Knockout City Exploration

Knockout City Exploration

1. Prescribed Criteria

   • Require a successful login before retrieving and displaying personal details to the user
     • Needs a password to allow access to user
       • Confirm password
       • Data base to hold user passwords and logins
     • Login system required to allow access to the user
       • Different pages ales to be access based on whether the user is login or not
   • Ensure that the logged in user can view or update only their own personal details
     • A page to view and update users personal data
       • Use a CRUD application to allow a user to change data
     • Access to no other user's data
       • Requires a login to access certain page
   • Only allow a user with administrator privileges to delete a user account or modify personal details for another user
     • No access to other users data for normal accounts
     • Ability to create an administrator account
       • Create a account that can access all data within the CRUD application OR
       • OR only allow the administrator can access the database
     • Access to the main data base
       • Access to the SQL database for administrator
   • Include features that enhance the user experience
     • Follow the usability principles
       • Accessibility
         • Accessible interfaces comply with accessibility standards to ensure that they can be accessed by a wider range of users and devices including users with physical or cognitive impairments and devices with different screen sizes
       • Effectivness
         • Effective interfaces provide users with what they want as well as what they need. This includes addressing aesthetics (eg. CARP) and choosing clear and logical layouts that support user tasks
       • Safety
         • Safe interfaces provide features that give users a feeling of control and protect user inputs such as an undo button or useful error messages.
       • Utility
         • Interfaces with good utility are fit for purpose. They address what the user needs the website or application to do.
       • Learnability
         • Interfaces with good learnability are easy to use or navigate and use principles such as consistency in navigation or symbols that connect with the real world to make the interface intuitive.
   • Require users to confirm or cancel any action that modifies or deletes data
     • Confirmation for actions
       • A question to check confirmation appears whenever user inputs data
     • Ability to cancel actions
       • Create option to go back or undo
   • Ensure data entered by the user is validated before it is added to the database
     • Check if data inputted is is valid
     • Add data to the database

2. Self-Determined

   • Create a solution to help the user persona David and his kids
   • Create a Home page

3. Data Privacy Principles

   • APP 1
     • Open and transparent management of personal information
       • Ensures that APP entities manage personal information in an open and transparent way. This includes having a clearly expressed and up to date APP privacy policy.
         • Only using user data for game information. The solution will also allow for users to edit and delete their personal data
   • APP 2
     • Anonymity and pseudonymity
       • Requires APP entities to give individuals the option of not identifying themselves, or of using a pseudonym. Limited exceptions apply.
         • This application will not even ask for the users real name. It will only work with a Username. This username will be a unique name to identify each user
   • APP 3
     • Collection of solicited personal information
       • Outlines when an APP entity can collect personal information that is solicited. It applies higher standards to the collection of ‘sensitive’ information.
         • There will be no solicited data collect for this solution
   • APP 4
     • Dealing with unsolicited personal information
       • Outlines how APP entities must deal with unsolicited personal information.
         • This will have safe use of unsolicited data as the information will only be used for the game application
   • APP 5
     • Notification of the collection of personal information
       • Outlines when and in what circumstances an APP entity that collects personal information must notify an individual of certain matters.
         • This application will follow all the rules to do with this criteria
   • APP 6
     • Use or disclosure of personal information
       • Outlines the circumstances in which an APP entity may use or disclose personal information that it holds
         • This application will not collect any personal data, so this criteria will be achieved
   • APP 7
     • Direct marketing
       • An organisation may only use or disclose personal information for direct marketing purposes if certain conditions are met.
         • This solution will not collect any personal data, so this criteria will be achieved
   • APP 8
     • Cross-border disclosure of personal information
       • Outlines the steps an APP entity must take to protect personal information before it is disclosed overseas.
         • This application will not collect any personal data, so this criteria will be achieved
   • APP 9
     • Adoption, use or disclosure of government related identifiers
       • Outlines the limited circumstances when an organisation may adopt a government related identifier of an individual as its own identifier, or use or disclose a government related identifier of an individual.
   • APP 10
     • Quality of personal information
       • An APP entity must take reasonable steps to ensure the personal information it collects is accurate, up to date and complete. An entity must also take reasonable steps to ensure the personal information it uses or discloses is accurate, up to date, complete and relevant, having regard to the purpose of the use or disclosure.
         • This application will allow users to update their information anytime, so this criteria is met
   • APP 11
     • Security of personal information
       • An APP entity must take reasonable steps to protect personal information it holds from misuse, interference and loss, and from unauthorised access, modification or disclosure. An entity has obligations to destroy or de-identify personal information in certain circumstances.
         • The passwords inputted will be encrypted. Therefore if the database is hacked they still won't know the passwords
   • APP 12
     • Access to personal information
       • Outlines an APP entity’s obligations when an individual requests to be given access to personal information held about them by the entity. This includes a requirement to provide access unless a specific exception applies.
         • This application will allow users to update their information anytime, so this criteria is met
   • APP 13
     • Correction of personal information
       • Outlines an APP entity’s obligations in relation to correcting the personal information it holds about individuals.
         • This application will allow users to update their information anytime, so this criteria is met

4. Valid data entries

   • Sign up
     • Username
       • Unique Password
         • Primary Key
     • Email
       • Is it an email?
         • @
         • .com
     • Password
       • Confirm Password
         • Does Password match
   • Login
     • Username
       • Username entered matches username in the database
     • Password
       • Does the password match password in database

5. Inputted Data

   • Username
     • Required for Sign Up and Login
       • Unique Username
         • Primary Key
   • Password
     • Required for Sign Up and Login
       • Matches the password in confirm password field
       • Matches the password in database
         • Encrypted
   • Email
     • Only required for sign up
       • Follows email format
         • @
         • .com