MITP 458 Application Layer Security

1
MITP 458Application Layer Security

• By Techjocks

2
Health Care -Data Security Problem ?

• How to presented Healthcare sensitive data via
  n-tier Application on internet facing Portal?
• Need to secure the Authentication Process of
  user/password during a Web Service Call at
  Application Level

3
Application Flow of tokens over the Network
4
Solution

• Before any Web Service call is invoked it will
  extract an encrypted token, decrypt it and verify
  that username and hashed password against the
  cache sitting on the web service server, if it is
  not there or expired then it will ask the
  database.
• Application architecture approved by Cigna and
  Aetna security specialists.
• This type of Message level security was
  implemented in days. It is implemented via
  Policy based configuration files and its
  functionality is invoked in the application code
  with only 2 extra lines of code.