ITC Information Center & PIN Security

1. ITCInformation Center & PIN Security United States Power Squadrons National Meeting 2010 Orlando, Fl. P/C Daniel Bartell, SN Shallotte River PS dtb@usps.org

2. The Information Center Its all about DATA www.usps.org/national/tools or www.usps.org/info

3. Web Server IC Databases Reloaded Daily • Membership • Dues (used for X-member and Past Due) • Job Assignment (National, District, Squadron) Validated Daily • Squadron/District Profiles Unique • Heraldry • Zip-codes • Committees

4. Reloaded Daily Databases Membership – Subset of all HQ data • Loaded from HQ about 0700 EST • Changed Email Addresses are validated • Email Bounces update db & HQ Real Time • HQ update sources: HQ staff, DB2000 • Online Real Time db & HQ updates available Dues – Used for X-Member & Past Due Lists • Loaded from HQ about 0700 EST • IC use is secondary to Membership

5. Reloaded Daily Databases Jobs (National, District, Squadron) • Loaded from HQ about 0700 EST • HQ Update sources: OD1/2, Online OD1/2, DB2000 OD1/2, HQ229 • Online Real Time db & HQ updates for certain jobs (Roster Contact, Information Technology Contact, and Public Contact) • Audits are run for RC, IT, and PC changes

6. Validated Daily Databases Squadron/District (includes retired squadron history) • Maintained on the server by ITC Staff, validated against HQ at 0700 • RC, IT, and PC Contacts are checked for valid email addresses 4 times a month • Selected data updates allowed online with password • Squadron Names (including Sail &) checked against HQ • Unique data: Website URL, Conformance, Public Contact Data, Online Roster Management, Location and Area Description, Burgee/Flags, Heraldry

7. Unique Server Databases Heraldry • Maintained by the Historian Committee • Form for sending updates online available Zip – Code (Tiger-zip) • Automatic maintenance • May be updated by ITC Staff • Audits against membership twice a month Committees – Need some additional work • Mirrors squadrons/districts based on jobcodes • Updated by ITC or by R/C or Stf/C

8. So what can we do with the data? Run Queries using SQL? • Select first, last, email, estatus from members where account=“5435” and estatus > “4”; • Select sjjbs.certno, sjjbs.jobcode, sjjbs.year, y.jdesc from sjjbs, members as x, sjdesc as y where x.account = “5435” and x.certno = sjjbs.certno and y.jobcode = sjjbs.jobcode order by sjjbs.certno, sjjbs.year; Much too complicated, unsafe, needs interpretation, needs formatting, needs to be secure = WRONG APPROACH!

9. Information Center Objectives • Provide online information access to everyone. What you see depends on jobs held. • Provide access by human interface values not just machine values – Name (or partial Name) vs Certificate Number or Account Code. • Provide information and reports most needed at squadron, district and national levels. • Provide the ability to easily update information online or via email requests.

10. Information Center Objectives • At the squadron level function as “DB2000 for Dummies”. Providing formatted organizational list, squadron lists, rosters, telephone lists, lists of X-members, etc. from any online PC. • For the individual member the ability to view and update their own information and to view information about others. • At the national level provide the online equivalent of the National Directory.

11. Who can view or update what? • The public or those not logged on have a very limited access. • Members logged on can view most information about members of their squadron and all information about their squadron. • Members not holding squadron, district or national jobs may only view limited information about other squadron members and other squadrons. They can use the “contact mailer” to send other members email.

12. Who can view or update what? • Holders of squadron jobs may view all information about squadron members and may update email addresses of other squadron members. • Squadron job holders may update their squadron profile and roster profile information if they have their “updater” password.

13. Who can view or update what? • District job holders may view most information about members of their district. • District job holders may update their district profiles if they have their “updater” password. • National Job holders of Stf/C and above may view most data for all members, and all squadron and district information

14. Special view and update Options • Members who qualify for “National Directory” listings (Squadron Bridge Officers, District Job holders, National Job holders Stf/C and above) may view all the national directory information for other “National Directory” members. • Any member may view all their information plus information “fetched” from HQ. They may request updates via email, and, if they are logged on with a PIN, real time updates.

15. A Rule! Real Time Member Information Updates are not allowed unless you are logged on with a PIN.

16. Function Summary Organizational Information • National Officers and Assistants • National Committee Members • District Officers and Chairs • Squadron Jobs by District • Squadron Officers and Chairs • By Squadron/District • By National Function • Head Quarters Staff

17. Function Summary Membership Information • By Name or Certificate • By Email Content • Manage Your own profile • Manage Your Security Information • Online OD-1 Form • Online OD-2 Form • Online New Member Registration

18. Function Summary Other Tools • Check an email Address • Manage Email Status • Web Master Tools • DB2000 Support • DB2000 Documentation

19. Squadron Profile

20. Squadron Profile

21. Squadron Profile

22. Squadron Profile

23. Security Before April 1 2009 • USPS security was based on Certificate Number and Zip Code. • This is not real security, it only inconveniences hackers. • The world is not a nice place when it comes to security. • This is why we never allowed online updates. • By April 1 2011, Certificate Number/Zip code logons will be discontinued.

24. PIN Security Security PINs • Sent to all members along with their ID cards. • As secure as any found on commercial sites. • You may change it to any value you desire. • You may select a Security Question from a long list. • Until you set a Question you may logon with zip or PIN. • Once you choose a Question you must use your PIN. • If you forget your Question or PIN there is a process for emailing them to you. • If you don’t have a valid email in your membership record, you must call HQ.

25. PIN Security Logon Sessions • By session with logon/logoff • Automatically terminated when you close your browser. • May have your browser “Remember” your logon if desired. Documentation • Link at the top of IC left column menu. • Step by step help from Kristi Anderson – ITC help desk.