Diseño e implementación de un prototipo de sistema distribuido basado en SOA (Service-Oriented Architecture) para gestión segura de contraseñas

Abstract

This document presents the design and implementation of a prototype of a distributed system to manage passwords securely. The system is based on SOA (Service-Oriented Architecture) and will be constituted by the next components: A WCF REST Service (Windows Communication Foundation based on the Representational State Transfer architecture), a database implemented in SQL Server, a web client developed with ASP.NET, and an Android client implemented in Java. In order to bring about this prototype, the Kanban methodology was used, tasks were added to a board and were closed when they become completed. So as to access the database, the Entity Framework technology was used. The clients used libraries to create the HTTP request, and for secure the channel, the SSL/TLS protocol was used. Hardening techniques were applied like encrypting the critical data stored at the database, encrypting the connection string, etc. The prototype keeps passwords, groups them, and allows their management by reading, editing, and erasing, furthermore, the prototype allow to get back the last change done, which can be the result of an edition or deleting of a register. Finally, session states were managed through their transfer at the HTTP header over cookies.