the backup mode. You can choose to backup the whole database, including the tables structure and the data contained inside (You can specify which data you want to backup from the [Log Backup] field). You can also choose to backup only the table structure. In this case, the data contained inside the database will not be backed up.

File:Uniotpmgs img51.jpg

Statistics

You can see temporal and spatial repartition, make statistics, analyze about authentication strength repartition and operation repartition.

File:Uniotpmgs img52.jpg

Once you entered the statistics page, In the [Load Analysis] part, you can perform load statistics. In Operation statistics, you can perform operation statistics. You can choose a scale for these two parts (Year or month). In [Display Mode] field, you can choose the display method, there are three kinds: histograms, line charts, pie charts.

File:Uniotpmgs img53.jpg

The picture below shows the histogram of operation type analyze.

File:Uniotpmgs img54.jpg

System information

Click the home icon in the left menu to show system information and system configuration page this page displays system information and the current settings list.

File:Uniotpmgs img55.jpg

System configuration

Using the system configuration page you can change system settings. Click [Config Database] to configure the database.

File:Uniotpmgs img56.jpg

Once you’ve entered the database settings page, you can change database settings such as database host, database name, port, login username, login password. You can also test the connection to the database, after you submitted it, a new configuration file will be created.

File:Uniotpmgs img57.jpg