Monday, December 7, 2015

CPF members’ data safe despite website glitch

ricky l
0users liked this commentThumbs UpThumbs Down0users disliked this comment
ricky l • a second agoRemove
The CPF online website has been down for more than 1 week. Just wonder what is happening?

Is there a change in web vendor that cause this?

The web is merely an interface to customer - and usually require the application to process by retrieving the data from database.

Wonder if the application and database is untainted, how does the web level extract the wrong data and display the wrong data?
Reply
ricky l
0users liked this commentThumbs UpThumbs Down0users disliked this comment
ricky l • a second agoRemove
Should test the new authentication web page in the development and QA zone before rolling out into the production zone.
ricky l
0users liked this commentThumbs UpThumbs Down0users disliked this comment
ricky l • a second agoRemove
Notice the authentication page - userid and password web page was changed.

Wondering is it due to the introduction of 2 factor authentication (sms otp or secure token id) that cause the glitches?

Thought that this should be tested in the development zone and QA zone before it roll into production zone - to iron all glitches.
ricky l
0users liked this commentThumbs UpThumbs Down0users disliked this comment
ricky l • a second agoRemove
In this case, 3 vendors will be involved :-
(1) CPF web page vendor
(2) Singpass - 1st factor authentication vendor
(3) 2nd FA vendor - that authenticate sms otp and secure token id vendor. 
ricky l
0users liked this commentThumbs UpThumbs Down0users disliked this comment
ricky l • a second agoRemove
The authentication web page was changed.
Wonder if this is to do with the introduction of 2 factor authentication.

If yes, then it will involve 3 vendors :-
(1) CPF web page vendor - CPF database
(2) Singpass vendor - Singpass database
(3) 2 FA vendor - 2FA database, SMS vendor, secure token vendor
Reply
ricky l
0users liked this commentThumbs UpThumbs Down0users disliked this comment
ricky l • a second agoRemove
For eg. if CPF account record and Singpass record is not properly synch with the right credential, then a wrong credential maybe picked up - unless it is accessing a single database that keep all the account credential.

Just guessing......

Root cause of CPF e-services disruption identified

The CPF Board says the technical glitches plaguing the CPF website were due to an integration component which malfunctioned under heavy web traffic. 

SINGAPORE: The CPF Board (CPFB) and its IT vendor Microsoft have identified the root cause of a disruption to CPF's e-services. In a news release on Monday (Dec 14), CPFB said an integration component used by the website malfunctioned when faced with heavy traffic.
"This caused the wrong display of information in a few isolated cases, with prompted CPFB to take the system offline as a safeguard," CPFB said.
CPFB said its team and that from Microsoft are applying the necessary technical solutions and conducting extensive system testing.
"This includes end-to-end user testing and checks to ensure proper functionality and performance before public access is restored. CPFB would like to reassure members that the technical issues are confined to the website layer and all data, including members’ account details, are unaffected," the media release said.
On Nov 30, CPF e-services were made unavailable due to the technical issues and members were unable to check their CPF records or make payments. After three days, some of its online services resumed, including the checking of balances and transaction histories.
CPFB also apologised to members for the inconvenience caused. "Much as we would like to bring the e-services online as quickly as possible, we cannot afford to compromise the stability and reliability of the e-services," CPFB Chief Executive Officer Ng Chee Peng said, adding that members will be updated on the restoration of CPF e-services once the effectiveness of the solutions have been tested.
CPFB added that selected e-services, including the checking and printing of account balances, contribution history and transaction history have been made available since Dec 2. The Board has also extended the weekday operating hours of its five service centres from 5pm to 6pm, and its call centres from 6pm to 7pm.
It assured members that they will not be levied any late charges due to the disruption of CPF e-services. Eligible members who make voluntary contributions and top-ups will qualify for the applicable tax relief as long as the Board receives their applications through channels such as mail, CPF service centres, Self-Automated Machines and SingPost branches by Dec 31, CPFB added. 
 

No comments:

Post a Comment