Thursday, March 31, 2011

Bravo Security - Encryption - Platform - Windows - .Net - more...

Written for Technically minded reader:



For encrypting transmissions between the client and the server,
in production we use 128-bit SSL.  The Bravo client talks to the data
center servers over 128-bit SSL (https).  The client-facing DC servers are
a series of hardware load-balanced servers, each running web services under
IIS.  This allows for an N-tier architecture which provides both
scalability and fault-tolerance.  The backend web servers run WCF web
services behind a firewall that provide the business logic layer (stateless
business objects).  Behind his layer, the business object servers talk to
the database, which is a MS SQL-Server Enterprise 2008 R2 cluster.  For
disk level encryption in SQL server, we use AES-256 encryption (with a dynamic
key) for all customer sensitive information (Personally Identifiable
Information).  
Bravo is written in WPF, .Net 4.0, and C#.   We chose
the .Net framework because there are a large number of engineers that know this
technology and it is a mature platform, having been use now for more than 8
years.   We also like the platform’s maintainability, scalability,
and support of MS Windows operating systems.  Most Point-of-Sale systems
run on inexpensive MS windows PC’s. 

Written by Kelly York