System stability

While developing the system we paid great attention to failure tolerance of the system. System stability is ensured due to the following factors:

Regular backup data copying, each 24 hours, involving transmission of data to third server for storage
Duplicating of critical information on a satellite and central servers
Use of RAID-1 to ensure fault tolerance for data storage devices.
Constant monitoring of server condition and informing of competent personnel about possible problems
Possibility of hot swapping of a satellite in case of failure (maximum possible losses constitute not more than 6 hours of statistics, recovery time constitutes 2-3 hours)

System security

When developing the system we paid great attention to security fetch protection and human-factor errors:

Journalizing of all operations with the purpose of further recovery in case of human-factor error.
Availability of firewalls on all subsystems (which allow access to server services only from a limited number of addresses)
Absence of critical data on the partner’s server which represents that part of the system which is prone to external attacks.
Separation of access rights for the service staff of the system.
Access to the central server is available only from a limited list of IP addresses.
Data synchronization between the partner’s server and the central server is executed using encryption technologies based on SSL.
Service support informing about attempts to reroute executive programs.
WEB server protection against possible use of hacking technologies based on SQL Injection by means of IIS Lockdown Tool (http://www.microsoft.com/technet/security/tools/locktool.mspx)
Use of URL Rewrite technology to conceal details of system functioning.
Prepaid access cards key security (one chance in a million to find a matching combination). Location of attempts to find a code and access blocking by IP address or user-agent.
Coding of open keys for prepaid access cards and user passwords using “md5” algorithm; possibility of their decoding is excluded.

Access rights separation among system service staff ensures additional security of the system:

Content managers - have access only to content management.
Partner - has a possibility to view statistics of card activation and content orders.
System organizer – has access to partners’ statistics
Partner’s support service – can change details of card activation and content orders.
Organizer’s service staff – controls technical settings.