UniOTP Management System: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
No edit summary
No edit summary
Line 68: Line 68:


[[Image:uniotpmgs img15.jpg|370px]]
[[Image:uniotpmgs img15.jpg|370px]]
<p>User added successfully</p>
[[Image:uniotpmgs img16.jpg|370px]]
== User Status change ==
<p>You can perform settings about user status using this section, report a token a lost, cancel the lost report, or permanently remove the token and related operations.</p>
[[Image:uniotpmgs img17.jpg|370px]]
<p>The picture below shows the user status change page (only supports user ID to perform operations on user status)</p>
[[Image:uniotpmgs img18.jpg|370px]]
== Repair a token ==
<p>For certain reasons, the token can get disabled. In this case, you can try to perform token reparation operation in order to re-enable the token. Refer to the picture below to enter the token reparation interface.</p>
[[Image:uniotpmgs img19.jpg|370px]]
<p>You need to provide two consecutive dynamic passwords in order to synchronize the token.</p>
[[Image:uniotpmgs img20.jpg|370px]]
<p>Token reparation successful</p>
[[Image:uniotpmgs img21.jpg|370px]]
<p>If the two dynamic passwords are not consecutive, or if it exceeds a certain range, the reparation will fail.</p>
[[Image:uniotpmgs img22.jpg|370px]]
== Add an operator ==
<p>This interface is used to add new operators in the system, the user added should not be higher than the operator privilege level, and otherwise the operation will fail.</p>
[[Image:uniotpmgs img23.jpg|370px]]
<p>The picture below shows the add operator page, you need to provide operator first and last name,password, operator privilege level.</p>
[[Image:uniotpmgs img24.jpg|370px]]
<p>If the operation succeeds, the following message will be returned, displaying the OperatorID that you need to use for login, This ID is used by the operator to log in the system.</p>
[[Image:uniotpmgs img25.jpg|370px]]
<p>If privilege is not sufficient, you will get the following error message.</p>
[[Image:uniotpmgs img26.jpg|370px]]
== Delete an operator ==
<p>This interface is used to delete an operator from the database, but your privilege level needs to be higher than the operator you are deleting. Refer to the picture below enter this interface.</p>
[[Image:uniotpmgs img27.jpg|370px]]
<p>Like shown in the picture, you can delete an operator using his operator ID. You can also delete a range of operators from a specific ID to a specific ID.</p>
[[Image:uniotpmgs img28.jpg|370px]]
<p>If you don’t have sufficient privilege to delete the operator, you will get the following error message.</p>
[[Image:uniotpmgs img29.jpg|370px]]
<p>If the operation succeeds, the following message will be displayed.</p>
[[Image:uniotpmgs img30.jpg|370px]]
== Operator information search ==
<p>With Operator information search interface, you can perform search concerning operators, access this page from the left menu or using the shortcut icon in the main panel.</p>
[[Image:uniotpmgs img31.jpg|370px]]
<p>You can indicate the operator ID to search for information concerning this operator, or you can also indicate a specific range of operators to search for all operators that have privilege level inferior to the current operator.</p>
[[Image:uniotpmgs img32.jpg|370px]]
<p>For example, if you enter 1000000001 for the operatorID and click “Submit”, information about the operator having for ID “1000000001”( As 1000000001 stands for Super OperatorID, you need to be super operator to be able to see this information). You can use the icon in front of the operator ID to delete the operator, of course, if your privilege level is lower than the user you want to delete, the operation will not succeed.</p>
[[Image:uniotpmgs img33.jpg|370px]]
<p>Search for operator ID in a specific range:</p>
[[Image:uniotpmgs img34.jpg|370px]]
== Token/User batch import ==
<p>Token/User batch import interface allows the service provider to import many tokens information at once inside the database, it also can import many users bound to a token at once inside the database. Refer to the picture below to enter the corresponding interface.</p>
[[Image:uniotpmgs img35.jpg|370px]]
<p>In order to import Token files, you need to provide decryption keys for those files, there is no decryption key function for user import. The extension for token files and user information files is “.unif”.</p>

Revision as of 15:23, 25 April 2012


Introduction

UniOTP Management System is a web-based management system, using this system you can perform administration and maintenance operations concerning dynamic password system information such as user information, token information, operator information, log information etc.

The system has different levels of privileges, protecting user information.

Operator login

On the login page, in the OperatorID field enter the operator ID and, in the Password field, enter the corresponding password. Press “Submit”. The default Operator ID for super operator is 1000000001, the default password is 123456.

If operator ID and password are correct, you will be able to access the administration interface main page. (An error will be displayed in the case operator ID or password is wrong)

Choose the action to perform from the menu on the left or from the shortcut icons in the main panel.

Log out the system

To log out the system, please use the button “Exit System” as shown in the picture (For security purposes, please always use this method to exit the system)

File:Uniotpmgs img03.jpg

Change Password

Use the menu on the left or the shortcut on the main panel (icon with a red box on the picture) to enter operator password management section.

In the password administration interface, in the “OldPassword” field, enter the current password, in the ”NewPassword” and “confirm” fields, enter the new password and click “Submit” to confirm the change.

Success


Failure

File:Uniotpmgs img07.jpg

By clicking the icon shown in the picture, you can enter user search interface.

Using user UserID, you can perform a precise. Using Username, you can search for all usernames containing a certain character string.

For example, if you enter “US20110127002” in the UserID field, you perform a search concerning information of the user having for ID US20110127002, modify or delete user or his information.

If you enter “t” in the Username field, you will see information about all users whose username contains a “t”, you can choose the user you want to manage, modify or delete the user or his information.

Add a User

Refer to the icon on the picture to perform user related information.

In order to add a user, you need to provide a unique username, a unique User ID, phone number, the token serial number that you want to allocate to this user, user mail address, user static PIN, authentication method (We recommend to user the more secure OTP+PIN authentication method), Username and system UserID can be used together to perform binding, the token serial number has to be a valid serial number.

If you enter an invalid token serial number, you will get the error message below.

Fill in valid user information and click “Submit”.

User added successfully

User Status change

You can perform settings about user status using this section, report a token a lost, cancel the lost report, or permanently remove the token and related operations.

The picture below shows the user status change page (only supports user ID to perform operations on user status)

Repair a token

For certain reasons, the token can get disabled. In this case, you can try to perform token reparation operation in order to re-enable the token. Refer to the picture below to enter the token reparation interface.

You need to provide two consecutive dynamic passwords in order to synchronize the token.

Token reparation successful

If the two dynamic passwords are not consecutive, or if it exceeds a certain range, the reparation will fail.

Add an operator

This interface is used to add new operators in the system, the user added should not be higher than the operator privilege level, and otherwise the operation will fail.

The picture below shows the add operator page, you need to provide operator first and last name,password, operator privilege level.

If the operation succeeds, the following message will be returned, displaying the OperatorID that you need to use for login, This ID is used by the operator to log in the system.

If privilege is not sufficient, you will get the following error message.

Delete an operator

This interface is used to delete an operator from the database, but your privilege level needs to be higher than the operator you are deleting. Refer to the picture below enter this interface.

Like shown in the picture, you can delete an operator using his operator ID. You can also delete a range of operators from a specific ID to a specific ID.

If you don’t have sufficient privilege to delete the operator, you will get the following error message.

If the operation succeeds, the following message will be displayed.

With Operator information search interface, you can perform search concerning operators, access this page from the left menu or using the shortcut icon in the main panel.

You can indicate the operator ID to search for information concerning this operator, or you can also indicate a specific range of operators to search for all operators that have privilege level inferior to the current operator.

For example, if you enter 1000000001 for the operatorID and click “Submit”, information about the operator having for ID “1000000001”( As 1000000001 stands for Super OperatorID, you need to be super operator to be able to see this information). You can use the icon in front of the operator ID to delete the operator, of course, if your privilege level is lower than the user you want to delete, the operation will not succeed.

Search for operator ID in a specific range:

Token/User batch import

Token/User batch import interface allows the service provider to import many tokens information at once inside the database, it also can import many users bound to a token at once inside the database. Refer to the picture below to enter the corresponding interface.

In order to import Token files, you need to provide decryption keys for those files, there is no decryption key function for user import. The extension for token files and user information files is “.unif”.