Enhanced Security Model for Information and Online Transaction Processing System Using Mandatory Access Control MAC Mechanism

This research presents a set of patterns appropriate for securing information in an online transaction processing system. The research also shows how security constraints can be added to the domain model by using mandatory access control MAC . The system developed created three different access levels which include e platform administrator, the payment gateway administrator and the customers. Each of the users on the platform has limited access areas and this was achieved by applying mandatory access control technique. Security constraints were added to each of the component patterns to produce a domain model for secure e commerce. The research utilized a security feature called Role Based Access Control RBAC . In the RBAC pattern, users are assigned to the roles according to their tasks or jobs and rights are assigned to the roles. In this way, a need to know policy can be applied, where roles get only the rights they need to perform their tasks. The software developed utilized the mandatory access control MAC as a security mechanism for the online transaction processing which involves product ordering, payment using credit card, and product information management. The system is very robust and MySQL database was used at the back end. Enukpere, Victor Efe | Oweh Victor "Enhanced Security Model for Information and Online Transaction Processing System Using Mandatory Access Control (MAC) Mechanism" Published in International Journal of Trend in Scientific Research and Development (ijtsrd), ISSN: 2456-6470, Volume-8 | Issue-4 , August 2024, URL: https://www.ijtsrd.com/papers/ijtsrd67119.pdf Paper Url: https://www.ijtsrd.com/engineering/computer-engineering/67119/enhanced-security-model-for-information-and-online-transaction-processing-system-using-mandatory-access-control-mac-mechanism/enukpere-victor-efe