Forward: This turned out to be an ad, but it was sincerely started as a
helpful suggestion.  It's tough to offer solutions to problems without
sounding like you're hawking warez...  Thanks for bearing with me.

I have no idea if this will help yet, but NebulaSecure is a component which
was just written for NebulaPay payment processing software.  The intent was
to eliminate, over a local intranet, the need for certs and other
complexities of SSL, at least for the v1.0 of our software.  Make no
mistake, the credit/debit card data going over the internet is fully
protected with 1024 bit encrypytion, but over the local network we just
wanted enough security to keep data away from prying eyes, and to simplify
the local admin requirements.

NebulaSecure protects any text data between the MV app and a remote client.
You call a program, get the encrypted data, pass it however you want to the
remote VB program which runs a compatible decryption algorithm.  The same
function is performed in reverse.  It's very elegant, and I will provide
limited insight into the encryption mechanisms to confirm to curious
colleagues that it's cryptographically secure as well.  We intend to release
periodic modules over time which include completely different encrpyption
algorithms, in case any specific ones are cracked.  The application code at
both ends need not be concerned with which algorithm is being used, that
negotiation is handled internally. Compromised algorithms will simply be
retired.

Related to UniObjects, this won't work with the Read/Write methods which
work on raw data.  It could only be used through a Subroutine.Call
operation, where the args to/from the sub are encrypted strings.  Consider
that not all data needs to be secure, so this might be a good for sites
where VPN or IPSEC aren't practical.  Encrypting too much can be create a
performance burden as well.

NebulaSecure is in Beta as part of NebulaPay, but will be available as a
separate product offering in September.  All of this code is currently
available only for D3 and mvBASE, but I trust some U2 sites need to process
credit cards too, and plan to port within the next couple months.  For more
information:
http://antispamtextNebula-RnD.com/products/financial.htm

Thanks.
Tony
Nebula R&D
[EMAIL PROTECTED]

David Jordan wrote:

> Thank for this.  Unfortunately ODBC, telnet & java objects are
> encrypted, but not uniobjects for VB.  I wonder if the .Net provider
> will be encrypted. 
> 
> Regards
> 
> David Jordan

>From HENDERSON MICHAEL
> UV 10.1 supports the use of SSL to protect the data flows between
> client & server, and according to a post from LeRoy Dreyfuss (in
> early June, check the list archives if you need to) UniAdmin 10.1
> will help to walk you through the certificate set-up process.
-------
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to