Fun gym Cambridge Nationals R001

Intranet A computer network that uses the same technology and protocols as the Internet but is restricted to certain users. A business may have an Intranet which is only available to their employees. It is an internal, secure environment which operates using a LAN. It provides an interactive custom environment where people within the business can access key company documents as well as share information, fix appointments with each other and circulate important documents internally.

Internet - Website Fun Gym has a website which is their main form of advertising. It allows the gym to: Communicate with members 24/7 Advertise classes and special events so members are fully informed Take bookings for classes with specific instructors The internet provides the facilities to enable members to: Log on to their account Book their classes online Access the ‘news’ section of the website to view photographs and features on instructors, members and special events

Web 2.0 Technology Web 2.0 technology supports member participation, where they can communicate with the leisure centre by reading from and writing to the website. Members can communicate and book classes with the gym by interacting with the website. Web 2.0 technologies offer: Dynamic web content where the member can: Log on to the website after they have registered Contribute to the gym interactive features Book classes or update their contact details online RSS feeds – to keep up to date with the latest changes or content on websites Two-way communication

Web 2.0 technologies - blogs Blogs can be used to provide information to members on a regular basis: Information – keeping members informed and helping to motivate them to use the facilities or classes Communication – members can reply to a particular blog post or ask a question; the gym team can then respond and give further information Promotion – social media links can be used to share blogs with friends, which helps to promote the gym

Web 2.0 technologies - communication Web 2.0 technologies can be used for communication between the gym and its members. Benefits to Fun Gym are: Efficiency – online communication is efficient as instructors may be in different gyms throughout the day Cost saving – communication using website promotes a more paper-free approach Benefits to members are: Availability – members can communicate with the gym at a convenient time for them as the service is available 24/7 Less frustration – members do not have to spend a long time in phone queues or using automated messaging services

Restricting access – Single-factor authentication Single-factor authentication (SFA) is where the user can obtain access to an account or service using one factor such as a username and password. Risky if same password used for many applications Recommend using unique password for each application

Restricting access – Two-factor authentication Two-factor authentication is a security method by which users obtain access by providing two separate factors to identify themselves. Three different types of factors that can be used for authentication are: Knowledge factor – knowing a password / PIN number Possession factor – owning a membership card / mobile Biometric factor – human characteristic fingerprint/DNA

Restricting access – Two-factor authentication Mobile transaction numbers (mTANs) example Member needs: Password (knowledge) Mobile phone (possession) This simple method of two-factor authentication would be suitable for Fun Gym, as members only need knowledge of their password and possession of one of the following: Their laptop/tablet computer and their mobile phone Their smartphone for direct login Member enters username and password into Fun Gym login page Fun Gym receives login request from member and texts security code to member’s mobile phone Member then enters the security code to log in to the website

Further Security Password advice Use strong passwords with a mixture of numbers, letters, symbols and lower/upper case Change passwords regularly Access rights – set up by system administrator to limit network access to relevant files only for a user Encryption – used to make stored data more secure, by making it unreadable to people who do not have the key to decode it

Validation & verification Validation – It is important that when members are logging on to the Fun Gym website, validation checks are in place so members can log in correctly Verification – This involved ensuring that the data that is entered is verified and correct

Validation checks Type Check – checks something of the correct type is entered. E.g. a date in a date field, a number in a number field etc. Range Check – checks something is within a specific range. E.g. an order quantity is between 1 and 10, > 18years old, or <21 etc. Presence Check – checks that something is there. E.g. Mandatory field. Makes sure REQUIRED fields are entered. Format Check – checks what is entered is of the correct structure. E.g. Postcode (LLNN NLL) E.g. TS23 3DX. E.g. a phone number is STD: NNNNN Num: NNNNNN Length Check – Ensures that information is of a specified length. For example a name field may be more than 2 characters. If it is less it would not be accepted.

Verification This is used to ensure data is as accurate as possible. Verification means to check the data that you have entered against the original source data.  How is this done? Entering the data twice (e.g. PASSWORDS).- Double Keying Double Checking (Proof reading) Verifying you are a human to prevent BOTS or AUTOMATED SIGN UPS by using CAPTCHA.

Example – What checks? Type Check Range Check. Presence Check Format Check Double Entry (Verification) Captcha Code (Verification) What other ways of validating are on here? Dropdown lists (force to pick from a set of options) Male OR Female options (one or the other).