Solved

Security For Register Software

Posted on 2014-09-20
1
82 Views
Last Modified: 2014-10-29
I am writing software for Point of Sale terminals.  They will be communicating to the MS 2008R2 SQL server at the same time.  I want them to be secure of course and have been researching some options.  I think I have found what i want to do but wanted to get some feedback on my thoughts.  I want to run services on the server that will do all the queries, keeping the passwords local on the server.  Also all communication between the server and the POS will be encrypted with AES 256 using a passed token to initial a handshake between the two systems.  

My concerns are that i am writing with visual studio and will use the wcf for my services and I'm not sure if my server has IIS.  How would I tell?  Can I use the wcf without IIS?

I was going to go simpler route of either using certificates or SSID but we have several employees and heavy turnover so giving access to the database for each user would be a pain.  We are required to have each employee log into the POS with their network credentials.

I got the WCF service to work locally and am hoping it isn't too difficult to move to the server.  Let me know of any areas I may be not considering.

Thanks,
0
Comment
Question by:Millkind
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 14

Accepted Solution

by:
quizwedge earned 500 total points
ID: 40334476
First, I want to direct you to the PCI compliance standards at https://www.pcisecuritystandards.org/security_standards/documents.php Writing a POS system is simple. Complying with all of the PCI rules isn't. I know PCI compliance isn't part of your question, but I didn't want to recommend something without passing on the PCI compliance standards which would override anything I'll say below.

The short answer is that you can use wcf without IIS. It's possible to wrap it in a windows service. See the following for some ideas. Some of the links are shorter than others.

http://msdn.microsoft.com/en-us/library/bb332338.aspx
http://msdn.microsoft.com/en-us/library/ff649818.aspx
http://msdn.microsoft.com/en-us/library/ms751414.aspx
http://msdn.microsoft.com/en-us/library/ms733069.aspx
http://www.codeproject.com/Tips/692041/How-to-host-a-WCF-service-without-IIS

To enable or configure IIS on the server, see http://msdn.microsoft.com/en-us/library/ms181052(v=vs.80).aspx
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Enabled trace flag 4135 or 4199 - SQL SERVER 2 23
ModalPopup  question 22 38
VB.NET System.NullReferenceException 1 19
Database-Scoped Permissions 2 14
The ECB site provides FX rates for major currencies since its inception in 1999 in the form of an XML feed. The files have the following format (reducted for brevity) (CODE) There are three files available HERE (http://www.ecb.europa.eu/stats/exch…
Occasionally there is a need to clean table columns, especially if you have inherited legacy data. There are obviously many ways to accomplish that, including elaborate UPDATE queries with anywhere from one to numerous REPLACE functions (even within…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question