Project #2 A Secure Teller Terminal System Solution

Points Possible: 100 (30 Design, 70 Programming)

Goals:

To develop a non-trivial application.

To perform object-oriented analysis, design, and testing. To develop a user-friendly application.

Design Portion:

Create a Word or PDF file named “Project2 Design”. Please submit a Word (.doc) or PDF (.pdf) file.

Process (steps 1-3 due with design portion, steps 4-5 due with programming portion): Each of the following should address the program specification below. Concern yourself more with thinking about the problem than worrying about the specifics of implementation at this stage. For the design portion turn-in, you will provide steps 1-3. For the programming portion (final) turn-in, you will provide all the steps (including any revisions you may have made). Please note revisions in your final copy. You should provide:

    1. Analysis (10 pt): Write a few important use cases (at least three). Remember, these use cases describe how the user interacts with a teller terminal system (what they do, what the system does in response, etc.). Your use cases should have enough basic details such that someone unfamiliar with the system can have an understanding of what is happening in the teller terminal. They should not include internal technical details that the user is not (and should not be) aware of. Make sure that any special rules/features you plan to add are clearly described in your Analysis section.

    2. Design (10 pt): From your use cases, identify likely candidates for software objects. Construct a Class Diagram for the objects you identified for this project. Each class should have the following:

        1) The name and purpose of the class
        2) The member variables and the functions of the class
        3) Any other classes that this class depends on or uses
        4) Any relevant notes that do not fit into the previous categories


1
3. Testing (10 pt): Develop lists of specific test cases (at least three):

For the system at large. In other words, describe inputs for “nominal” usage. You may need several scenarios. Also, suggest scenarios for abnormal usage and show what your program should do (for example, entering a negative number for a menu might ask the user to try again). Remember, test cases are specific, repeatable, and should have a clearly defined result.

    4. Implement your solution in C++ (65 pt).

    5. Test Results (5 pt): After developing the teller terminal system, actually try all of your test cases. Actually show the results of your testing (a copy and paste from your program output is fine – do not stress too much about formatting as long as the results are clear). You should have test results for every test case you described. If your system does not behave as intended, you should note this.

Program Portion:

Write a program called Project2.cpp. Use comments to provide a heading at the top of your code containing your name, Auburn Userid, and filename. Please describe any help or sources that you used.

Background: Building a Secure Teller Terminal System

In this project, you will design and develop a secure teller terminal system for the Auburn branch of Tiger Bank, which comprises multiple branches in the State of Alabama. After the development of the secure teller terminal system, the system will be widely used in other branches of Tiger Bank. The Auburn branch manages a number of Tiger bank's accounts. Each account contains a unique account number, a balance, as well as other important information. Once you complete this project, your terminal system at each Tiger Bank branch will be connected. In this project, you only will be focusing on the design and implementation of teller terminals for Tiger Bank. A teller terminal system to be developed is a standard PC application which handles local transactions. All human interaction with the teller terminal is through a keyboard. Other specialized input devices like smart-card readers are not considered a cost-effective option for our project.

Staff at the Auburn branch access account information and customer data through the teller terminal system to be developed by you. In this project, let us refer to this information as client data. Client data must be carefully controlled in order to improve the security of the teller terminal system. Whether a given Auburn branch employee is permitted to access any particular piece of client data depends on the employee's job level. In this prototype system, there are two types of users in the system – system administrators and branch staff. Any system administrator can add a new branch staff member to access the system or delete existing staff members from the system (see sample usage 2.1, 2.2, and 2.3). Branch staff identifiers used in this system are called user name.






2
Your teller terminal system must authenticate each access request to the system. You will implement a mechanism to authenticate requests made at the teller terminal.

A teller terminal is either in the idle state or the active state. In what follows, we summarize the behaviors of the teller terminal in these two states.

In the Idle State:

An idle teller terminal displays a login menu (see Sample Usage 1). It invites a branch employee to enter a userid and password and either (i) to manage client and account information or (ii) add/delete a user (branch staff) if the user is a system administrator or (iii) to change his/her password (in which case, the teller is first authenticated using the current password, then the password is updated, and finally a session is initiated with the authenticated teller). In all the cases, the information provided is checked for validity. If the user name and password are valid, then the teller terminal system is placed in the active state and a session is started.

In Active State:

For system administrators, an active teller terminal displays a “System Administration” main menu that invites an administrator to manage information of branch staff members, clients, and accounts (see sample usage 2.1) or change password.

For branch staff, an active teller displays a “Branch Staff” main menu that invites a branch staff member to manage client and account information or change password (see sample usage 3.2).

Design and Implementation Requirements

1. System Login (see sample usage 1 and 2)

The teller terminal displays a login menu (see Sample Usage 1. Login). It invites a branch employee to enter a userid and password. If the user name and password are valid, then the teller terminal system is placed in the active state and a session with the teller terminal is started.

1.1 Login as a system administrator (see sample usage 1)

A system administrator can (i) manage client and account information, (ii) add/delete/display users (branch staff members), and (iii) change his/her password. When a system administrator login to the system, the administrator can choose to do the following:

    • Client and Account Management
    • Add a branch staff member
    • Delete a branch staff member
    • Display branch staff
    • Change password




3
1.2 Default system administrator and password (see sample usage 1)

When the system is running for the first time, there is only a default system administrator – named “admin” - in the system. The default password of the default administrator is initially set to be 0000. Of course, this password can be changed later. Initially (i.e., before the first run), there is no system administrator and branch staff except the default administrator. Thus, only admin can use 0000 as the password to access the system.

1.3 Login as a branch staff member (see sample usage 3)

When a branch staff member logs in the teller terminal, the staff can perform the following two tasks:

    • Client and Account Management
    • Change password

1.4 Change password (see sample usage 2.4)

Regardless of the user’s role, the user is first authenticated using his/her current password. Then, the password is updated. A changed password is valid only if (i) it is not equal to the old password and (ii) it is a non-empty password.

1.5 Masking passwords (see sample usage 1)

A sample source code for masking passwords can be downloaded from the following link:
http://www.eng.auburn.edu/~weishinn/Comp2710/passwordc.cpp
After modify this sample C++ code, you can integrate this code into your teller terminal system.

2. System administration management

2.1 Add branch staff to the system: (see sample usage 2.1)
A system administrator can add new users (branch staff members) to the teller terminal system. When a new user is added into the teller system by the system administrator, user name and password of the new staff member must be initialized. Empty value of the

user name or password is not acceptable.

2.2 Display branch employee: (see sample usage 2.2)

User names and roles of all the branch employees including administrators are displayed.
Before displaying a list of employees, the total number of employees must be displayed.
You can simply follow the format below:

There are 3 users in the system.

1. User Name: admin    Role: System Administrator
    2. User Name: abc0002  Role: System Administrator
    3. User Name: xyz0003  Role: Branch Staff
Press any key to continue...








4
2.3 Delete a branch staff: (see sample usage 2.3)

To delete a branch staff member from the teller terminal system, a system administrator must login to the system and use the system administration menu. The system administrator must use a user name to identify which staff should be deleted. After the administrator enters the staff member’s user name, the administrator needs to confirm this deletion. Sample user interface is given below:

Delete a user - User Name: abc0005

    1) Confirm
    2) Cancel
Please choose an option: 1

The system will first search the list of staff for the staff to be deleted. If the staff member’s information is not in the system, a warning message (see the sample warning message below) will pop up.

Warning - User abc0005 is not in the system. No user is deleted!

3. Client and Account Management

3.1 Add a client (see sample usage 4.2)
If “Add a client” is selected, the new client's name, address, social security number, employer, and annual income must be entered. For simplicity, we assume that client names are unique, meaning that we can use client names as client identifiers.

3.2 Add an account (see sample usage 4.3)

If “Add an account” is selected, a client's name must be entered first. If the client is not found in the system, an error message will pop up. If the client is in the system, then the branch staff member has to enter account number, account type, and account balance.

3.3 Edit client information (see sample usage 4.4)

If “Edit Client Information” is selected, a client's name must be entered. If the client is not found in the system, an error message will pop up. If the client is in the system, then the branch staff can edit the client’s information, including address, social security number, employer, and annual income. Before updating the client’s information, existing client information is displayed. If the branch staff selects “Confirm”, the client information can be updated. Note: In this prototype, clients cannot be deleted. We also assume that client names should not be changed because we use client names as IDs.

3.4 Manage an account (see sample usage 4.5)

If “Manage an account” is selected, an account number will be entered. If the account does not exist in the system, an error message will pop up. The format of the error message is given below:

Error – Account <Account_Number> is not in the system!







5
After the account is chosen, the staff can either deposit or withdraw funds by choosing a menu option. Thus, if the account exists in the system, the following menu will appear:

Manage account <Account_Number> for <Client Name> ...

    1) Deposit
    2) Withdraw
    3) Cancel

3.5 Save client and account information (see sample usage 4.6)

If “Save Client and Account Information” is selected, then the Teller Terminal System writes all current accounts to a file called “account-info” and writes all client information to a file called “client- info”. Each time the teller terminal is started; the “account-info” and “client-info” files containing the account and client information are loaded and initialized. For simplicity, the names of the two files are pre-specified. Branch staff employees are not authorized to change the file names.

4. System Quit

This command should safely terminate the system. Information of a list of system administrators and branch staff (i.e., user names, passwords, roles) must be saved to a file called “staff”.

5. Usability concerns and error-checking

Your program's output does not necessarily need to match the style of the sample output, but the contents should be understandable and no functionality should be missed. You should appropriately prompt your user and assume that they only have basic knowledge of the system. You should provide enough error-checking that a moderately informed user will not crash your program.

Submission:

Please include all of your design artifacts (steps 1-3) within a single Word or PDF file.

The programming portion should include all the C++ source files for the system. If your program consists of multiple source files, please compress them into a single zip file. In your submission, provide a detailed description of how to build your program. If the TA cannot compile your code, you will not get credit for this portion.

In addition, include a text file that contains the execution results of your test cases. Please name this file Project2_test.txt.

Submit your design document and program source files through Canvas. All documents should be submitted in digital format; no hard copy is required for the final submission.









6
Sample Usage:
1. Login as system administrator
===========================================================
|    Welcome to the Auburn Branch of Tiger Bank!    |
===========================================================
    1) Login
    2) Quit
Please choose an option: 1

===========================================================

|    Login to Access the Teller Terminal System    |
===========================================================
User Name: admin
Password: ****    (incorrect password)
The user name or password is incorrect. Try again!
User Name: admin
Password: **** (correct password)

===========================================================

|    Teller Terminal System – System Administration    |
===========================================================
        1) Client and Account Management
        2) Add a branch staff member
        3) Delete a branch staff member
        4) Display branch staff
        5) Change password
        6) Exit
Please choose an option:

    2. System administration management
2.1 Add branch staff to the system:

===========================================================
|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member
    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 2
User Name: abc0002
Password: ****
Role (1 – Administrator; 2 – Branch Staff): 1

    1) Confirm
    2) Cancel
Please choose an option: 1

A new branch staff member is added!
User Name: xyz0001    Role: System Administrator
Press any key to continue...    Enter

===========================================================

|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member


7
    3) Delete a branch staff member

    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 2
User Name: acm0008
Password: *****
Role (1 – Administrator; 2 – Branch Staff): 2

    1) Confirm
    2) Cancel
Please choose an option: 1

A new branch staff was added!
User Name: acm0008    Role: Branch Staff
Press any key to continue...    Enter

2.2 Display branch staff:
===========================================================
|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member
    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 4

There are 3 users in the system.
1. User Name: admin    Role: System Administrator
    2. User Name: abc0002  Role: System Administrator
    3. User Name: acm0008  Role: Branch Staff
Press any key to continue...    Enter

2.3 Delete a branch staff:
===========================================================
|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member
    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 3
Delete a user - User Name: abc0005

    3) Confirm
    4) Cancel

Please choose an option: 1

Warning - User acm0005 is not in the system. No user is deleted! Press any key to continue... Enter

===========================================================

|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member


8
    4) Display branch staff

    5) Change password
    6) Exit

Please choose an option: 3
Delete a user - User Name: abc0002

    1) Confirm
    2) Cancel
Please choose an option: 1
User abc0002 was deleted!
Press any key to continue...    Enter

===========================================================

|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member
    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 4

There are 2 users in the system.
1. User Name: admin    Role: System Administrator
    2. User Name: acm0008 Role: Branch Staff Press any key to continue... Enter

2.4 Change password:
===========================================================
|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member
    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 5
New Password: ****
Error - Your new password must be different from the old one!
New Password: ******
Password was changed!
Press any key to continue...    Enter

===========================================================

|    Teller Terminal System – System Administration    |
===========================================================
    1) Client and Account Management
    2) Add a branch staff member
    3) Delete a branch staff member
    4) Display branch staff
    5) Change password
    6) Exit
Please choose an option: 6





9
    3. Branch staff – Login and Change password

3.1 Login as a branch staff:

===========================================================
|    Login to Access the Teller Terminal System    |
===========================================================
User Name: acm0008
Password: *****

3.2 Change the branch staff’s password (see also sample usage 2.4):
===========================================================
|    Teller Terminal System – Branch Staff    |
===========================================================
    1) Client and Account Management
    2) Change password
    3) Exit
Please choose an option: 2
New Password: ***
Password was changed!
Press any key to continue...    Enter

4. Client and Account Management
4.1 Start the management of clients and transactions:

===========================================================
|    Teller Terminal System – Branch Staff    |
===========================================================
    1) Client and Account Management
    2) Change password
    3) Exit
Please choose an option: 1

4.2 Add a client:
=============================================================
| Teller Terminal System – Client and Account Management    |
=============================================================
    1) Add a client
    2) Add an account
    3) Edit Client Information
    4) Manage an account
    5) Save Client and Account Information
    6) Exit

Please choose an option: 1
A new client will be added:
Client name: Bob Smith
Address: 3101 Shelby Center, Auburn, AL
Social security number: 123-456-7890
Employer: Auburn University
Annual income: 56000
A new client was added!
Press any key to continue...    Enter

4.3 Add an account:
=============================================================
| Teller Terminal System – Client and Account Management    |
============================================================= 1) Add a client

10
    2) Add an account

    3) Edit Client Information
    4) Manage an account
    5) Save Client and Account Information
    6) Exit
Please choose an option: 2
Choose a client: Alice Smith
Error – The client is not in the system!
Choose a client: Bob Smith
A new account will be created for Bob Smith ...
Account Number: 12345
Account Type: Checking
Balance: 500
A new account was created for Bob Smith!
Press any key to continue...    Enter

4.4 Edit client information:
=============================================================
| Teller Terminal System – Client and Account Management    |
=============================================================
    1) Add a client
    2) Add an account
    3) Edit Client Information
    4) Manage an account
    5) Save Client and Account Information
    6) Exit
Please choose an option: 3
Choose a client: Bob Smith

Display Bob Smith’s information:
Address: 3101 Shelby Center, Auburn, AL
Social security number: 123-456-7890
Employer: Auburn University
Annual income: 56000
Client Bob Smith’s information will be updated ...
    1) Confirm
    2) Cancel
Please choose an option: 1
Address: Shelby Ctr, Auburn, AL
Social security number: 123-456-7890
Employer: Auburn University
Annual income: 70000
Client Bob Smith’s information was updated!
Press any key to continue...    Enter

4.5 Manage an account:
=============================================================
| Teller Terminal System – Client and Account Management    |
=============================================================
    1) Add a client
    2) Add an account
    3) Edit Client Information
    4) Manage an account
    5) Save Client and Account Information
    6) Exit
Please choose an option: 4
Which account will be managed? 12000


11
Error – Account 12000 is not in the system!

    1) Manage an account
    2) Cancel

Please choose an option: 1
Which account will be managed? 12345

Manage account 12345 for Bob Smith ...
    1) Deposit
    2) Withdraw
    3) Cancel
Please choose an option: 1
Deposit Amount: 10

Balance of account 12345 is: 510
    1) Deposit
    2) Withdraw
    3) Cancel
Please choose an option: 2
Withdraw Amount: 100

Balance of account 12345 is: 410
    1) Deposit
    2) Withdraw
    3) Cancel
Please choose an option: 3


4.6 Save client and account information:
=============================================================
| Teller Terminal System – Client and Account Management    |
=============================================================
    1) Add a client
    2) Add an account
    3) Edit Client Information
    4) Manage an account
    5) Save Client and Account Information
    6) Exit

Please choose an option: 5

Client information has been saved in the client-info file; account information has been saved in the account-info file!

Press any key to continue...    Enter























12