OSS © eCommerce Portal

Management System (ASP.NET/2.0)

Application Specifications, Features

& Screen Shots Descriptions

Version: ASP.NET (2), v3g1 Updated: 4Q/2007

Reference: Middleware 0137/88

CONTENT DESCRIPTIONS 1. TECHNICAL SPECIFICATIONS

1.1 Programming Tools 1.2 Database 1.3 Application Software Architecture, and 1.4 Hardware Architecture

2. APPLICATION SPECIFICATIONS, FEATURES & SCREEN SHOTS DESCRIPTIONS

2.1 Introduction and Application Development’s Direction 2.2 Application Architecture & Topology 2.3 Application Feature, Description & Screen-Shot Examples 2.4 Hardware Deployment based on HA (High Availability) 2.5 Hardware Deployment for Voluminous Concurrent Log-ins 2.6 Overall Diagram of Combined Application and Hardware

3. OSS APPLICATION SERVER AS MIDDLEWARE

3.1 System Security – Identify Authentication & Parameters 3.1.1 Value-based Policies 3.1.2 State-based Policies 3.2 Audit Trace & Track Management 3.3 LDAP (Lightweight Directory Access Protocol) / Active Directory 3.4 File Access Right Management 3.5 Application Software’s Featured Component Access Right Allocation

1. TECHNICAL SPECIFICATIONS

1.1 Programming Tools: The application’s source codes were written in Microsoft ASP.NET (.NET Framework 2.0) and AJAX, and the next version of release (ASP.NET 3.0) is scheduled to be generally available in Aug 01, 2008;

1.2 Database: The application has a built-in embedded middleware, OSS © Data Access Layer, which it supports clients to deploy any preferred RDMS database (Oracle 10/ 11g, MS SQL 2000/2005, IBM DB2 or My SQL);

1.3 Application Software Architecture: The application’s architecture is

structured in N-tier (the details you may refer to Section 2.2 below) which provides clear separation of user-presentation layer, business-logic, data access and middleware; and

1.4 Hardware Architecture: As the application’s base architecture is based on N-

tier, it supports the deployment of hardware in High Availability (HA) and Scalability. For more details, please refer to Section 2.4 below.

2. APPLICATION SPECIFICATIONS, FEATURES AND SCREEN SHOTS DESCRIPTION

2.1 APPLICATION INTRODUCTION & DEVELOPMENT’S DIRECTION

GENERAL DESCRIPTION

The application, OSS © eCommerce Portal Management System (ASP.NET), as shown in Diagram-1 below, is an end-to-end, complete web-enabled System that accomplish the e-commerce functionalities for all the relevant stakeholders in the eco-system. Some of the more prominent are: A. Online Buyer– It supports online buyers’ full spectrum of the online purchasing

experience, from pre-sales (Light-box’s) functionalities to Cart management system; from Payment to maintaining of History of Transaction;

B. Internal Control System- It supports dynamic inventory system after each

online sell/buy transaction is completed – such as deducting and reserving the said goods from warehouses; issuing stock replenishment via in-house work-order or auto-generating Purchase Requisite/Purchase Orders for external suppliers;

C. Direct Upload & Posting of Products Information– It supports sellers to direct

uploading, approve to posting, removal due to end-of-expiry/out-of-stock trigger, delete and archival services of the online products’ information, such as pricing, images and others, to/from the web;

D. Payment Gateway Service Providers- It supports various web services or APIs

to link up with any preferred payment gateway service-providers (such as eBay’s Paypal or selected local financial institutions) for online e-Commerce transactions;

E. Account Management- It supports real-time maintenance of balance account,

record and reports (credit/debit) on each users (online buyers, seller/suppliers, payment gateway providers and tax agents) in the eco-system;

F. Financial Accounting– The application is bundled with a Financial Accounting

Management System that is based on VB.NET, and

G. Administrative Control Panel (Dictionary): It provides the System Administrators various centralized administrative tools for managing the application in respects of system security’s setting, set audit tracking parameter, selectively encrypt those confidential field information (exp. the payment records), set API-connecting to payment gateway master and other services to ensure the system run smoothly and free from malicious attacks.

As N-tier and ASP.NET are the cornerstone of the system design, all the following described features (details are in Section 2.3.2’s) can be accessed thru a simple web browser. In addition, it supports High Availability (HA) services as clients can deploy the solution over cluster of servers, where any failure experienced at any will trigger continuous operation (or switch over) to other remaining live servers. For detail, please refer to [Section 3] below.

2.2 APPLICATION ARCHITECTURE & TOPOLOGY

The Application Software’s architecture is based on N-tier, where the code components (as illustrated diagram below) in its most basic form can be physically assigned to layered of server as below: A. Web presentation tier, B. Application (or Business Logic) Tier and C. Database Tier As per N-tier permits, the system supports clients to deploy the system in both High Availability (Failover) and Scalability when the concurrent-user or work-loads increase.

Internal Users External Users

Web Tier

OSS Enterprise Service Portal / or Client Existing Fixed IP Webpage

System Security : OSS Access Control Manager & Session Manager

LDAP

Optional – Archival – Alert Management – Work Flow – Business Intelligence

API

Audit Trail

RSA Encryption Authentication

Authorization

Application Components OSS Administration

Module [Dictionary]

Application

2.3 APPLICATION FEATURE, DESCRIPTION & SCREEN-SHOT EXAMPLES

The application, OSS © eCommerce Management System (ASP.NET/2.0), is designed to support the true 24/7, real e-Commerce environment where High Availability (HA) and Scalability were pre-built-in at the core of the application coding environment.

OSS © Application Server

OSS Data Access Layer (DAL)

OSS © eCommerce Portal

Accounting Solution Purchasing Solution

Other RDBMS IBM DB2 Oracle Microsoft SQL

Back-up Software

Tier

Database Tier

: External Data Storage Device [SAN/ NSA/Tape]

Optional: Second Data Centre For Back-Up + Recovery

Function wide, the system supports sellers to directly post their inventory information (image, pricing, description and so on) to the web; bridges the online commerce activities between online users and Payment Gateway Provider, and on the other hand maintains the balance accounts for all users with highly secured encrypted environment.

In addition, its capabilities can be further enhanced thru add-on central management

tools via OSS Application Server, details are in Section 3. Diagram-1

2.3.1 Business Application The application is designed for clients who have the following eCommerce business requirements: 1. Internet Based eCommerce: Client intends to distribute its good & services to

wide range of potential users (online buyers and suppliers) who are tech-savvy, are geographically spread cross the globe, demand 24/7 availability of the eCommerce services, and the capabilities of maintaining an neutral, centralized account management for the relevant stakeholders;

2. Large Concurrent-User base: The eCommerce platform has large concurrent or

registered users, from 600 to 150,000;

3. Integrated eCommerce Portal: Clients intend to consolidate all the services for the eCommerce’s stakeholders, from online buyers to suppliers/subcontractors to payment gateway service providers, in a single secured platform;

4. System Security and Audit Tracking are main criteria to build trust for various

stakeholders in the eco-system; 5. Data encryption is the pre-requisite for all transactions; 6. High Availability (HA) - A real 24/7 business system is required to support the

business model; and 7. Constant changes are parts of the business environment where the system is

pre-built with many flexible parameters to support the said changes at immediate notice.

2.3.2 Application Features

2.3.2.1 Internal Control for eCommerce Portal

A. Direct Good/Services Posting & Inventory System- It supports designated users (sellers) to direct-uploading and subsequent posting (upon approval of the contents) the good/service to the portal at real-time basis, with the following supporting fields

A.1 Product Category A.2 Product Code A.3 Product Description A.4 Pricing A.5 Multiple Currency A.6 Upload of Product Images A.7 Rotating Product Images in accordance to pre-fixed rules

B. Lean Inventory System- It supports automatic product replenishment

via issuing Purchase Requisite (PR) in compliance with pre-fixed formula of minimum inventory level, re-order inventory level, re-served inventory level and direct online debit inventory.

C. SC (Supply Chain) Automation: It supports data conversion from

Purchase Requisite (PR) to

C.1 PO Pending, C.2 PO Approval – Level 1 and 2 C.3 Posting PO Approval for Tender Portal (optional) C.4 Email PO-Approval to suppliers for quotation process C.5 Converting suppliers’ Quotation to Actual-PO C.6 Converting Actual-PO to Good Receipt Note (GRN) upon receiving good/services; C.7 Converting GRN to D/O and Invoice

2.3.2.2 Multiple Warehousing & Currencies: It supports online sales transactions which

are multiple-currencies typed, in correspondence to the multi-warehouses’ inventory account balancing. The application supports the fields of :

A. No of Warehouses B. Column and Row of Pin Container C. Inventory Debit/credit D. Consolidating via posting data back to parent company’s F. Central Exchange Rate Depository

2.3.2.3 Refined Purchasing Experience for Online Buyers: The system supports the refinement of eCommerce’s transaction on the following modes:

A. Pre-sales popular ranking on online displayed product (via number of

double-click viewings); B. Pre-sales selection via Light-box; C. Transferring Light-Box’s items to Cart Management; D. Transferring Cart’s items to Payment Panel; E. Post-sales product’s ranking & remarks by paying customers after the

transaction was completed; F. Payment Record and History of Transaction on each customer; G. Central email delivery and depository system for buyer-sellers; H. Online Tracking on each customer’s buying pattern and hot-item per

period; and I. Email Subscription / Unsubscribed Services

2.3.2.4 BOM Inventory Management System – It supports unlimited spread (layers) of

sub-products for a single product that posted online.

2.3.2.5 Brokerage & Commission: It supports brokerage based eCommerce activities where the portal owner provides an independent online eCommerce-portal platform for external sellers and end-customers for commission on each successful transaction completed online.

2.3.2.6 Complete Web Enabled– The system supports complete web access to any of

the described system’s feature and functionalities via a web browser, as the system is designed in ASP.NET/N-tier;

2.3.2.7 SOA (Service Oriented Architecture) support– The system’s central system

control and web services were pre-built with SOA architectural platform, where it made it easy and simple for System Administrators to integrate, transform, migrate and consolidate the application’s data with other systems’.

2.3.2.8 Central System Security– The system supports central management tools via

OSS Application Server where the following security features are plug-in:

A. System Security Policy & Enforcement B. Encryption is thru 2400 bit RSA Asymmetrical Encryption C. Audit Trail & Track D. LDAP-Support E. Database Access Layer (or Database Independent Deployment) F. File-Access Right Management and G. Alert Management thru Email/ SMS

2.3.2.9 Additional Solutions as bundled package:

A. Auto-linked to Financial Accounting (VB.NET) and B. Auto-linked to Procurement Management System (VB.NET)

2.3.2.10 External Suppliers – Registration and History Activities

A. Good/Service Posting – Its features are similar to 2.3.2.1’s

above, except prior to posting the products are subject for content approval first. This step is to prevent the suppliers’ product postings from undesired (exp trade-mark infringement, racial hatred, anti-social or other negative).

B. Suppliers’ Registration, Profile & Logon History

c. Online Buyers’ Comment & Ranking on Each Supplier’s deliverable and trustworthiness

(Note: Certain of the above mentioned features are applicable when the portal is deployed as independent eCommerce platform’s where the core purpose of is brokerage activities.)

2.3.2.11 External Payment Gateway Service Providers: Client can choose any

preferred single (1) external payment gateway provider for its receiving and dispersing funds as a result of the eCommerce’s transaction; whereas the integration for second gateway-provider is chargeable by applicable man-day’s rate, and

2.3.2.12 Adjustable Vertical and Horizontal Sizing of Product Display: The system

supports the flexible display of products- the number of rows and displayed products per row - in accordance to the end-customers’ monitor sizing.

2.3.3 Application’s Screen Shots A. Logon Successful: Once the user is successful logon, the eCommerce Portal will display the

general display pages of products as below, whereas the Control Panel is located at the Left Hand corner.

B. Light-Box: (Please pay attention to the bottom split window’s 2 selected pictures) The Light-Box

feature is to allow pre-selection process when the users are not absolutely sure to procure the items at the moment. This feature helps eliminate the duplicate selection process again while at the same time, it supports group review (permitting the user’s colleagues) the Light-Box’s items.

C. System Administrator (1/4): The page illustrates the designated users to upload product to the system with supporting fields of Category, Product Code, Product Description, Pricing and others.

D. System Administrator (2/4): Once the product is uploaded, the system supports

functionalities of edit/delete/ update/save/ archive, set key word for search-engine, prices, restraints as well as other general administrative procedures.

E. System Administrator (3/4): Before the uploaded picture is posted online, the system will automatically embed the product image with the company’s logo with broad cross. This is to ensure others from copying or trademark infringements.

F. System Administrator (4/4): This page illustrates the system supports external

stakeholders, such as suppliers’, direct uploading of their product into the system. Once it is done the system will route the said contents for central administrators for reviewing, approval and posting online later. This is to ensure the uploaded contents are in compliance of legality.

2.4 HARDWARE DEPLOYMENT BASED ON HA (High Availability)

As the application is architected and designed in N-tier, it supports tier based hardware deployment which in turn supports High Availability, Failover and Scalability. In its most basic hardware deployment, clients can deploy the application with web server, application server and database servers as depicted below. The design, as described High Availability (Failover), is capable to support approximate 1,500 concurrent users at any given time, given certain hardware specifications’ set-up.

Database Server (Active Node)

HARDWARE TOPOLOGY: BASIC HIGH AVAILABILITY AT SINGLE-NODE LOCATION

Database Server (Passive Node)

Primary Data Storage: SAN/ NAS

Remote-Backup SAN/NAS Server

`1

2

Redundant Gigabit Switch (1)

Redundant Gigabit Switch (2)

Optional: Hardware

Based Load Balancer

Switch for redundancy-1

Switch for redundancy-2

Primary Data Centre: Single Logical DNS

1

2

Database ServerSwitch

Internet Service Provider (2 Mbp x

2)

Disaster Recovery Centre (DRC): OPTIONAL

Web-cum-Application

Servers

Load Balancer

Application Servers

Web Servers with built-in Network Load Balancer

In the event clients intend to scale up the hardware to accommodating more concurrent users (exceeding 1,500 concurrent users), the design can be scaled up as depicted at 2.5 below.

2.5 HARDWARE DEPLOYMENT FOR VOLUMINOUS CONCURRENT LOG-INS

The High Availability (HA) can be achieved thru hardware deployment of up to 32 Web servers, 12 Application Servers and 2 Database Servers at single location as depicted below. This scaled-up design is capable to support up to 30,000 concurrent users at any given time.

In the event of Oracle RAC (Real Application Cluster) is deployed, the number of concurrent users can be extended to 100,000 with 100 database servers.

2.6 OVERALL DIAGRAM OF COMBINED APPLICATION SOFTWARE AND HARDWARE The following diagram depicts the location based co-relationship between hardware

and application software, when they are deployed together.

TOPOLOGY ON HARDWARE AND APPLICATION SOFTWARE DEPLOYMENT & CONFIGURATION

`

Application Server

Web Servers

Switch-1 Switch-2

Database Server

Active Node Passive Node

End-Users

SAN/NAS BACK-UP

System Security: Access Control Manager & Session Control

Application Software-1

Application Software-2

Application Software-3

Application Infrastructure Building Block: Access Control, Encryption, Audit Track, Single-Sign_In, SMS, Report

Portal & Others

Data Access Layer (DAL)

Database

END-USERS

3. OSS APPLICATION SERVER (ASP.NET) - MIDDLEWARE Client can enhance the variety of capabilities of the said application with OSS

Application Server (ASP.NET/2.0), which provides superior central control and management oversight.

OSS Application Server is an SOA based central foundation block that provides full

gamut of services as briefly described below, to enhance the core application OSS © eCommerce Management System (ASP.NET):

A. High Availability (HA);

B. Scalability- It enables the core application software to grow and adopt over time without fundamentally alter the underlying coding platform;

C. Consistent Performance (3 seconds elapse time); D. Security & Identity Management (System Management);

E. Maintainability: The SOA enables the System Administrators various central tools to maintain the system parameters via a simple web browser;

F. Ease of Re-usability: As various web-services were pre-built-in, it enables the core application to be shared and re-used with many other third party applications;

G. Report Portal & Business Intelligence (optional): These two functions supports end-users the ultimate portability to present, share and collaborate with others via a simple web browser and internet connections, regardless of the end-users’ geographic location; and

H. Alert Management: The system is pre-built SMS/Email alert messaging system where it supports the end-users the great latitude to disperse alert messages to team members when certain parameters are triggered.

Some of the screen shots for OSS Application Server are as below:

3.1 System Security – The [Security & Identity Management’s Parameter Setting] that

supports allows System Administrator to remotely configure various log-in parameters for each user, such as

01. Value-based Policies – such as minimum lengths and the presence of a

minimum number f special characters; and 02. State-based Policies – such as expiration and maximum number of re-tries

before being block out from access.

3.2 Audit Trail Module – It allows System Administrator to keep tracks each user’s log-in activities (access, view, data entry, edit, print and others) where the system tabulates the user activities in Date, Time, Action, Field he/she accessed and others.

3.3 System Security – LDAP (Lightweight Directory Application Protocol). OSS © Utilities Solution has a built-in LDAP which client can deploy to comply with its corporate centrally managed security policies. Alternatively, client can de-activate this feature if LDAP is not required.

3.4 System Security @ File-Access Right Allocation Management– Assigning specific access right on each file to each user, in accordance to the user’s role and responsibility.

3.5 System Security @ Application Software Feature-Access Right Allocation. This class-specific (Object Oriented) feature allow system administrator to allocate Access Right of each Application Software’s component in accordance to each users’ roles and responsibilities.

[Open Spectrum Solution]