Ubicuity

Remote access from anywhere and with any portable intelligent device. Only if the company enables remote access and the user has the appropriate access rights.

Thin Client

A reduced level of hardware resource consumption allow the use of cheap client hardware.

Maintenance

System upgrades are done at the server which automatically updates the clients.

Client

The interaction between novohit and the user is independent from the operating system and the device the client uses.

novohit only requires a recent web browser that supports the most common technologies for the presetnation layer: HTML, CSS, JavaScript, AJAX and Flash.

The most used browsers to access the application are: Internet Explorer, Firefox, Chrome, Opera and Safari.
Data mining generates reports on different formats (HTML, PDF, Excel, Calc, Word, Writer)

Server

Web or local platform.

novohit runs on Linux/Unix which provides higher resistance to virus, sophisticated protection systems, security and control access. It does not require rebooting to maintain its performance level and it supports a great number of simultaneous users.

novohit uses a Web + PHP server for the application logic and the user interface, an application server for report generation and data exploitation and PostgreSQL as the database server.

Interfaces

Great integration flexibility.

novohit has a variety of interfaces to multiple hardware devices (printers, electronic locks, cash registers, PBXs and call accounting, energy control systems, production units, etc.) to maximize system operation. It can also integrate with third party software.

novohit access squemes.

Intranet: the server resides within the organization and the clients access through a private network

Extranet: authorized users have access from remote sites

Internet: the server is on the cloud and clients work via remote access

HTTPS

Secure access through HTTP Secure. Access is based on major certificate authorities.

Secure Passwords

Password verifying algorithms: minimum password size, non pronounceable, mix of letters, symbols and digits and password expiration

Credentials

Application-based individual permits to control user roles and specific tasks.

Logs

Logbooks for access and application uses.

Data Base

SQL Injection prevention via Escaping and Prepared Statements.

No XSS - HttpOnly

Browser sent data validation, client IP validation, random token generation for all forms, HTTP_REFERER verification.

Post over Get

Accurate use of Web Protocols that guarantee higher levels of security.

Session Expiration

Avoiding permanent and insecure access, the system disconnects after a period of inactivity.