Worldspan Sign-In Security. New Worldspan Sign-In Security measures. Impact to all Worldspan users

Transcription

1 Product Advisory Number: 1073 Version: APR-11 (optional) Load To Production: High Level Description: Mandatory activation will take place throughout August and September New measures Impact Summary: Impact to all Worldspan users Reason For Issue: This is a reminder for a critical implementation Clarified impact to Web Services. Customer Impact: Internal Only Agency Customers ecommerce Customers Developers Airline Customers Car, Hotel, Rail or Cruise Customers System: Galileo Apollo Worldspan Load To Copy: 14-Mar-11 EST GMT Web Services: (API and Messaging) There is impact to all users/systems accessing Worldspan reservations system. XMLPro users will automatically be exempted. If in doubt, Web Services users must contact their Account Manager to apply for exemption. Please note that sines associated to a Sine Table Administrator sine cannot be exempted. Issue History: Version 01 Issued 08-Nov-10 Version 02 Issued 06-Dec-10 Version 03 Issued 17-Jan-11 Version 04 Issued 14-Feb-11 Version 05 Issued 14-Mar-11 Version 06 Issued 18-Apr-11 Version 07 Issued 25-Apr-11 Version 08 Issued 12-May-11 Version 09 Issued 16-Jul-11 Version 10 Issued 25-Jul-11 Page 1

2 Overview Worldspan is adding a new level of security at time of signing into the reservations system. All users will be required to enter a unique sign-in and a Password when they sign into the Worldspan system using the BSI sign-in functional entries. Additionally, there will be a new requirement for a Keyword if ever the password is needed to be reset. Two changes will be made to the Worldspan system to facilitate this security enhancement: Every user will be required to add a password to their BSI sign-in entry as well as provide a keyword for future password resets (if/when a reset is required) Each user will be required to create and enter a password with their BSI entry in order to gain access to the Worldspan system. The keyword will be used for those times when a password needs to be reset. When set, the keyword will only be known to the user. If/when a user contacts their location administrator to reset a password; the keyword requirement will be activated forcing the user to input the keyword at time of sign-in, followed by renewing the password. Note No changes are being made to the Worldspan Go! login functionality. This implementation of Password and Keyword from 21 st April will occur as an optional feature. This will become mandatory at a later date. Password and Keyword is optional for all locations until a date for cutover to mandatory is stipulated. During this optional time, a Password and Keyword can be set for a user within the location, in order to prepare for eventual mandatory requirement. The reason for this was to allow users to become used to the look and feel of the new security functions. However, it will not be possible to use the Password or Keyword as part of the sign in process until the function becomes mandatory for the location. Any attempt to enter a Password at time of sign in (whilst optional) will receive a system error. A Webex recording has been created to explain and demonstrate the use of Passwords and Keywords and can been accessed via ASK answer id Sine Agent is new functionality to help a location to manage sign-in requirements for each SID or location. A Sine Agent will be the Sine Table Administrator (STA) for a location or SID and will have the capability to add new users for a SID or location, also to reset passwords that have been locked or forgotten. This will entail using the Agent Information Table, a display that will show the user name, sine (sign-in code) and will indicate that a password and keyword have been defined. As well as user information, the Agent Information Table will be used to reset the user password if ever it is forgotten or the user count becomes locked. Each location will be required to appoint a person or persons (up to 9) to be the administrator (authorizer) of the Agent Information Table for every user at their location. NB: Administrators must be sure to read sections 5 and 6 below. This is not to be confused with Agency Security Record, this functionality remains unchanged. Also, locations that are using Sine Guard functionality (duty code: SG) will not need to implement Sine Agent. Sine Agent functionality will be released for general use on 15th February 2011 and will become mandatory for all locations that need the ability to add, change or delete sines, or reset passwords, from 21st April Page 2

3 Whilst Sine Agent functionality will not initially be mandatory, we encourage all locations to start using the function as soon as possible in order to become familiar with its application. A new recorded presentation on Sine Table Administrator can be found on ASK Travelport, answer ID A Webex recorded presentation can be found in ASK Travelport, answer ID and will provide further guidance for the changes to be implemented here. Customer Benefit Providing security that will help prevent fraudulent activities and reduce risk of loss. Detail and Customer Examples 1. User Sign In When the user initially signs in using BSI, they will be prompted to create a password. The password can be a combination of 7-10 alpha and numeric characters. >BSIAXXXXaa/dd >ENTER A PASSWORD USING BSIP/password/password aa = agent ID dd = duty code If the Agent Information Table has not been given a name for the user ID, the user will need to enter their name information in the Agent Information Record. >PLEASE ENTER YOUR NAME >BTNMxx (xx = user initials as defined in the BSI code) When the user enters after >BTNMxx, the following mask will be displayed: >BTNMxx SIGN 6789xx RAZ DUTY CODES - GS NAME - LAST ( ) FIRST ( ) The user will need to enter both their last and first name and press enter. Once this is complete, they will be prompted to create their password. >ENTER A PASSWORD USING BSIP/password/password On subsequent sign in, the user will append their password to the sign in entry. If the user does not sign in to all areas (i.e. BSI$), they must sign into each area using their password. >BSIA6789aa/dd/password Page 3

4 If the correct format is not used on subsequent sign in, a prompt with the correct format will be displayed. >ENTER PASSWORD USING BSIAXXXXaa/dd/ccc (where ccc = current password) The user must enter a password that is a combination of alpha and numeric characters, and is between 7 and 10 characters in length. If this requirement is not met, the following error message will be displayed. >INVLD PASSWORD MUST BE 7 TO 10 CHARACTERS If the user does not enter the same password twice when creating the new password, the following error message will be displayed. > NOT VERIFIED ENTER AGAIN If the user attempts to change their password at sign in, but does not enter the same (new password) twice, the following error message will be displayed. >BSIA6789CE/GS/ccc/ddd/ddd (where ccc = current password, ddd = new password) >NOT VERIFIED ENTER AGAIN If the user attempts to sign in without a password, they will be prompted to enter their password. >BSIA6789CE/GS >ENTER PASSWORD USING BSIAXXXXaa/dd/ccc (where ccc = current password) If the user enters a password that does not match the password stored in the database, the following error message will be displayed. >BSIA6789CE/GS/password >UNAUTHORIZED USER Once the user has successfully signed in, the password is set to expire in 90 days. Within seven days of expiration, they will be shown a message stating that it will expire in x days. Page 4

5 >BSIA6789CE/GS/password >********************************************************** ***WELCOME TO THE WORLDSPAN RESERVATIONS SYSTEM*** >YOUR PASSWORD WILL EXPIRE IN 5 DAYS 2. Keyword Creation/Change Once the password has been successfully created, the user will be prompted to create their keyword. The keyword will be required to authenticate the user only when the password is reset by someone other than the user (Administrator or Helpdesk). This will be a new functional entry. A prompt will be displayed with the correct format to create the keyword: >CREATE KEYWORD USING BSIK/nnnn/nnnn >BSIK/nnn/nnn Only after the password and keyword have been created will the user gain access to the system. The keyword can consist of any alpha and/or numeric characters, 4 6 characters in length. If the user does not create a keyword correctly, the following error message will be displayed. >INVLD KEYWORD MUST BE 4 TO 6 CHARACTERS If the user does not enter the same keyword twice when creating the new password, the following error message will be displayed. > NOT VERIFIED ENTER AGAIN If the user does not create a keyword but instead attempts another functional entry, the following message will be displayed. >CREATE KEYWORD USING BSIK/nnnn/nnnn The BSIK entry may not be done while emulating another SID. The following error message will be displayed. >BSIK/ccc/nnn/nnn >UNAUTHORIZED USER The user can change their keyword at any time. They must be signed into the system and must know their current keyword. Only the user will have the ability to change/create the keyword. Page 5

6 >BSIK/ccc/nnn/nnn >KEYWORD CHANGED If the user tries to change their keyword without entering the current keyword, the following error will be displayed. >BSIK/nnn/nnn >FOR KEYWORD CHANGE USE BSIK/CCC/NNN/NNN If the user does not know or remember their Keyword, they should contact their Sine Table Administrator to have their Password and Keyword reset. 3. Password Changes The user may change their password at any time, but no more than once per day. The user can change their password at sign in using the format BSIAXXXXaa/dd/ccc/nnn/nnn. >BSIAXXXXaa/dd/ccc/nnn/nnn (ccc = old password, nnn = new password) >PASSWORD CHANGED The password can also be changed after the user has signed in using a new functional entry. >BSIP/nnn/nnn >PASSWORD CHANGED The BSIP entry may not be done while emulating another PCC. The following error message will be displayed. >BSIP/nnn/nnn >UNAUTHORIZED USER If the user requests the Administrator or Helpdesk to reset their password, this will set the USE KEYWORD indicator on in the BTNM mask (see section 5 below). There is no limit to the number of times per day the Administrator or Helpdesk can reset the password. The user will be prompted for their keyword when they next sign in. >BSIA6789aa/dd >ENTER KEYWORD USING BSIK/nnn/nnn Page 6

7 Once the keyword has been verified, the user will be prompted to create a new password. >ENTER NEW PASSWORD USING BSIP/nnn/nnn: >********************************************************** ***WELCOME TO THE WORLDSPAN RESERVATIONS SYSTEM*** If the user tries to change their password more than once per day, the following error will be displayed. >PASSWORD CHANGE NOT ALLOWED The user will be restricted from using their agent sign and user initials as a password. The following error message will be displayed. >INVLD PASSWORD CHANGE CANNOT BE SIGN ID When changing their password, the user must change a minimum of 3 characters. >INVLD PASSWORD CHANGE - MUST CHANGE AT LEAST 3 CHAR The user cannot change their password to a previously used password. The system will store the current password along with the 4 previous passwords. Historical passwords cannot be displayed, changed or deleted. If the user tries to reset their password to one of the 5 stored, the following error message will be displayed. >INVLD PASSWORD CHANGE PREVIOUSLY USED PASSWORD If the password does not contain at least one alpha and one numeric character the following error message will be displayed. >INVLD PASSWORD MUST CONTAIN 1 ALPHA AND 1 NUMERIC Page 7

8 If the password created is on the Restricted Word List, the following error message will be displayed. >INVLD PASSWORD RESTRICTED The user is required to change their password every 90 days from the last time it was changed. Once the time limit has been reached, the user will be prompted to enter/re-enter a new password. >PASSWORD EXPIRED ENTER NEW PASSWORD USING BSIP/nnn/nnn 4. Invalid Sign In Attempts/Sign In Locked If the user exceeds 5 attempts to sign in, their sine and password will be locked and the following error message will be given: >SIGN IN LOCKED, CONTACT AUTHORIZER OR HELP DESK If the user s sign is locked, and they attempt to sign in, they will see the following error message: >BSIA6789CE/CE/password >SIGN IN LOCKED, CONTACT AUTHORIZER OR HELP DESK The user must contact the Sine Table Administrators for their SID or location or help desk to have their sign in unlocked. A list of Administrators for the SID can be seen by entering BTMGR* 5. City Sine Table Updates Access to the City Sine Table will be restricted once password security is implemented. Sine Table Administrators (STAs) must be designated within a SID (up to 9, we highly recommend more than one) to assign new access Sines and to control password reset requests. A list of STAs by name can be displayed to identify and monitor those designees within a location. An audit trail is also provided (see section 6) to monitor changes to individual Sines. The Sine Table Administrator functionality is not to be confused with the Go! Site Administrator functionality. The Sine Tables are controlled entirely within the Worldspan reservations screen, whereas the database allocation and access controls are handled within the Go! application in Internet Explorer. The controls could, of course, be managed by the same person(s) but would remain separate. Once password security has been implemented, access and change functionality to the BTNM mask (Agent Information Table) and the City Sine Table will be restricted to the STAs. One or more STAs must be designated for each location (SID) through the assignment of new logon Sines with the SA duty code. STAs must be signed in as a Sine Agent (duty code SA) in order to update Agent Information Tables or to Page 8

9 reset passwords. The STA may complete the BTNM mask for each individual user to add the individual s name, or the individual will be prompted to add their name, create a password and keyword at the time passwords become mandatory. All three fields are mandatory. Sine Agent functionality will be implemented from 15 th February 2011 and will not initially be mandatory. This is to allow time for agencies and airlines to plan and implement Sine Table Administration for their location. When the first Sine Agent logon has been created, other SA logon Sines will be created by the existing SA logon. Up to nine SA roles may be defined, using the functional entries described below. For locations that use robotic devices, please ensure that the chosen sine for the associated STA sine is not the same sine as used by the robotic device. Sines associated to the STA cannot be exempted from password/keyword requirements. The STA will have three functions: Add/Change/Delete/Display logon IDs and information Authorize a password reset after individual lock out or forgotten password Display City Sine Table audit trail for monitoring and tracking of changes (see section 6) This is an example of a City Sine Table, displayed by entering BTD: >BTD 96Z/19 OCT 2590AN 1 KELLY/ANN GS 19OCT07** 2611BJ 1 JONES/BEN GS 20NOV99** 3555JA 1 SMITH/JANE GS 14JUL10** 4226RT 1 THOMPSON/RICK GS 03FEB01** 5988HJ 1 JACOBS/HENRY GS 27NOV00** 6110PH 1 HOLMES/PHILLIP GS 10AUG01** 8840MW 1 WALKER/MIKE GS 05OCT09** The City Sine Table display shows a list of agent sine codes and initials, the name of the owner of the sine code and the date it was created. Sine Agent Add/Change/Delete/Display The Sine Table Administrator (Sine Agent, SA duty code) will be activated using the entry below. The first STA added will be responsible for adding the subsequent STAs. >BTSTSA/SID/xxxxxx/yyyyyy SID = Subscriber ID (Pseudo City Code) xxxxxx = the logon ID the Sine Agent will use to sign in as the STA (must be 6 characters in length, alpha or numeric or both) yyyyyy = their individual sine code Page 9

10 The first STA sine will be created in GS duty code, subsequent STA sines will be created in SA duty code, as noted below. For this example, agency 96Z will add individual sine code 5988HJ as their Sine Table Administrator, with the STA sine code of summer. >BTSTSA/96Z/summer/5988HJ **** This entry will be repeated for each STA to be activated for the location. If a user attempts to sign in with an SA duty code but has not been assigned as an STA, the following error will be displayed. >LOGIN ID IS NOT AN STA If the maximum number of STAs have been assigned for a location and an attempt is made to add another STA, the following error will be displayed. >MAXIMUM ADMINISTRATORS ASSIGNED Thereafter, this agent will sine in with BSIASUMMER/SA to add or update other SA logons and Agent Information Tables. This sine code (SA duty code) will be used only for City Sine Table updates. It cannot be used for other reservations functions. Please make sure that the owner of the SA sine code has entered their name into the associated BTNM mask of their GS duty code. This will ensure that names will be displayed for the BTMGR* display entry. Here is an example of the mask with the name fields filled in. It will not be necessary for any location or SID to define a Sine Agent or Sine Table Administrators if the SID is already using Sine Guard functionality. However, it will be necessary for Sine Guard users to ensure that Agent Information Tables are properly completed and will have extra functionality as detailed in the Product Advisory, for password reset. Page 10

11 The Sine Table Administrator can change the Sine Agent ID of any SA by using the same entry as mentioned above, replacing the current Sine Agent ID with the new Sine Agent ID. The entry will need the Agent Sine Code of the user to be changed. The STA can delete any SA using the following entry. >BTSTSA/96Z/5988HJ/DELETE The first STA designated for the SID can only be deleted and reassigned by the Helpdesk. The BTMGR* entry will display a list of names that have Sine Table Administrator or Sine Guard sine codes for each SID or location. Any agent can make this entry and the display will indicate whether the SID has Sine Table Administration or Sine Guard functionality in use: >BTMGR* >BTMGR* - SINE TABLE ADMINISTRATORS 01 CLEVENGER HEATHER >BTMGR* A2Z SINE GUARD TABLE MANAGER 1 ABC TRAVEL AND TOURS HOWARD WATTS/SG SLC X LAST UPDATE 12JAN Z BY A2Z/SG 59091E OFFICE MANGER PHX A2Z SINE GUARD TABLE MANAGER 2 LAST UPDATE 12JAN Z BY A2Z/SG 59091E To display a STA list for a bridged location, first the user must emulate to the bridged SID, then enter BTMGR* to show a list of STA users for the SID. Please note that, whilst a name given to a Sine is optional, the BTMGR* entry may return a blank display if a name has not been entered for either a Sine Guard or a Sine Agent sign-in. The requirement for names with every Sine does not become mandatory until the use of Password/Keyword becomes mandatory for your location. It will not be critical to the normal operation of a location to have Sine Table Administration or Sine Guard implemented. However, it will be necessary to have either function set up for the location if passwords are to be reset or changes to Sine Tables made. If an attempt is made to add, change or delete a sine when STA or SG has not been set up for the location, the following message will be displayed. >MUST ASSIGN STA USING BTSTSA Page 11

12 Add/Change/Delete/Display sine codes and information The functionality for adding, deleting and changing of user sine codes will remain as it is today, except that it will be restricted to Sine Agent and Sine Guard users. Once a new user has been added, the STA will need to update the BTNM mask with the name information. If this is not done at time of sine creation, the user will be prompted to add their name at initial login. The table below shows the City Sine Table maintenance entries. Please refer to ASK Travelport for more information for the current process. Entry BTD BTA1111DS/GS BTU* BTC1545PH/FA BTU9876Z1 BTU876Z1/REACT BTNMPH Description View City Sine Table Add a sine to the City Sine Table Display a list of inactive sine Add duty code FA to the existing sine Deactivate a sine. Note, the sine remains in the City Sine Table for 90days Reactivate a sine Access name mask for Agent PH. Changes can be made such as first/last name/employee number/department name Below is a description of the new fields in the BTNM mask: PASSWORD will contain the user s password masked by asterisks. This field will be displayable in the mask to show that a password for the user does exist, but not what the password is. Updates may not be done directly in the mask. USE KEYWORD will be set when the user needs to be authenticated. If someone other than the user resets the password, as in a help desk, this field will be set to Y by the authorizer. This will force the keyword to be used at the user s next sign in. The default will be N. LOCK will be set when the sign is locked. It will be set to Y when locked and N when it is unlocked. N will be the default The STA will access the Agent Information Table using the BTNM mask to either authorize a password reset or to lock a user s sign If Jane Smith has left the company or has a sine code that needs to be locked, the STA would retrieve the BTNM mask and change the LOCK field to Y. Jane would get a message the next time she signed in stating her sine code is locked and she must contact the STA. >BTNMJA SIGN 3555JA DUTY CODES - GS NAME - LAST (SMITH ) FIRST (JANE ) EMPLOYEE NUMBER ( ) DEPARTMENT ( ) PASSWORD - ******* USE KEYWORD ( ) LOCK (Y) > 96Z Page 12

13 6. Password and Keyword Reset The BTNM mask will be used by the Sine Table Administrator to reset the user password and/or keyword. If the user has forgotten their password or has locked the sine by using an incorrect password, the BTNM mask will be retrieved by the STA and set the USE KEYWORD parentheses to Y, then ENTER. This will require the user to authenticate their sine by entering their Keyword at next sign in and then to create a new password. >BTNMJA SIGN 3555JA DUTY CODES - GS NAME - LAST (SMITH ) FIRST (JANE ) EMPLOYEE NUMBER ( ) DEPARTMENT ( ) PASSWORD - ******* USE KEYWORD (Y) LOCK ( ) > 96Z Similarly the BTNM will be used to reset the user s sine if both password and keyword are forgotten or compromised. The STA will LOCK the BTNM mask (Y) then ENTER, then retrieve the BTNM mask and set LOCK to (N) and ENTER. This will clear the stored password and keyword and the user will be required to create both at next sign in. >BTNMJA SIGN 3555JA DUTY CODES - GS NAME - LAST (SMITH ) FIRST (JANE ) EMPLOYEE NUMBER ( ) DEPARTMENT ( ) PASSWORD - ******* USE KEYWORD ( ) LOCK (Y) > 96Z Page 13

14 7. Audit Trail Display A new functional entry will display all historical changes made for a sine code in a given SID, BSLOG/SID/xx (xx = Agent ID). This entry may only be done by the STA or Sine Guard Administrator. > BSLOG/XYZ/AB NAME: MR WALLY CHG/BY DEPT DATE TIME FIELD CHG/FROM CHG/TO 2468HC XDBKR 30APR NAME WALLY MR WALLY 2468HC XDBKR 30APR AUTH CITIES XDBKR 2468HC XDBKR 30APR LOCK Y L 6789AB XDBKR 30APR AUTH CITIES XDBKR 6789AB XDBKR 30APR KEYWORD ****** ****** PASSWORD ******** ******** ** ** C XDBKR 30APR ***CREATED*** END OF DISPLAY > This display will show who made the change, the Dept (if completed in the Agent Information Table), the Date and Time and what was changed. The most recent change will appear first. Please note the BSLOG display will be released 15 th June Automated Sine Maintenance Effective 21 st April 2011, any sine code that has not been used in the previous 90 days will be automatically removed in the City Sine Table. Glossary Term Sine BSI PCI Data Security Standards Sine Agent Sine Table Administrator Agent Information Table BTNM Mask City Sine Table BTMGR* BSLOG Definition Worldspan BSI sign in code Start of functional entry to sign into the Worldspan reservations system Payment Card Industry (Governing Body) A sine with SA duty code to provide access to Agent Information Table and the City Sine Table Sine Agent Template to allow entry of agent name, with password/keyword controls Agent Information Table List of sines created for the location (BTD) Entry to determine SA or SG users within a location or SID Sine code historical display Page 14

15 THE INFORMATION CONTAINED IN THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY TO TRAVELPORT Copyright Copyright Travelport and/or its affiliates. All rights reserved. Travelport provides this document for information purposes only and does not promise that the information contained in this document is accurate, current or complete. This document is subject to change without notice. No part of this document may be reproduced, stored in a retrieval system, or transmitted in any form or any means electronic or mechanical, including photocopying and recording for any purpose other than the licensee s personal use without the prior written permission of Travelport and/or its affiliates. Trademarks Travelport and/or its affiliates may have registered or unregistered patents or pending patent applications, trademarks copyright, or other intellectual property rights in respect of the subject matter of this document. The furnishing of this document does not confer any right or license to or in respect of these patents, trademarks, copyright, or other intellectual property rights. All other companies and product names are trademarks or registered trademarks of their respective holders. Page 15