Horse Racing System CSC 7250 Project I Supervised

Horse Racing System (CSC 7250 Project I) Supervised by: Prepared by: Prof. Michael Lyu Wilson Ngan

Agenda w Introduction w Demonstration w Question & Answer

INTRODUCTION

Architecture Overview Database Server Firewall UDDI Registry Server Authentication Module Application Server Terminal 1 Terminal 2 Terminal 3 Secure Zone Workstation 1 Workstation 2 Internet Workstation n Non-Secure Zone

Application Server Database Server Workstations Terminals JDBC SOAP HTTP Connection Pool Apache AIX 1. 1 JSP Servlet Tomcat JNI OPENSSL Authentication Module

Workstations Application Server SOAP Windows Application Crypto API PCKS Smart Card Reader Workstations

Terminals Application Server HTTP Web Application Terminals

Database Server Application Server JDBC Oracle 9 i Instance Oracle 9 i Server

UDDI Registry Server UDDI Registry Web Services Search Web Services UDDI Application Server Terminal

Mutual Authentication

Secure Data Exchange

Session Clean Up

Web Service w Web Services Architectures n n n w w SOAP—Protocol over HTTP WSDL – Description of Web Service UDDI – Searching Web Service Language Independent (XML) Flexible Inefficient (Large overhead) Sample n n Client – Smart. App Server – Demo. Login

Web Service Package Name Vendor Server Java Web Services Developer Pack (Java WSDP) Emerging Technologies Toolkit (ETTK) Sun Tomcat IBM Websphere Apache e. Xtensible Interaction System (AXIS) Apache Microsoft’s. NET Framework Microsoft IIS Table 1 Summary of Web Service Development Toolkit

Openssl w w w w FREE for commercial and non-commercial Base on SSLeay library developed by Eric A. Young Complete cryptographic library Open Source Multi-platform (Windows, Unix, Linux, Mas. OS, VMS, OS 2) Support SSL/TLS, CA operation, all PKCS standards Command Tools Sample (Openssl. Wrapper. COM)

Crypto API w w w w Windows ONLY FREE for commercial and non-commercial High Level API Open for different vendor to implement All key pairs store in Container Big Endian / Little Endian Each key pairs responsible for n n AT_KEYEXCHANGE AT_SIGNATURE w Sample (s. Rit. Crypto. Lib)

Summary of Cryptographic Provider Command Line Platform Language CA support Open. SSL Yes Windows, Unix, Linux, Mas. OS, VMS, OS 2 C Yes JCE No Follow Java No Bouncy Castle No Follow Java Yes Crypto API No Windows VC Yes Table 2 Summary of Cryptographic Library

Free Marker w w w FREE for commercial and non-commercial Alternatives to JSP Design for MVC (Model View Controller) model Template Engines Support non-web application

Free Marker

ATL/COM w Part of the Microsoft Foundation Classes w COM -- Component Object Model n n reusable very efficient components w ATL is Active Template Library n Clean and Fast development technology w Sample (Openssl. Wrapper. COM)

JNI w Java Native Interface w Bridge between Java and C w Alternative Source of Standard Library n n CPU usage Memory usage w Warning !!!! Java VM will crash if memory leakage exists w Sample (Crypto. Wrapper. JNI)

ANT w Robust Build tools w Preserve the development environment w Used by major JAVA editor n Forte, Netbeans, Ellipse w Support command line w Sample (Horse Racing System)

DEMONSTRATION

Horse Race System

Stable Management

Stable Management (Add Stable)

Stable Management (Delete Stable)

Stable Management (Modify Stable)

Race Management

Race Management (Add Race)

Race Management (Delete Race)

Race Management (Modify Race)

DEMONSTRATION (Client Application) Get Challenge

DEMONSTRATION (Client Application) Sign Challenge

DEMONSTRATION (Client Application) Logon

DEMONSTRATION (Client Application) Logout

Q&A

END