A novel user authentication and logging system for IIS web sites

Abstract

Today many sites on the World Wide Web require identification of a user and have many reasons for such identifications.. Subscription oriented sites need to verify identity of the user or often corporate intranet sites need to secure access to propriety information, also many Web sites sometime wish to tailor services to the preferences of the individual users. Microsoft provides standard verification mechanism in their product Internet Information Server (IIS), which uses Windows NT security system to manage rights and identification scheme by utilizing familiar tools such as NT User Manager and File Manager. However, IIS is unsuitable for Internet use when large no of Internet users are required to be identified and provided the permissions individually. In the existing scenario the main objective of the project under consideration is to develop the authentication software that works independent of the IIS and NT interface and access control functions, but still be able to provide directory and file level security. In Army, keeping in view the requirements of handling the information safely, so that no unauthorized person should be able to access in confidential information, such system will provide a sound footing for developing any extra ordinary system as per the specific requirement of in department.