The WHOSINIT database provides access control on a case-by-case basis to web server resources by group membership and individual users. It uses 128-bit session key encryption and 1024-bit RSA public key encryption to securely store sensitive files and only allow authorized users to access customized CGI programs and the information within. The access control system can handle large user populations of 500,000 cases and thousands of users, defining access down to individual users or groups. A graphical interface called WHOSINIT provides easy administration of user, group, and case access through a web-based hierarchical interface that allows real-time updates to access charts and group hierarchies.

1. Job
Opportunities
WHOSINIT
The WHOSINIT database provides access by group membership and individual user to all web server
resources.
Access control is on a case-by-case basis.
Next Generation Internal Security Capabilities
Server protected by
user/password using the 128 bit
session key encryption and
1024 bit RSA public key.
Files containing sensitive
information are stored within the
area controlled by the WWW
server.
All data/information files are
only accessible through
customized cgi programs, which
in turn allow the server to pass
the information only to the users
that hae access.
Access for individual cases can
be defined down to individual
Users or Groups, giving total
control over who can access a
file.
Access control method handles
very large case and user
populations. (500K cases &
1,000's of users).
Page 1 of 3WHOSINIT
12/27/2005http://www.lit.net/whosinit.html

2. Easy Administration of User/Group/Case Access
Graphical Interface for all internal security administration using WHOSINIT (Web Hierarchical
Operational Security:
Internal Interface).
Allows additional User Information to be maintained and used in custom cgi applications.
Secure remote server administration.
Realtime update of user access charts and group hierarchy displays.
Users or groups can be added and deleted within groups or cases through the click of a button.
Page 2 of 3WHOSINIT
12/27/2005http://www.lit.net/whosinit.html

3. Back to Top
Software & Hardware
The WHOSINIT software is available as part of the Data Miner/Image Archive web server for Sun/Solaris
platforms.
This project was sponsored by the ONDCP Counterdrug Technology Assessment Center.
Page 3 of 3WHOSINIT
12/27/2005http://www.lit.net/whosinit.html