Wiki source code of Information security
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
 |
1.1 | 1 | (% class="lead" %) |
| 2 | Information security of the Loymax System includes a number of tools and methods for secure data handling. | ||
| 3 | |||
| 4 | (% class="box warningmessage" %) | ||
| 5 | ((( | ||
| |
4.1 | 6 | Information provided in this section is for guidance only. To ensure protection of your customer data and operations, it is recommended to utilize ALL the security measures listed in this section. Otherwise, Loymax is not responsible for any possible information leakage. |
| |
1.1 | 7 | ))) |
| 8 | |||
| |
4.1 | 9 | All mentioned means are aimed to protect personal data of customers and users of the System, ensuring secure data exchange between the server and end users without any loss or data interception. In this respect, each person involved in the process is granted access to the specific data they are allowed to get and are prevented from obtaining any data they should not have. Only precise and reliable information about customers, purchases, and other transactions is stored in the System. |
| |
1.1 | 10 | |
| 11 | == Data protection at the start == | ||
| 12 | |||
| |
4.1 | 13 | Before launching the Loyalty Program (LP) and issuing cards, it is recommended to perform the following settings that will help to protect you and your customers from leakage of confidential information: |
| |
1.1 | 14 | |
| 15 | (% style="width:auto" %) | ||
| 16 | |(% style="border-color:white; width:451px" %)((( | ||
| |
4.1 | 17 | ((( |
| 18 | (% class="box infomessage" id="HUseacomplexalgorithmtogeneratecard2Fcouponnumbers" %) | ||
| 19 | ((( | ||
| 20 | **Use a complex algorithm to generate card/coupon numbers** | ||
| |
1.1 | 21 | ))) |
| |
4.1 | 22 | ))) |
| 23 | )))|(% style="border-color:white; width:1039px" %)Each card number must be unique and consist of 15-16 digits formed by a special algorithm. Read our [[recommendations on generation of card number templates>>doc:Main.Using.MMP.Admin_panel.Cards_issue.Card_issue_recommendations.WebHome]]. Loymax system, in turn, ensures that cards are issued upon registration in such a way that one card can belong to only one customer. | ||
| |
1.1 | 24 | |(% style="border-color:white; width:451px" %)((( |
| |
4.1 | 25 | ((( |
| 26 | (% class="box infomessage" id="HSetcriticallimits" %) | ||
| 27 | ((( | ||
| 28 | **Configure the most important limits** | ||
| |
1.1 | 29 | ))) |
| |
4.1 | 30 | ))) |
| |
1.1 | 31 | )))|(% style="border-color:white; width:1039px" %)((( |
| |
4.1 | 32 | We have pointed up several limits that we [[recommend configuring in the first place>>doc:Main.Using.MMP.Admin_panel.Limits.WebHome]]. This will help to prevent misuse by employees of points of sale (POS) and customers, fraudulent actions with the data of LP Members, and associated potential financial losses. |
| |
1.1 | 33 | ))) |
| 34 | |(% style="border-color:white; width:451px" %)((( | ||
| |
4.1 | 35 | ((( |
| 36 | (% class="box infomessage" id="HConfigurecaptchainPersonalAccountonthewebsite" %) | ||
| 37 | ((( | ||
| 38 | **Set up captcha in the Personal Account of the website** | ||
| |
1.1 | 39 | ))) |
| |
4.1 | 40 | ))) |
| |
1.1 | 41 | )))|(% style="border-color:white; width:1039px" %)((( |
| |
14.1 | 42 | To enhance security against hacking, customer authorization in the Personal Account on the website can be protected by the [[invisible captcha>>path:/xwiki/bin/view/Main/Installation_and_configuration/Personal_account_configuration/Invisible_captcha/]] that identifies user behavior and delivers additional verification tasks if any suspicious actions are detected. |
| |
1.1 | 43 | ))) |
| 44 | |||
| |
5.1 | 45 | == Additional ways to protect information: == |
| |
1.1 | 46 | |
| 47 | (% style="width:80%" %) | ||
| 48 | |(% style="border-color:white; width:48%" %)(% class="box" %) | ||
| 49 | ((( | ||
| |
15.1 | 50 | == [[Authorization protection>>doc:Main.General_information.Information_security.Authorization_protection.WebHome]] == |
| |
1.1 | 51 | |
| |
5.1 | 52 | * OAuth authorization |
| 53 | * Single access point to the System | ||
| 54 | * Allocation of access rights | ||
| |
1.1 | 55 | )))|(% style="border-color:white" %)((( |
| 56 | (% class="box" %) | ||
| 57 | ((( | ||
| |
17.1 | 58 | == [[Protection of processing against external attacks>>doc:Main.General_information.Information_security.External_attacks_protection.WebHome]] == |
| |
1.1 | 59 | |
| 60 | * Using captcha | ||
| 61 | * Access limits | ||
| |
5.1 | 62 | * Protection against DDoS attacks and hacking |
| |
1.1 | 63 | ))) |
| 64 | ))) | ||
| |
5.1 | 65 | |(% style="border-color:white" %)(% class="box" %) |
| |
1.1 | 66 | ((( |
| |
20.1 | 67 | == [[Server data protection>>doc:Main.General_information.Information_security.Server_data_protection.WebHome]] == |
| |
1.1 | 68 | |
| |
5.1 | 69 | * Operations logging |
| 70 | * Data backup | ||
| 71 | * Protection against unauthorized access and copying | ||
| 72 | * Regular data cleanup | ||
| 73 | )))|(% style="border-color:white" %)(% class="box" %) | ||
| |
1.1 | 74 | ((( |
| |
21.1 | 75 | == [[Compliance with legislation>>doc:Sandbox.Enforcement_of_legislation.WebHome]] == |
| |
1.1 | 76 | |
| |
5.1 | 77 | * Age limit for registration in the Loyalty Program |
| |
12.1 | 78 | * Age policy |
| 79 | * Public offer and processing of personal data | ||
| |
5.1 | 80 | * Minimum Retail Price (MRP) limits |
| 81 | * Verification of phone numbers | ||
| |
1.1 | 82 | ))) |
| 83 | |(% style="border-color:white" %)((( | ||
| 84 | (% class="box" %) | ||
| 85 | ((( | ||
| |
19.1 | 86 | == [[Operations safety>>doc:Main.General_information.Information_security.Safe_operations.WebHome]] == |
| |
1.1 | 87 | |
| |
5.1 | 88 | * Two-phase operations |
| |
7.1 | 89 | * Limits for operations with bonus accounts |
| 90 | * Confirmation for bonus points deductions | ||
| 91 | * Card blocking | ||
| |
1.1 | 92 | ))) |
| 93 | )))|(% style="border-color:white" %)(% class="box" %) | ||
| 94 | ((( | ||
| |
18.1 | 95 | == [[Protection of data transmission>>doc:Main.General_information.Information_security.Protection_of_data_transmission.WebHome]] == |
| |
1.1 | 96 | |
| |
5.1 | 97 | * Encrypted data transmission channel |
| 98 | * Digital signature | ||
| 99 | * Card number masking | ||
| 100 | * Impersonal error wordings | ||
| 101 | * Backup communication channels | ||
| |
1.1 | 102 | ))) |