ITCITCInformation Center Information Center

& & PIN SecurityPIN Security

United States Power SquadronsNational Meeting 2010

Orlando, Fl.

P/C Daniel Bartell, SNShallotte River PSdtb@usps.org

The Information The Information CenterCenter

Its all about

DATAwww.usps.org/national/tools

orwww.usps.org/info

2

Web Server IC Web Server IC DatabasesDatabasesReloaded Daily

• Membership• Dues (used for X-member and Past Due)• Job Assignment (National, District, Squadron)Validated Daily• Squadron/District ProfilesUnique• Heraldry• Zip-codes• Committees

3

Reloaded Daily DatabasesReloaded Daily DatabasesMembership – Subset of all HQ data• Loaded from HQ about 0700 EST• Changed Email Addresses are validated• Email Bounces update db & HQ Real Time• HQ update sources: HQ staff, DB2000• Online Real Time db & HQ updates

availableDues – Used for X-Member & Past Due Lists• Loaded from HQ about 0700 EST• IC use is secondary to Membership

4

Reloaded Daily DatabasesReloaded Daily Databases

Jobs (National, District, Squadron)• Loaded from HQ about 0700 EST• HQ Update sources: OD1/2, Online OD1/2,

DB2000 OD1/2, HQ229• Online Real Time db & HQ updates for

certain jobs (Roster Contact, Information Technology Contact, and Public Contact)

• Audits are run for RC, IT, and PC changes

5

Validated Daily DatabasesValidated Daily DatabasesSquadron/District (includes retired squadron history)• Maintained on the server by ITC Staff, validated

against HQ at 0700• RC, IT, and PC Contacts are checked for valid email

addresses 4 times a month• Selected data updates allowed online with password• Squadron Names (including Sail &) checked against

HQ• Unique data: Website URL, Conformance, Public

Contact Data, Online Roster Management, Location and Area Description, Burgee/Flags, Heraldry

6

Unique Server DatabasesUnique Server DatabasesHeraldry• Maintained by the Historian Committee• Form for sending updates online availableZip – Code (Tiger-zip)• Automatic maintenance• May be updated by ITC Staff• Audits against membership twice a monthCommittees – Need some additional work• Mirrors squadrons/districts based on jobcodes• Updated by ITC or by R/C or Stf/C

7

So what can we do with the So what can we do with the data?data?

Run Queries using SQL?• Select first, last, email, estatus from members

where account=“5435” and estatus > “4”;• Select sjjbs.certno, sjjbs.jobcode, sjjbs.year,

y.jdesc from sjjbs, members as x, sjdesc as y where x.account = “5435” and x.certno = sjjbs.certno and y.jobcode = sjjbs.jobcode order by sjjbs.certno, sjjbs.year;

Much too complicated, unsafe, needs interpretation, needs formatting, needs to be secure = WRONG APPROACH!

8

Information Center Information Center ObjectivesObjectives• Provide online information access to everyone.

What you see depends on jobs held.• Provide access by human interface values not

just machine values – Name (or partial Name) vs Certificate Number or Account Code.

• Provide information and reports most needed at squadron, district and national levels.

• Provide the ability to easily update information online or via email requests.

9

Information Center Information Center ObjectivesObjectives• At the squadron level function as

“DB2000 for Dummies”. Providing formatted organizational list, squadron lists, rosters, telephone lists, lists of X-members, etc. from any online PC.

• For the individual member the ability to view and update their own information and to view information about others.

• At the national level provide the online equivalent of the National Directory.

10

Who can view or update Who can view or update what?what?

• The public or those not logged on have a very limited access.

• Members logged on can view most information about members of their squadron and all information about their squadron.

• Members not holding squadron, district or national jobs may only view limited information about other squadron members and other squadrons. They can use the “contact mailer” to send other members email.

11

Who can view or update Who can view or update what?what?

• Holders of squadron jobs may view all information about squadron members and may update email addresses of other squadron members.

• Squadron job holders may update their squadron profile and roster profile information if they have their “updater” password.

12

Who can view or update Who can view or update what?what?

• District job holders may view most information about members of their district.

• District job holders may update their district profiles if they have their “updater” password.

• National Job holders of Stf/C and above may view most data for all members, and all squadron and district information

13

Special view and update Special view and update OptionsOptions

• Members who qualify for “National Directory” listings (Squadron Bridge Officers, District Job holders, National Job holders Stf/C and above) may view all the national directory information for other “National Directory” members.

• Any member may view all their information plus information “fetched” from HQ. They may request updates via email, and, if they are logged on with a PIN, real time updates.

14

A Rule!A Rule!Real Time Member Information Updates

are not allowed unless you are

logged on with a PIN.

15

Function SummaryFunction SummaryOrganizational Information • National Officers and Assistants • National Committee Members • District Officers and Chairs • Squadron Jobs by District • Squadron Officers and Chairs • By Squadron/District • By National Function • Head Quarters Staff

16

Function SummaryFunction SummaryMembership Information • By Name or Certificate • By Email Content • Manage Your own profile • Manage Your Security

Information • Online OD-1 Form • Online OD-2 Form • Online New Member

Registration

17

Function SummaryFunction SummaryOther Tools • Check an email Address • Manage Email Status • Web Master Tools • DB2000 Support • DB2000 Documentation

18

Squadron ProfileSquadron Profile

19

Squadron ProfileSquadron Profile

20

Squadron ProfileSquadron Profile

21

Squadron ProfileSquadron Profile

22

SecuritySecurityBefore April 1 2009• USPS security was based on Certificate

Number and Zip Code.• This is not real security, it only

inconveniences hackers.• The world is not a nice place when it comes

to security.• This is why we never allowed online updates.• By April 1 2011, Certificate Number/Zip code

logons will be discontinued.

23

PINPIN Security SecuritySecurity PINs• Sent to all members along with their ID cards.• As secure as any found on commercial sites.• You may change it to any value you desire.• You may select a Security Question from a long list.• Until you set a Question you may logon with zip or

PIN.• Once you choose a Question you must use your PIN.• If you forget your Question or PIN there is a process

for emailing them to you.• If you don’t have a valid email in your membership

record, you must call HQ.

24

PINPIN Security SecurityLogon Sessions• By session with logon/logoff• Automatically terminated when you close your

browser.• May have your browser “Remember” your logon

if desired.Documentation• Link at the top of IC left column menu.• Step by step help from Kristi Anderson – ITC help

desk.

25