Please enable JavaScript.

Coggle requires JavaScript to display documents.

IA3 - Coggle Diagram

- - - - Login
      - Manage existing clubs
      - Overall limited admin fucntionality because of nature of site
    - - Vote on booklist
      - View selected book
      - Login
      - Accept invite / join bookclub(s)
      - Submit a book request
      - Interact with forum
    - - Set details
      - Invite members
      - Create bookclub
      - Schedule meeting times
      - Login
      - Write notes?
      - Random user selector?
      - Interact with forum
      - Manage members
      - Largest role as they are responsible for all meeiting management etc.
- - - - Integrity: Integrity focuses on the accuracy, consistency, and trustworthiness of data and systems. It ensures that data remains intact and unaltered during storage, processing, and transmission. Maintaining data integrity involves protecting against unauthorized modification, deletion, or corruption.
      - Should be available at all times *
    - - Data Validation: Both the mobile app and the PHP website perform thorough data validation on user inputs to prevent the injection of malicious code and ensure that only valid and safe data is processed and stored.
        Secure Database Transactions: The PHP scripts use secure database transaction management to ensure that critical database operations, such as adding or modifying user information, are completed successfully or rolled back if errors occur.
      - Input Sanitization: The app and website perform input sanitization to remove any potentially malicious or harmful code from user inputs before processing the data. This helps prevent common web vulnerabilities like SQL injection or cross-site scripting (XSS) attacks.
        Hashing and Salting Passwords: Instead of storing plain-text passwords, the app and website use strong cryptographic hashing algorithms (e.g., bcrypt) to hash and salt passwords. Hashing adds an extra layer of security to protect user credentials in case the database is compromised.
    - - Counter measures
        
        Strong passwords
        
        Two factor
        
        Hashing
        
        Encryption
      - User Authentication: The mobile app and website require users to create accounts with unique usernames and passwords. Personal information, including email addresses and passwords, is encrypted during transmission and storage to protect against unauthorized access.
        
        Secure API Communication: When the mobile app communicates with external APIs (such as the OpenLibrary API), it uses HTTPS encryption to ensure that data exchanged between the app and the APIs remains confidential and cannot be intercepted.
        
        Limited Access to Sensitive Data: The database and backend PHP scripts are designed to limit access to sensitive user data. Only authorized administrators have access to user details, and all access is controlled through role-based permissions.
  - - - Open and Transparent Management of Personal Information
        
        Very limited and non-sensitive information is stored and only managed outside of storage in book club meetings
      - Anonymity and Pseudonymity
        
        Users are invited to book clubs and only join by choice, meaning all
      - Collection of Solicited Personal Information
        
        When registering this is done
      - Dealing with Unsolicited Personal Information
      - Notification of the Collection of Personal Information
        
        ...
      - Use or Disclosure of Personal Information
        
        Will only be disclosed to other bookclub members if accepted and only includes non-sensitive information
      - Direct Marketing
        
        N/A
      - Cross-Border Disclosure of Personal Information
        
        The project does not verify location or state, meaning this could occur
      - Adoption, Use, or Disclosure of Government-Related Identifiers
        
        No identifiers such as txn or medibank number are capable of being stored in this project at all
      - Quality of Personal Information
        
        The scope of this project doesn't allow for the authentication of personal information
      - Security of Personal Information
        
        There is very limited personal information held, but the database uses meekro DB and is password protected
      - Access to Personal Information
        
        Once a user accepts a book club invitation, their name will be available and by option, so will their postcode in order to help co-ordinate meetings
      - Correction of Personal Information
        
        Users will be able to correct their personal information at any time
  - - - Minimalist Design: Embrace simplicity and avoid clutter to create a clean and intuitive interface.
      - Consistent UI: Maintain consistent colors, typography, icons, and navigation for a cohesive experience.
      - Responsive Design: Ensure the app adapts seamlessly to various devices and screen sizes.
      - Readable Typography: Use legible fonts to enhance readability and user comprehension.
      - Visual Hierarchy: Prioritize important information and actions through clear visual cues.
      - Relevant Images and Icons: Incorporate relevant visuals to enhance the user experience.
      - Cohesive Color Scheme: Use a harmonious color palette that aligns with the app's theme.
      - Clear User Feedback: Provide visual feedback to acknowledge user actions and interactions.
      - Intuitive Navigation: Create a user-friendly navigation system with logical flow.
      - Error Handling: Display clear error messages to guide users in resolving issues.
      - Accessibility: Ensure the app is accessible to all users, including those with disabilities.