Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Security For Register Software

Posted on 2014-09-20
1
Medium Priority
?
86 Views
Last Modified: 2014-10-29
I am writing software for Point of Sale terminals.  They will be communicating to the MS 2008R2 SQL server at the same time.  I want them to be secure of course and have been researching some options.  I think I have found what i want to do but wanted to get some feedback on my thoughts.  I want to run services on the server that will do all the queries, keeping the passwords local on the server.  Also all communication between the server and the POS will be encrypted with AES 256 using a passed token to initial a handshake between the two systems.  

My concerns are that i am writing with visual studio and will use the wcf for my services and I'm not sure if my server has IIS.  How would I tell?  Can I use the wcf without IIS?

I was going to go simpler route of either using certificates or SSID but we have several employees and heavy turnover so giving access to the database for each user would be a pain.  We are required to have each employee log into the POS with their network credentials.

I got the WCF service to work locally and am hoping it isn't too difficult to move to the server.  Let me know of any areas I may be not considering.

Thanks,
0
Comment
Question by:Millkind
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 14

Accepted Solution

by:
quizwedge earned 2000 total points
ID: 40334476
First, I want to direct you to the PCI compliance standards at https://www.pcisecuritystandards.org/security_standards/documents.php Writing a POS system is simple. Complying with all of the PCI rules isn't. I know PCI compliance isn't part of your question, but I didn't want to recommend something without passing on the PCI compliance standards which would override anything I'll say below.

The short answer is that you can use wcf without IIS. It's possible to wrap it in a windows service. See the following for some ideas. Some of the links are shorter than others.

http://msdn.microsoft.com/en-us/library/bb332338.aspx
http://msdn.microsoft.com/en-us/library/ff649818.aspx
http://msdn.microsoft.com/en-us/library/ms751414.aspx
http://msdn.microsoft.com/en-us/library/ms733069.aspx
http://www.codeproject.com/Tips/692041/How-to-host-a-WCF-service-without-IIS

To enable or configure IIS on the server, see http://msdn.microsoft.com/en-us/library/ms181052(v=vs.80).aspx
0

Featured Post

Learn Veeam advantages over legacy backup

Every day, more and more legacy backup customers switch to Veeam. Technologies designed for the client-server era cannot restore any IT service running in the hybrid cloud within seconds. Learn top Veeam advantages over legacy backup and get Veeam for the price of your renewal

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Naughty Me. While I was changing the database name from DB1 to DB_PROD1 (yep it's not real database name ^v^), I changed the database name and notified my application fellows that I did it. They turn on the application, and everything is working. A …
It was really hard time for me to get the understanding of Delegates in C#. I went through many websites and articles but I found them very clumsy. After going through those sites, I noted down the points in a easy way so here I am sharing that unde…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question