A Secure Online Learning and Examination System for Medical Students
The customer
A web resource that provides distance learning and online examinations on a number of medical disciplines, including Family Practice, General Pediatrics, General Surgery, Internal Medicine, Obstetrics and Gynecology, and SPEX. The multiple choice questions, detailed explanations, and the possibility to create self-study exams are powered by the sophisticated test engine.
The need
To avoid cheating, breaches of privacy, malware, or any other security incidents, the customer came across an idea to integrate a browser security application with the Exam Master solution. A third-party Web browser lockdown solution selected for this project would disable opening new windows, copy/pasting information, screen sharing, accessing other applications, etc.
The challenges
Implementing a secure handshaking procedure between the main system and the security add-on became one of the most challenging tasks of the project. This was caused by using very specific cookies that had to be encrypted in the BF-ECB mode. To enable launching the security applications on different Web pages of the system, the team was to make some minor, yet very specific, changes to the application's code. Since the add-on does not work in the virtualized environments, physical machines were used to test the system.
The solution
To implement a handshaking procedure, we used the encryption library and made some changes to the code. With these improvements, the new add-on does not affect the behavior of the main system. The embedded browser locks down the testing environment; this eliminates cheating and provides objective assessment of the results.
The outcome
The customer got a secure online learning and examination system that prevent cheating.
Technology stack
Client Platform/Application Server
Unicorn
Technologies
Ruby on Rails, JQuery
Programming languages
Ruby, JavaScript
Database
MySQL
Development Environment
TextMate
Contact us
Jan-Terje Nordlien
Daglig leder
jan-terje@altoros.no+47 21 92 93 00Altoros Norge AS
Org.nr.: 894 684 992
Tordenskiolds gate 2,
0160 Oslo