Solved

ASP.net Recognising specific mobile devices

Posted on 2013-01-07
10
216 Views
Last Modified: 2013-02-27
Hi,

I am developing a highly secured ASP.net (VB) administration website.

At the moment, one of the security features in that logins are only accepted from certain pre-registered IP addresses.

We now wish to allow mobile devices to access the site, but obviously this breaks the pre-registered IP address security.

Is there a way to pre-register specific devices, and then identify and only allow these to connect?

Thanks,

Richard
0
Comment
Question by:rpm
  • 5
  • 3
  • 2
10 Comments
 
LVL 83

Expert Comment

by:CodeCruiser
Comment Utility
I don't think there is a way to achieve this. Identifying information is not sent in web requests.
0
 
LVL 42

Expert Comment

by:sedgwick
Comment Utility
not without forcing the devices installing some kind of client side authentication code, which passes unique identification and device information on every request to your web admin.
0
 
LVL 1

Author Comment

by:rpm
Comment Utility
Sedgwick:

Is that possible for iOS devices?

Richard
0
 
LVL 42

Expert Comment

by:sedgwick
Comment Utility
yes, u can use UIDevice currentDevice object to access device info:
http://stackoverflow.com/questions/7880715/how-to-add-device-information-while-sending-request-to-server

so basically the authentication against your web admin will be using the device info to detect if device is authorize to access your web admin and register it for future requests.
0
 
LVL 83

Expert Comment

by:CodeCruiser
Comment Utility
But that requires an ios app right?
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 42

Expert Comment

by:sedgwick
Comment Utility
yes.
there's no simple workaround to detect device requesting web page without passing some kind of authentication code to the server.
0
 
LVL 1

Author Comment

by:rpm
Comment Utility
How would I integrate such an app with the web browser, or can't that be done?

Richard
0
 
LVL 42

Expert Comment

by:sedgwick
Comment Utility
in the web admin, you should have a download link which runs a script on your mobile, gather device info and pass it to the admin web page, then the admin authenticate the device and either authorize access or not.

its a bit like the windows genuine validation, which u have to run in order to validate your windows before allow you to update and stuff like that.
0
 
LVL 1

Author Comment

by:rpm
Comment Utility
Ok, that's sounds like a good approach, although I think I will have to subcontract that job, as it is a bit beyond me!

Unless anyone knows of an off the shelf solution I can buy to do this?

Richard
0
 
LVL 42

Accepted Solution

by:
sedgwick earned 500 total points
Comment Utility
it should be an easy task even for a novice programmer cause all the code is in the internet.
and it can be developed in almost in any script language or .net so you won't have hard times to find someone to develop this feature.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Big data transfers via information superhighways require special attention and protection. Learn more about the IT-regulations of the country where your server is located. Analyze cloud providers and their encryption systems for safe data transit. S…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now