Secure Me Component

 Key Features

Pre-Built Logon Screen

A built-in logon screen can be called from code at any time to authenticate the user in your system. The logon screen can be customized via properties or even policies by your users. You can also create your own custom logon form and just add the proper code, a sample is included on how to do this.

Role Based Security

SecureMe is based on roles, this means that you define all users and then create specific roles to which these users will be assigned. The authorizations or rights will be granted to roles, and users will obtain these authorizations depending on what roles are assigned to them. This allows to quickly add new users without having to re-assign authorizations.

Database

SecureMe needs to stores its information in a data source, which can be any OLEDB data source or SQL Server database. When using the component you can choose which type of data source you want to use by setting a property. 

Encryption

SecureMe Encrypts all sensitive data using one of two methods of encryption, MD5 or SHA1. SecureMe contains code to generate unique encrypted strings for values, even if the values are the same. This means that two users with the same password will have two different encrypted strings. SecureMe contains built-in mechanisms that prevent copying one user's password to another manually in the database; it will detect this and prevent the user from logging in, so even if the database is compromised the attacker will not be able to compromise the user’s passwords.

SecureMe also encrypts authorization information, so that a user can not manually grant himself rights by modifying the database.

Policies

SecureMe contains eleven preprogrammed security policies that can be modified from the built-in security console.  Policies like password history, password complexity and minimum password length will allow you to increase or decrease the level of security of your application just by modifying a few settings. The included security console allows your own users to modify your application's policies at any time.

Custom Fields

SecureMe allows the developer to specify Custom Fields for users, allowing furthering extending the data that can be stored on a user’s account. Custom fields can be added via code at any time and you can specify data types for them. They do not require database modifications.

Wizard

 SecureMe Wizard automatically generates a C# or VB.NET class file that contains all the code necessary to start using the component. This class includes settings like hash keys and salt values, authorization lists, custom fields and everything you configure on the wizard. The wizard will also create all the tables and stored procedures required by the component in the target database. Using the wizard will help you speed up the implementation of the component, by avoiding manual coding; you just create the proxy file and include it in your project.

Links