E-business requires security
May 2003
What are the big concerns that many
customers have when it comes to establishing a mobile ERP
link over the Internet?
Unlike networking locations with secure connections (such
as over a VPN), heightened security concepts are needed when
linking an ERP solution to the Internet. A user name and password,
coupled with encryption and SSL transmission, provide a considerable
degree of security. However, this approach has its limitations
when security mechanisms are tapped-and analysed. How are
so-called sniffers - whose aim is to analyse data streams
in order to determine codes - detected and stopped?
The banks were the forerunners here as well. The transfer
of passwords and codes over the Internet, for example, is
completely eliminated, as the security verification process
doesn-t run on the application server, but locally on the
user-s client.
To this end, e-business applications such as CANIAS should
support e.g. code card based user verification and only grant
client-side access to the application when the local verification
process has been completed.
IAS concepts, however, provide an entire range of additional
application possibilities here. Once the relatively small
investment for card-based verification has been made, access
as well as all user right assignments in the application can
be managed. As such, sensitive areas right through to signature
and approval processes that are linked to database information
(such as division assignment, offer and order amounts) in
an ERP system can be individually planned and coordinated
with respect to access and rights using this technology.
Working together with long-term business partner KOBIL Systems,
IAS has expanded and successfully tested this know-how. The
true strength of the ERP system firm lies in comprehensive
ERP consultation, security-related issues and mobility concepts
based on innovative JAVA technologies. In the next 4 to 6
weeks, the experts will be upgrading the first customer reference
installation with this technology.
Karlsruhe, Germany 23.05.2003
|
printable-version