|
|
|
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||
Road Runner All Access Pass to the Internet by CATAVAULT Catavault's patent pending Single Sign-on (SSO) technology eliminates the need for businesses and consumers to manage multiple and unique user names and passwords. Catavault’s SSO service was branded as the “All Access Pass to the Internet” which enabled access to more than 3,500 sites ranging from Amazon.com to ZDNet. Catavault licensed its SSO service was licensed to third parties such as Time Warner Cable’s Road Runner High Speed Online Service. Catavault’s service received great press reviews:
Since Spring 2001, MostlyWeb has served as Catavault’s outsourced CTO in providing many service such as system administration, database management, security and privacy provisioning and software application development. To ensure 100% uptime, MostlyWeb created an elaborate backup system with full redundancy. In the past 12 months alone, we have maintained 99.86% uptime which equals just 12 hours of downtime for system maintenance during off-peak usage hours. Remembering all those user names and passwords can be a daunting challenge. Catavault provides a handy Web site that let's you store all these sign-on credentials in a single secure place. The process is simple. You log into the Road Runner’s All Access Pass with a master authentication credential (your email address and a password) site and then from there you can automatically log into all your other password-protected sites from Amazon.com to ZDNet. Catavault has been private labeled and is currently in use by companies such as Road Runner and others. MostlyWeb was Catavault’s outsourced CTO which saved Catavault a lot of money in terms of its operations. Since March 2001, we managed all of Catavault’s servers and applications. The installation consists of a firewalls, routers, database servers, web servers, staging servers, load balancing and backup servers as well as other equipment. In addition to system administration, we have provided Catavault with development and design services as well. To say security is an important part of this site would be an understatement. As you can imagine, administering and maintaining servers that contain people's personal credentials (e.g. passwords to banking accounts, frequent flier programs, email, etc.) is very sensitive stuff. The insurance company thought so too and ordered periodic security audits by IBM. MostlyWeb has passed these audits with flying colors successfully fending off any potential threats from would be hackers. MostlyWeb created a very sophisticated system administration utility
that enables Catavault’s team to manage almost the entire backend
processes of its site. For starters, it is permissions-based which means
that Catavault can decide which of its personnel has access to selected
admin utilities. For a site that deals with such sensitive data, this
was an obvious requirement. The system admin tool allows Catavault to
add sites to the system (which considering sites have wildly varying
log-in procedures was a tricky utility), plus it lets them manage the
site's content, ads, images (including home page and secondary page
texts, FAQs, help emails, etc). Finally, we created an exhaustive array
of reports that the Catavault team uses to monitor daily usage in the
aggregate to determine what works well and what needs improvement. |
| Featured work performed for Catavault falls into the following categories: | |
|
Do-it-Yourself / CMS Catavault's CMS is unusual and it also functions as a backend do it yourself applications management tool. Due to the intense security requirements, each CMS feature can be individually assigned with permissions, sessions and audits. In addition to standard features like reporting, broadcast emails, resetting passwords, and so on, it most importantly allows Catavault to add new sites to the Catavault Network which numbers north of 3,500 and grows almost daily. Since 3rd party sites have their own unique login requirements, building a system that allows users to log-in automatically was complicated. Building a CMS that lets the client add such sites to the system was even more challenging. |
 |
Database What makes Catavault unique is that it uses a server-side database to securely and privately store users' data. Needless to say we use the highest form of security during transmission and heavily encrypt data in the database. By using a modular database, users can access their “vault” from anywhere using a PC, PDA, mobile phone or set-top box without having to constantly synchronize these devices. |
 |
System Admin Catavault takes security seriously and retains a Security Monitoring company just to make sure. To date, MostlyWeb has successfully fended off their hack attacks by staying up to date with patches and a robust system architecture. In order to port site enhancements into production without service
interruption, MostlyWeb uses development and staging servers for development
and production testing. |
 |
Security Catavault takes the security of your personal information very seriously. MostlyWeb has created, maintained and updated various systems which have been audited by security professionals to ensure that all user data is immune from penetration by unauthorized parties. For example, each time someone connects to Catavault, their data is protected by Secure Sockets Layer (SSL) technology which encrypts all communications between your web browser and Catavault's servers. Catavault's SSL certificate was issued by Thawte, a VeriSign subsidiary, ensuring the safety and integrity of your data. You can learn more information about Catavault's SSL certificate by clicking on the Thawte logo on this page. Once the user’s data is received by Catavault's servers, it is immediately encrypted before it is stored in the Catavault databases. With MostlyWeb’s assistance, Catavault uses proprietary techniques to ensure that only you, the end-user, can decrypt this data. No Catavault employee has the authorization or the capability to decrypt and view your personal information. As an added measure of security, Catavault along with MostlyWeb employ a multiple-tiered architecture with redundant firewalls that prevent penetration by outside parties. We use IBM Internet Emergency Response Service to audit the security of our network. |
| View Site >> | |
