EC DB NET
European Commission Data Base Network
The objective of this project is to set up a database network to
provide an easy access to the databases EC DB
Tool (located at the Unterwassertechnikum Hannover des
Instituts für Werkstoffkunde Universität Hannover
http://blye.uwth.uni-hannover.de:8088
) and EC DB Cost (located at
NIS - Hannover
http://www.nis-hanau.de:2222/dbcost/start.html
) within the European Union.
The work, which started in 1997 and is due for completion in the end of 1998, is funded by the European Commission in the project "Set-up of an infrastructure for a EU-wide use of the databases EC DB COST and EC DB TOOL (EC DB NET) (FI4D-CT96-0010)".
In addition information pages for the World-Wide-Web are being developed to give the public an understanding of the subject "Decommissioning of Nuclear Installations".
Furthermore the data collection is to be intensified through the partners. The collaborating partners are the Unterwassertechnikum Hannover (UWTH) des Instituts für Werkstoffkunde, Universität Hannover (Co-ordinator), Belgoprocess, DETEC Decommissioning Technologies GmbH, SCK•CEN, Lentjes mce and the NIS Ingenieurgesellschaft mbH.
At the heart of the concept chosen is a 'client-server' configuration.
It consists of two or more computers working together. One computer, the server, performs the job of co-ordinating access to the ORACLE database, the other computer, the client, servers the application user.
The communication between the server and the client computer(s) is established via Internet.
In the ORACLE-software solution chosen the user interface does no longer run as a form module binary on the client that has to be generated for each operating system, instead the user interface will be send upon a database logon to the client as a programme (Java Applet) that is executed by a Web Browser. Thus the only software that has to be installed and started on the client is a Java capable Web Browser.
Aside from tremendous advantages concerning database administration and development this future-oriented concept enables the database user to work immediately with the latest software updates, the user does not have to re-install software each time the application has changed.
Several security aspects have to be considered when establishing a database network and when transmitting data via Internet. These are :
The work, which started in 1997 and is due for completion in the end of 1998, is funded by the European Commission in the project "Set-up of an infrastructure for a EU-wide use of the databases EC DB COST and EC DB TOOL (EC DB NET) (FI4D-CT96-0010)".
In addition information pages for the World-Wide-Web are being developed to give the public an understanding of the subject "Decommissioning of Nuclear Installations".
Furthermore the data collection is to be intensified through the partners. The collaborating partners are the Unterwassertechnikum Hannover (UWTH) des Instituts für Werkstoffkunde, Universität Hannover (Co-ordinator), Belgoprocess, DETEC Decommissioning Technologies GmbH, SCK•CEN, Lentjes mce and the NIS Ingenieurgesellschaft mbH.
At the heart of the concept chosen is a 'client-server' configuration.
It consists of two or more computers working together. One computer, the server, performs the job of co-ordinating access to the ORACLE database, the other computer, the client, servers the application user.
The communication between the server and the client computer(s) is established via Internet.
In the ORACLE-software solution chosen the user interface does no longer run as a form module binary on the client that has to be generated for each operating system, instead the user interface will be send upon a database logon to the client as a programme (Java Applet) that is executed by a Web Browser. Thus the only software that has to be installed and started on the client is a Java capable Web Browser.
Aside from tremendous advantages concerning database administration and development this future-oriented concept enables the database user to work immediately with the latest software updates, the user does not have to re-install software each time the application has changed.
Several security aspects have to be considered when establishing a database network and when transmitting data via Internet. These are :
| Network Security | Data must not be disclosed or modified during transmission |
| Server Security | Only authorized users have access to the database |
| Client Security | Java Applets must not be able to access files or execute programmes on the client that they are not authorized for |
| Data Security | Only the user who inserted the data record may update or delete that record |
Transmission security is established by
scrambling and unscrambling the data using the Public-Key-Encryption.
In addition the server uses a digital certificate that authenticates itself before the transaction can proceed. This certificate is obtained from a third party. The client on the other hand authenticates itself by a username/password combination that is encrypted before sending it across the Internet (digest authentication).
Data security is established by recording the username and record number in a protocol table which is queried upon any attempt to change a record in EC DB Tool or EC DB Cost.
Deletion or update is neglected when the username for that record does not match the user logged in.
Thus only the user who inserted the data record will be able to update or delete it.
In addition the server uses a digital certificate that authenticates itself before the transaction can proceed. This certificate is obtained from a third party. The client on the other hand authenticates itself by a username/password combination that is encrypted before sending it across the Internet (digest authentication).
Data security is established by recording the username and record number in a protocol table which is queried upon any attempt to change a record in EC DB Tool or EC DB Cost.
Deletion or update is neglected when the username for that record does not match the user logged in.
Thus only the user who inserted the data record will be able to update or delete it.
Web Server connection to EC DB Tool and EC DB Cost
Network Security
Data Security
Authors : G. Schreck, M. Hüske
Unterwassertechnikum Hannoverdes Instituts für Werkstoffkunde
Universität Hannover