Multi Banking System: Mini Project Report On
Multi Banking System: Mini Project Report On
Multi Banking System: Mini Project Report On
on
Multi Banking System
Project work submitted in partial fulfillment of the requirement for the award of the
degree of
BACHELOR OF TECHNOLOGY
In
COMPUTER SCIENCE and ENGINEERING
by
H V REDDY 07241A0570
FARHAN AMER 07241A0768
U.KARTHIK KUMAR 07241A0575
A.JAYANTH 07241A0573
Mr.SANKARA BABU
Associate Professor,
Dept. of CSE, Griet.
This is to certify that this project entitled “Multi Banking System” is a bonafide work carried
out by
H V REDDY 07241A0570
FARHAN AMER 07241A0768
U.KARTHIK KUMAR 07241A0575
A.JAYANTH 07241A0573
In partial fulfillment of the requirements for the award of mini project in Bachelor of Technology
in Computer science and Engineering from Jawaharlal Nehru Technological University,
Hyderabad. The results embodied in this project have not been submitted to any other
university or institution for the award of any degree or diploma.
(Signature) (Signature)
Project Guide: Head of the Department
We express our deep sense of gratitude to our beloved Director Dr. P.S.Raju , Gokaraju
Rangaraju Institute of Engineering and Technology for the valuable guidance and for
permitting us to carry out this project.
With immense pleasure,we record our deep sense of gratitude to our beloved principal
Dr. J. N. Murthy for permitting us to carry out this project.
We express our deep sense of gratitude to our beloved guide Mr.Sankara Babu, Associate
professor, Department of CSE, Gokaraju Rangaraju Institute of Engineering and
Technology, Hyderabad for the valuable guidance and suggestions, keen interest and
through encouragement extended throughout period of project work.
I consider myself lucky enough to get such a good project. This project would
add as an asset to my academic profile.
We express our thanks to all those who contributed for the successful completion of our
project work.
With gratitude,
H V REDDY 07241A0570
FARHAN AMER 07241A0768
U.KARTHIK KUMAR 07241A0575
A.JAYANTH 07241A0573
INDEX
¾ ABSTRACT
CONTENTS:
1. INTRODUCTION
INTRODUCTION TO PROJECT
PURPOSE OF THE PROJECT
EXISTING SYSTEM & ITS DISADVANTAGES
PROPOSED SYSTEM & ITS ADVANTAGES
2. SYSTEM ANALYSIS
3. FEASIBILITY STUDY
4. REQUIREMENT SPECIFICATIONS
5. SYSTEM DESIGN
5.1 . INTRODUCTION
5.2 DATA FLOW DIAGRAMS
5.3 UML DIAGRAMS
5.4 E-R DIAGRAM
5.5 NORMALIZATION
5.6 DATA DICTIONARY
6. OUTPUT SCREENS
7. SYSTEM TESTING
8. SYSTEM SECURITY
8.1 INTRODUCTION
8.2 SECURITY IN SOFTWARE
9. BIBLIOGRAPHY
Abstract:
Multi Banking System
Introduction:
The Multi Banking System Interface is targeted to the future banking solution for the users
who is having multiple bank accounts in multiple banks. This interface integrates all existing
banks and provides business solutions for both retail and corporate.
This system acts as a standard interface between the clients and all the banks, By using
this portal any client who maintain accounts in various banks can directly log on to Multi
Banking System Interface and make any kind of transactions. In the backend, system will take
care of the entire obligation required in order to carry on transaction smoothly.
Project Analysis:
1. Admin Module
2. Customer Module
3. Bank Admin Module
4. Reports Module
1. Admin Module:
The admin module will be used by the administrator of this portal, admin can accept or
reject the requests from the bankers, and also admin can accept or reject the requests from
the users. The requests are in the form of bank registration, customer registration. This module
is having following functionalities.
♦ Pending Bankers Requests: By using this functionality Administrator can give
access permeations to all bankers who are registered in this portal.
♦ Pending User Requests: By using this functionality Administrator can give access
permeations to all users who are registered in this portal.
2. Customer Module:
This module describes all about customers, by using this module any customer can do
some operations like create a new account, view the account information, Transfer amount
from one account to other account and customer can also see the Transaction Reports. This
module consists following functionalities.
♦ Create New Account: By using this functionality user can create a new account in
any bank by selecting bank name option.
♦ View Account Information: By using this functionality user view all his account
details, this can be viewed by users who are having account in any bank.
♦ Transfer Amount: By using this functionality user can transfer money from his
account to other accounts of same bank or other banks.
♦ Transaction Reports: By using this functionality user can get all his transaction
reports like accepted transactions, rejected transactions and pending transactions.
3. Bank Admin Module:
This module deals with all transactions of bank management. By using this module bank
staff can view all details of customers, they can go for any transactions of their customers and
also they can give access permeations to all customers of that bank. This module consists
following functionalities.
♦ List of Customers: By using this functionality Bank admin can get their entire
customers list and their details.
♦ List of Accounts: By using this functionality Bank admin can get their entire
customers list based on selected account type like saving account, current account etc.
♦ Transfer Pending: By using this functionality Bank admin can maintain money
transfer details of customers.
♦ Transfer Declines: By using this functionality Bank admin can maintain money
transfer rejected customer details.
♦ New Accounts Pending: By using this functionality Bank admin can maintain entire
user details who are requesting for new account in that bank.
4. Reports Module:
In this module administrator will get different types of reports regarding customers like
Number of customers of this portal and no. of banks registered in this portal. This module is
controlled by administrator only.
Software requirements:
Operating System : Windows
Technology : Java/j2ee (JDBC, Servlets, JSP)
Web Technologies : Html, JavaScript, CSS
Web Server : Tomcat
Database : Oracle
Software’s : J2SDK1.5, Tomcat 5.5, Oracle 9i
Hardware requirements:
Hardware : Pentium based systems with a minimum of p4
RAM : 256MB (minimum)
Additional Tools:
HTML Designing : Dream weaver Tool
Its purpose is to create a common portal for multiple banks. So users can login here and
can. Access any of the available banks and can do required transactions.
Currently we are having lot of banks in the market and any person can do transactions
of any individual bank either manually or in online. But no one can do all banks
transactions in a single portal or in single bank. This is the main disadvantage in
existing system to avoid this problem we are introducing “multi banking system”.
The Multi Banking System Interface is targeted to the future banking solution for the users
who is having multiple bank accounts in multiple banks. This interface integrates all
existing banks and provides business solutions for both retail and corporate.
This system acts as a standard interface between the clients and all the banks, By using
this portal any client who maintain accounts in various banks can directly log on to Multi
Banking System Interface and make any kind of transactions. In the backend, system will
take care of the entire obligation required in order to carry on transaction smoothly.
2.1 STUDY OF THE SYSTEM
To provide flexibility to the users, the interfaces have been developed that are accessible
through a browser. The GUI’S at the top level have been categorized as
The ‘administrative user interface’ concentrates on the consistent information that is practically,
part of the organizational activities and which needs proper authentication for the data
collection. These interfaces help the administrators with all the transactional states like Data
insertion, Data deletion and Date updation along with the extensive data search capabilities.
The ‘operational or generic user interface’ helps the end users of the system in transactions
through the existing data and required services. The operational user interface also helps the
ordinary users in managing their own information in a customized manner as per the included
flexibilities
Input design is a part of overall system design. The main objective during the input design is
as given below:
• To produce a cost-effective method of input.
• To achieve the highest possible level of accuracy.
• To ensure that the input is acceptable and understood by the user.
INPUT STAGES:
The main input stages can be listed as below:
• Data recording
• Data transcription
• Data conversion
• Data verification
• Data control
• Data transmission
• Data validation
• Data correction
INPUT TYPES:
It is necessary to determine the various types of inputs. Inputs can be categorized as follows:
• External inputs, which are prime inputs for the system.
• Internal inputs, which are user communications with the system.
• Operational, which are computer department’s communications to the system?
• Interactive, which are inputs entered during a dialogue.
INPUT MEDIA:
At this stage choice has to be made about the input media. To conclude about the input
media consideration has to be given to;
• Type of input
• Flexibility of format
• Speed
• Accuracy
• Verification methods
• Rejection rates
• Ease of correction
• Storage and handling requirements
• Security
• Easy to use
• Portability
Keeping in view the above description of the input types and input media, it can be said that
most of the inputs are of the form of internal and interactive. As
Input data is to be the directly keyed in by the user, the keyboard can be considered to be the
most suitable input device.
OUTPUT DESIGN:
In general are:
• External Outputs whose destination is outside the organization.
• Internal Outputs whose destination is with in organization and they are the User’s main
interface with the computer. Outputs from computer systems are required primarily to
communicate the results of processing to users. They are also used to provide a
permanent copy of the results for later consultation. The various types of outputs
• Operational outputs whose use is purely with in the computer department.
• Interface outputs, which involve the user in communicating directly with the system.
OUTPUT DEFINITION
The outputs should be defined in terms of the following points:
Type of the output
Content of the output
Format of the output
Location of the output
Frequency of the output
Volume of the output
Sequence of the output
For Example
• Will decimal points need to be inserted
• Should leading zeros be suppressed.
OUTPUT MEDIA:
In the next stage it is to be decided that which medium is the most appropriate for the output.
The main considerations when deciding about the output media are:
Keeping in view the above description the project is to have outputs mainly coming
under the category of internal outputs. The main outputs desired according to the requirement
specification are:
The outputs were needed to be generated as a hard copy and as well as queries to be viewed
on the screen. Keeping in view these outputs, the format for the output is taken from the
outputs, which are currently being obtained after manual processing. The standard printer is to
be used as output media for hard copies.
Umbrella
DOCUMENT CONTROL
• Feasibility Study
Requirements • TEAM FORMATION ASSESSMENT
Gathering • Project ANALYSIS & CODE UNIT TEST
Specification DESIGN
PREPARATION
INTEGRATION ACCEPTANCE
& SYSTEM DELIVERY/INS
TALLATION TEST
TESTING
Umbrella
TRAINING
SDLC is nothing but Software Development Life Cycle. It is a standard which is used by
software industry to develop good software.
Stages in SDLC:
♦ Requirement Gathering
♦ Analysis
♦ Designing
♦ Coding
♦ Testing
♦ Maintenance
Requirements Gathering stage:
The requirements gathering process takes as its input the goals identified in the high-level
requirements section of the project plan. Each goal will be refined into a set of one or more
requirements. These requirements define the major functions of the intended application,
define
operational data areas and reference data areas, and define the initial data entities. Major
functions include critical processes to be managed, as well as mission critical inputs, outputs
and reports. A user class hierarchy is developed and associated with these major functions,
data areas, and data entities. Each of these definitions is termed a Requirement.
Requirements are identified by unique requirement identifiers and, at minimum, contain a
requirement title and
textual description.
These requirements are fully described in the primary deliverables for this stage: the
Requirements Document and the Requirements Traceability Matrix (RTM). The requirements
document contains complete descriptions of each requirement, including diagrams and
references to external documents as necessary. Note that detailed listings of database tables
and fields are not included in the requirements document.
The title of each requirement is also placed into the first version of the RTM, along with
the title of each goal from the project plan. The purpose of the RTM is to show that the product
components developed during each stage of the software development lifecycle are formally
connected to the components developed in prior stages.
In the requirements stage, the RTM consists of a list of high-level requirements, or goals,
by title, with a listing of associated requirements for each goal, listed by requirement title. In
this hierarchical listing, the RTM shows that each requirement developed during this stage is
formally linked to a specific product goal. In this format, each requirement can be traced to a
specific product goal, hence the term requirements traceability.
The outputs of the requirements definition stage include the requirements document, the
RTM, and an updated project plan.
♦ Feasibility study is all about identification of problems in a project.
♦ No. of staff required to handle a project is represented as Team Formation, in this case
only modules are individual tasks will be assigned to employees who are working for that
project.
♦ Project Specifications are all about representing of various possible inputs submitting to the
server and corresponding outputs along with reports maintained by administrator
Analysis Stage:
The planning stage establishes a bird's eye view of the intended software product, and
uses this to establish the basic project structure, evaluate feasibility and risks associated with
the project, and describe appropriate management and technical approaches.
The most critical section of the project plan is a listing of high-level product requirements, also
referred to as goals. All of the software product requirements to be developed during the
requirements definition stage flow from one or more of these goals. The minimum information
for each goal consists of a title and textual description, although additional information and
references to external documents may be included. The outputs of the project planning stage
are the configuration management plan, the quality assurance plan, and the project plan and
schedule, with a detailed listing of scheduled activities for the upcoming Requirements stage,
and high level estimates of effort for the out stages.
Designing Stage:
The design stage takes as its initial input the requirements identified in the approved
requirements document. For each requirement, a set of one or more design elements will be
produced as a result of interviews, workshops, and/or prototype efforts. Design elements
describe the desired software features in detail, and generally include functional hierarchy
diagrams, screen layout diagrams, tables of business rules, business process diagrams,
pseudo code, and a complete entity-relationship diagram with a full data dictionary. These
design elements are intended to describe the software in sufficient detail that skilled
programmers may develop the software with minimal additional input.
When the design document is finalized and accepted, the RTM is updated to show that each
design element is formally associated with a specific requirement. The outputs of the design
stage are the design document, an updated RTM, and an updated project plan.
The development stage takes as its primary input the design elements described in the
approved design document. For each design element, a set of one or more software artifacts
will be produced. Software artifacts include but are not limited to menus, dialogs, data
management forms, data reporting formats, and specialized procedures and functions.
Appropriate test cases will be developed for each set of functionally related software artifacts,
and an online help system will be developed to guide users in their interactions with the
software.
The RTM will be updated to show that each developed artifact is linked to a specific
design element, and that each developed artifact has one or more corresponding test case
items. At this point, the RTM is in its final configuration. The outputs of the development stage
include a fully functional set of software that satisfies the requirements and design elements
previously documented, an online help system that describes the operation of the software, an
implementation map that identifies the primary code entry points for all major system functions,
a test plan that describes the test cases to be used to validate the correctness and
completeness of the software, an updated RTM, and an updated project plan.
During the integration and test stage, the software artifacts, online help, and test data are
migrated from the development environment to a separate test environment. At this point, all
test cases are run to verify the correctness and completeness of the software. Successful
execution of the test suite confirms a robust and complete migration capability. During this
stage, reference data is finalized for production use and production users are identified and
linked to their appropriate roles. The final reference data (or links to reference data source
files) and production user list are compiled into the Production Initiation Plan.
The outputs of the integration and test stage include an integrated set of software, an
online help system, an implementation map, a production initiation plan that describes
reference data and production users, an acceptance plan which contains the final suite of test
cases, and an updated project plan.
During the installation and acceptance stage, the software artifacts, online help, and initial
production data are loaded onto the production server. At this point, all test cases are run to
verify the correctness and completeness of the software. Successful execution of the test suite
is a prerequisite to acceptance of the software by the customer.
After customer personnel have verified that the initial production data load is correct and
the test suite has been executed with satisfactory results, the customer formally accepts the
delivery of the software.
The primary outputs of the installation and acceptance stage include a production
application, a completed acceptance test suite, and a memorandum of customer acceptance of
the software. Finally, the PDR enters the last of the actual labor data into the project schedule
and locks the project as a permanent project record. At this point the PDR "locks" the project
by archiving all software items, the implementation map, the source code, and the
documentation for future reference.
Maintenance:
Outer rectangle represents maintenance of a project, Maintenance team will start with
requirement study, understanding of documentation later employees will be assigned work and
they will under go training on that particular assigned category.
For this life cycle there is no end, it will be continued so on like an umbrella (no ending point to
umbrella sticks).
2.4 SYSTEM ARCHITECTURE
Architecture flow:
Below architecture diagram represents mainly flow of requests from users to database through
servers. In this scenario overall system is designed in three tires separately using three layers
called presentation layer, business logic layer and data link layer. This project was developed
using 3-tire architecture.
User
SERVER
Request Response
Data
Base
URL Pattern:
Presentation
Layer
DATABASE
URL pattern represents how the requests are flowing through one layer to another layer
and how the responses are getting by other layers to presentation layer through server in
architecture diagram.
Feasibility Study:
Preliminary investigation examines project feasibility, the likelihood the system will be
useful to the organization. The main objective of the feasibility study is to test the Technical,
Operational and Economical feasibility for adding new modules and debugging old running
system. All systems are feasible if they are given unlimited resources and infinite time. There
are aspects in the feasibility study portion of the preliminary investigation:
• Technical Feasibility
• Operation Feasibility
Economical Feasibility
The technical issue usually raised during the feasibility stage of the investigation includes the
following:
• Does the necessary technology exist to do what is suggested?
• Do the proposed equipments have the technical capacity to hold the data required to
use the new system?
• Will the proposed system provide adequate response to inquiries, regardless of the
number or location of users?
• Can the system be upgraded if developed?
Are there technical guarantees of accuracy, reliability, ease of access and data security?
OPERATIONAL FEASIBILITY
User-friendly
Customer will use the forms for their various transactions i.e. for adding new routes,
viewing the routes details. Also the Customer wants the reports to view the various
transactions based on the constraints. Theses forms and reports are generated as user-
friendly to the Client.
Reliability
The package wills pick-up current transactions on line. Regarding the old transactions,
User will enter them in to the system.
Security
The web server and database server should be protected from hacking, virus etc
Portability
The application will be developed using standard open source software (Except Oracle) like
Java, tomcat web server, Internet Explorer Browser etc these software will work both on
Windows and Linux o/s. Hence portability problems will not arise.
Availability
This software will be available always.
Maintainability
The system called the ewheelz uses the 2-tier architecture. The 1st tier is the GUI, which is
said to be front-end and the 2nd tier is the database, which uses My-Sql, which is the back-
end.
The front-end can be run on different systems (clients). The database will be running at the
server. Users access these forms by using the user-ids and the passwords.
The computerized system takes care of the present existing system’s data flow and
procedures completely and should generate all the reports of the manual system besides a
host of other management reports.
It should be built as a web based application with separate web server and database
server. This is required as the activities are spread through out the organization customer
wants a centralized database. Further some of the linked transactions take place in
different locations.
Open source software like TOMCAT, JAVA, Mysql and Linux is used to minimize the
cost for the Customer.
4.1 FUNCTIONAL REQUIREMENTS SPECIFICATION
1. Admin Module
2. Customer Module
3. Bank Admin Module
4. Reports Module
1. Admin Module:
The admin module will be used by the administrator of this portal, admin can accept or
reject the requests from the bankers, and also admin can accept or reject the requests from
the users. The requests are in the form of bank registration, customer registration. This module
is having following functionalities.
♦ Pending Bankers Requests: By using this functionality Administrator can give
access permeations to all bankers who are registered in this portal.
♦ Pending User Requests: By using this functionality Administrator can give access
permeations to all users who are registered in this portal.
2. Customer Module:
This module describes all about customers, by using this module any customer can do
some operations like create a new account, view the account information, Transfer amount
from one account to other account and customer can also see the Transaction Reports. This
module consists following functionalities.
♦ Create New Account: By using this functionality user can create a new account in
any bank by selecting bank name option.
♦ View Account Information: By using this functionality user view all his account
details, this can be viewed by users who are having account in any bank.
♦ Transfer Amount: By using this functionality user can transfer money from his
account to other accounts of same bank or other banks.
♦ Transaction Reports: By using this functionality user can get all his transaction
reports like accepted transactions, rejected transactions and pending transactions.
3. Bank Admin Module:
This module deals with all transactions of bank management. By using this module bank
staff can view all details of customers, they can go for any transactions of their customers and
also they can give access permeations to all customers of that bank. This module consists
following functionalities.
♦ List of Customers: By using this functionality Bank admin can get their entire
customers list and their details.
♦ List of Accounts: By using this functionality Bank admin can get their entire
customers list based on selected account type like saving account, current account etc.
♦ Transfer Pending: By using this functionality Bank admin can maintain money
transfer details of customers.
♦ Transfer Declines: By using this functionality Bank admin can maintain money
transfer rejected customer details.
♦ New Accounts Pending: By using this functionality Bank admin can maintain entire
user details who are requesting for new account in that bank.
4. Reports Module:
In this module administrator will get different types of reports regarding customers like
Number of customers of this portal and no. of banks registered in this portal. This module is
controlled by administrator only.
Hardware requirements:
Hardware : Pentium based systems with a minimum of P4
RAM : 256MB (minimum)
Additional Tools:
About Java:
Initially the language was called as “oak” but it was renamed as “java” in 1995.The primary
motivation of this language was the need for a platform-independent(i.e. architecture
neutral)language that could be used to create software to be embedded in various
consumer electronic devices.
Java has had a profound effect on the Internet. This is because; java expands the Universe
of objects that can move about freely in Cyberspace. In a network, two categories of
objects are transmitted between the server and the personal computer. They are passive
information and Dynamic active programs. in the areas of Security and probability. But Java
addresses these concerns and by doing so, has opened the door to an exciting new form of
program called the Applet.
Applications and applets. An application is a program that runs on our Computer under
the operating system of that computer. It is more or less like one creating using C or C++
.Java’s ability to create Applets makes it important. An Applet I san application, designed to
be transmitted over the Internet and executed by a Java-compatible web browser. An
applet I actually a tiny Java program, dynamically downloaded across the network, just like
an image. But the difference is, it is an intelligent program, not just a media file. It can be
react to the user input and dynamically change.
Java Architecture
Java architecture provides a portable, robust, high performing environment for
development. Java provides portability by compiling the byte codes for the Java Virtual
Machine, which is then interpreted on each platform by the run-time environment. Java is a
dynamic system, able to load code when needed from a machine in the same room or
across the planet.
Compilation of code
When you compile the code, the Java compiler creates machine code (called byte
code)for a hypothetical machine called Java Virtual Machine(JVM). The JVM is
supposed t executed the byte code. The JVM is created for the overcoming the
issue of probability. The code is written and compiled for one machine and
interpreted on all machines .This machine is called Java Virtual Machine.
Compiling and interpreting java source code.
Java
PC Java Byte interpreter
compiler code
SPARC Java
Compiler interpreter
(SPARC)
During run-time the Java interpreter tricks the byte code file into thinking that it is running
on a Java Virtual Machine. In reality this could be an Intel Pentium windows 95 or sun
SPARCstation running Solaris or Apple Macintosh running system and all could receive
code from any computer through internet and run the Applets.
Simple:
Java was designed to be easy for the Professional programmer to learn and to use
effectively. If you are an experienced C++ Programmer. Learning Java will oriented
features of C++ . Most of the confusing concepts from C++ are either left out of Java or
implemented in a cleaner, more approachable manner. In Java there are a small number of
clearly defined ways to accomplish a given task.
Object oriented
Java was not designed to be source-code compatible with any other language. This
allowed the Java team the freedom to design with a blank state. One outcome of this was a
clean usable, pragmatic approach to objects. The object model in Java is simple and easy
to extend, while simple types, such as integers, are kept as high-performance non-objects.
Robust
The multi-platform environment of the web places extraordinary demands on a program,
because the program must execute reliably in a variety of systems. The ability to create
robust programs. Was given a high priority in the design of Java. Java is strictly typed
language; it checks your code at compile time and runtime.
Java virtually eliminates the problems of memory management and deal location, which
is completely automatic. In a well-written Java program, all run-time errors can and should
be managed by your program.
4.4.2 Servlets/JSP
INTRODUCTION
A servlet is similar to proprietary server extension, except that it runs inside a Java Virtual
Machine (JVM) on the server, so it is safe and portable
Unlike CGI and Fast CGI, which use multiple processes to handle separate program or
separate requests, separate threads within web server process handle all servlets. This
means that servlets are all efficient and scalable.
Servlets are portable; both across operating systems and also across web servers. Java
Servlets offer the best possible platform for web application development.
Servlets are used as replacement for CGI scripts on a web server, they can extend any
sort of server such as a mail server that allows servelts t extend its functionality perhaps by
performing a virus scan on all attached documents or handling mail filtering tasks.
Servlets provide a Java-based solution used to address the problems currently associated
with doing server-side programming including inextensible scripting solutions platform-
specific API’s and incomplete interface.
Servlets are objects that conform to a specific interface that can be plugged into a Java-
based server.Servlets are to the server-side what applets are to the server-side what
applets are to the client-side-object byte codes that can be dynamically loaded off the net.
They differ form applets in than they are faceless objects(with out graphics or a GUI
component).They serve as platform independent, dynamically loadable,plugable helper
byte code objects on the server side that can be used to dynamically extend server-side
functionality.
For example an HTTP servlet can be used to generate dynamic HTML content when
you use servlets to do dynamic content you get the following advantages:
Attractiveness of Servlets:
They are many features of servlets that make them easy and attractive to tuse these
include:
One of the great advantages of the servlet API is protocol independent. It assumes
nothing about:
Features of Servlets:
Servlets are persistent.Servlet are loaded only by the web server and can
maintain services between requests.
Servlets are fast. Since servlets only need to be l\loaded once, they offer much
better performance over their CGI counterparts.
Servlets are platform independent.
Servlets are extensible Java is a robust, object-oriented programming language,
which easily can be extended to suit your needs.
Servlets are secure
Servlets are used with a variety of client.
Every servlet must implement the javax.servelt interface. Most servlets implement it by
extending one of two classes.javax.servlet.GenericServlet or
javax.servlet.http.HttpServlet.A protocol-independent servlet should subclass Generic-
Servlet.while an Http servlet should subclass Http Servlet, which is itself a subclass of
Generic-servlet with added HTTP-specific functionality.
Unlike a java program, a servlet does not have a main() method,Instead the server in the
process of handling requests invoke certain methods of a servlet.Each time the server
dispatches a request to a servlet, it invokes the servelts Service() method,
A generic servlet should override its service() method to handle requests as appropriate for
the servlet. The service() accepts two parameters a request object and a response object
.The request object tells the servlet about the request, while the response object is used to
return a response
Loading Servlets:
Servlets can be loaded from their places. From a directory that is on the CLASSPATH. The
CLASSPATH of the JavaWebServer includes service root/classes/, which is where the
system classes reside
From the <SERVICE_ROOT/servlets/directory.This is not in the server’s classpath. A class
loader is used to create servlets form this directory.New servlets can be added-existing
servlets can be recompiled and the server will notice these changes. From a remote
location.For this a code base like http://nine.eng/classes/foo/ is required in addtion to the
servlet’s class name.Refer to the admin Gui docs on servlet section to see how to set this
up.
Invoking Servlets
A servlet invoker is a servlet that invokes the “server” method on a named servlet.If the
servlet is not loaded in the server,then the invoker first loades the servlet(either form local
disk or from the network) and the then invokes the “service” method.Also like applets,local
servlets in the server can be identified by just the class name.In other words, if a servlet
name is not absolute.it is treated as local.
The client can ask for a document that is served by the servlet.
The client(browser) can invoke the servlet directly using a URL, once it has been
mapped using the SERVLET ALIASES Section of the admin GUI
The servlet can be invoked through server side include tags.
The servlet can be invoked by placing it in the servlets/directory
The servlet can be invoked by using it in a filter chain
The Servlet Life Cycle:-
The Servlet life cycle is one of the most exciting features of Servlets.This life cycle is a
powerful hybrid of the life cycles used in CGI programming and lower-level NSAPI and
ISAPI programming.
The servlet life cycle allows servlet engines to address both the performance and resource
problems of CGI and the security concents of low level server API programming.
Servlet life cycle is highly flexible Servers hava significant leeway in how they choose to
support servlets.The only hard and fast rule is that a servlet engine must confor to the
following life cycle contact:
It’s perfectly legal for a servlet t be loaded, created an initialzed in its own JVM,only to be
destroyed an dgarbage collected without hancdling any clientrequest or after handling just
one request
The most common and most sensible life cycle implemntations for HTTP servelts are:
Just like Applets servlets can define init() and destroy() methods, A servlets
init(ServiceConfig) method is called by the server immediately after the server constructs
the servlet’s instance.Depanding on the server and its configuration, this can be at any of
these times
In any case, nit() is guaranteed to be called before the servlet handles its first request
The init() method is typically used to perform servlet initialization creating or loading objects
that are used by the servlet in handling of its request. In order to providing a new servlet
any information about itself and its environment, a server has to call a servelts init() method
and pass an object that implement the ServletConfig interface.
This ServletConfig object supplies a servlet with information about its initialization
parameters.These parameters are given to the servlets and are not associated with any
single request.They can specify initial values, such as where a counter should begin
counting, or default values, perhaps a template to use when not specified by the request,
The server calls a servlet’s destroy() method when the servlet is about to be unloaded. In
the destroy() method, a servlet should free any resources it has acquired that will not be
garbage collected. The destroy() method also gives a servlet a chance to write out its
unsaved. cached information or any persistent information that should be read during the
next call to init().
Session Tracking:
HTTP is a stateless protocol, it provides no way for a server to recognize that a sequence
of requests is all from the same client. This causes a problem for application such as
shopping cart applications. Even in chat application server can’t know exactly who’s making
a request of several clients.
The solution for this is for client to introduce itself as it makes each request, Each clients
needs to provide a unique identifier that lets the server identify it, or it needs to give some
information that the server can use to properly handle the request, There are several ways
to send this introductory information with each request Such as:
USER AUTHORIZATION:
One way to perform session tracking is to leverage the information that comes with
User authorization. When a web server restricts access to some of its resources to only
those clients that log in using a recognized username and password. After the client logs in,
the username is available to a servlet through getRemoteUser()
Wean use the username to track the session. Once a user has logged in, the browser
remembers her username and resends the name and password as the user views new
pages on the site. A servlet can identify the user through her username and they’re by
Track her session.
The biggest advantage of using user authorization to perform session tracking is that it’s
easy to implement. Simply tell the protect a set of pages, and use getRemoteUser() to
identify each client.Another advantage is that the technique works even when the user
accesses your site form or exists her browser before coming back.
The biggest disadvantage of user authrization is that it requires each user to register for an
account and then log in in each time the starts visiting your site. Most users will tolerate
registering and lagging in as a necessary evil when they are accessing sensitive
information, but its all overkill for simple session tracking.Other problem with user
authorization is that a user cannot simultaneously maintain more than one session at the
same site.
Hidden Form Fields:
One way to support anonymous session tracking is to use hidden from fields. As the name
implies, these are fields added to an HTML, form that are not displayed in the client’s
browser, They are sent back to the server when the form that contains them is submitted.
In a sense, hidden form fields define constant variables for a form. To a servlet receiving a
submitted form, there is no difference between a hidden fields and a visible filed.
As more and more information is associated with a clients session . It can become
burdensome to pass it all using hidden form fields. In these situations it’s possible to pass
on just a unique session ID that identifies as particular clients session.
That session ID can be associated with complete information about its session that is
stored on the server.
The advantage of hidden form fields is their ubiquity and support for anonymity. Hidden
fields are supported in all the popular browsers, they demand on special server
requirements, and they can be used with clients that haven’t registered or logged in.
The major disadvantage with this technique, however is that works only for a sequence of
dynamically generated forms, The technique breaks down immediately with static
documents, emailed documents book marked documents and browser shutdowns.
URL Rewriting:
URL rewriting is another way to support anonymous session tracking, With URL
rewriting every local URL the user might click on is dynamically modified. or rewritten, to
include extra, information. The extra information can be in the deform of extra path
information, added parameters, or some custom, server-specific.URL change. Due to the
limited space available in rewriting a URL, the extra information is usually limited to a
unique session.
Using extra path information works on all servers, and it works as a target for forms that
use both the Get and Post methods. It does not work well if the servlet has to use the extra
path information as true path information
The advantages and disadvantages of URL.rewriting closely match those of hidden form
fileds,The major difference is that URL rewriting works for all dynamically created
documents, such as the Help servlet, not just forms. With the right server support, custom
URL rewriting can even work for static documents.
Persistent Cookies:
A fourth technique to perform session tracking involves persistent cookies. A cookie is a bit
of information. sent by a web server to a browser that can later be read back form that
browser. When a browser receives a cookie, it saves the cookie and there after sends the
cookie back to the server each time it accesses a page on that server, subject to certain
rules. Because a cookie’s value can uniquely identify a client, cookies are often used for
session tracking.
Persistent cookies offer an elegant, efficient easy way to implement session tracking.
Cookies provide as automatic an introduction for each request as we could hope for. For
each request, a cookie can automatically provide a client’s session ID or perhaps a list of
clients performance. The ability to customize cookies gives them extra power and
versatility.
The biggest problem with cookies is that browsers don’t always accept cookies sometimes
this is because the browser doesn’t support cookies. More often its because
The browser doesn’t support cookies. More often its because the user has specifically
configured the browser to refuse cookies.
The power of servlets is nothing but the advantages of servlets over other approaches,
which include portability, power, efficiency, endurance, safety
elegance,integration,extensibility and flexibility.
Portability:
As servlets are written in java and conform to a well defined and widely accepted
API.they are highly portable across operating systems and across server implementation
We can develop a servlet on a windows NT machine running the java web server and later
deploy it effortlessly on a high-end Unix server running apache. With servlets we can really
“write once, serve every where”
Servlet portability is not the stumbling block it so often is with applets, for two reasons
First,Servlet portability is not mandatory i.e. servlets has to work only on server machines
that we are using for development and deployment
Second, servlets avoid the most error-prone and inconstancy implemented portion of the
java languages.
Power:
Servlets can harness the full power of the core java. API’s: such as Networking and Url
access, multithreading, image manipulation, data compression, data base connectivity,
internationalization, remote method invocation(RMI) CORBA connectivity, and object
serialization, among others,
Servlet invocation is highly efficient, Once a servlet is loaded it generally remains in the
server’s memory as a single object instance, There after the server invokes the servelt to
handle a request using a simple, light weighted method invocation .Unlike the CGI, there’s
no process to spawn or interpreter to invoke, so the servlet can begin handling the request
almost immediately, Multiple, concurrent requests are handled the request almost
immediately. Multiple, concurrent requests are handled by separate threads, so servlets are
highly scalable.
Servlets in general are enduring objects. Because a servlets stays in the server’s memory
as a single object instance. it automatically maintains its state and can hold onto external
resources, such as database connections.
Safety:
As they are written in java,servlets inherit the strong type safety of the java language. In
addition the servlet API is implemented to be type safe. Java’s automatic garbage
collection and lack of pointers mean that servlets are generally safe from memory
management problems like dangling pointers invalid pointer references and memory leaks.
Servlets can handle errors safely, due to java’s exception – handling mechanism. If a
servlet divides by zero or performs some illegal operations, it throws an exception that can
be safely caught and handled by the server.
A server can further protect itself from servlets through the use of java security
manager.A server can execute its servlets under the watch of a strict security manager.
Elegance:
The elegance of the servlet code is striking .Servlet code is clean, object oriented
modular and amazingly simple one reason for this simplicity is the served API itself. Which
includes methods and classes to handle many of the routine chores of servlet development.
Even advanced to operations like cookie handling and session tracking tracking are
abstracted int convenient classes.
Integration:
Servlets are tightly integrated with the server. This integration allows a servlet to
cooperate with the server in two ways . for e.g.: a servlet can use the server to translate file
paths, perform logging, check authorization, perform MIME type mapping and in some
cases even add users to the server’s user database.
The servlet API is designed to be easily extensible. As it stands today the API includes
classes that are optimized for HTTP servlets.But later it can be extended and optimized for
another type of servlets.It is also possible that its support for HTTP servlets could be further
enhanced.
Servlets are also quite flexible, Sun also introduced java server pages. which offer a way to
write snippets of servlet code directly with in a static HTML page using syntax similar to
Microsoft’s Active server pages(ASP)
4.4.3 JDBC
What is JDBC?
Any relational database. One can write a single program using the JDBC API,and the
JDBC is a Java Api for executing SQL,Statements(As a point of interest JDBC is
trademarked name and is not an acronym; nevertheless,Jdbc is often thought of as
standing for Java Database Connectivity. It consists of a set of classes and interfaces
written in the Java Programming language.JDBC provides a standard API for tool/database
developers and makes it possible to write database applications using a pure Java API
Using JDBC, it is easy to send SQL statements to virtually program will be able to send
SQL .statements to the appropriate database. The Combination of Java and JDBC lets a
programmer writes it once and run it anywhere.
JDBC drivers are available for most database platforms, from a number of vendors and
in a number of different flavours. There are four driver categories
Type 01 drivers use a bridge technology to connect a java client to an ODBC database
service. Sun’s JDBC-ODBC bridge is the most common type 01 driver. These drivers
implemented using native code.
Type 02 drivers wrap a thin layer of java around database-specific native code libraries
for Oracle databases, the native code libraries might be based on the OCI(Oracle call
Interface) libraries, which were originally designed for c/c++ programmers, Because type-
02 drivers are implemented using native code. in some cases they have better performance
than their all-java counter parts. They add an element of risk, however, because a defect in
a driver’s native code section can crash the entire server
Type o4 drivers are the most direct of the lot. Written entirely in java, Type 04 drivers
understand database-specific networking. protocols and can access the database directly
without any additional software
JDBC-ODBC Bridge
If possible use a Pure Java JDBC driver instead of the Bridge and an ODBC driver. This
completely eliminates the client configuration required by ODBC.It also eliminates the
potential that the Java VM could be corrupted by an error in the native code brought in by
the Bridge(that is, the Bridge native library, the ODBC driver manager library, library, the
ODBC driver library, and the database client library)
4.4.4 Oracle
Oracle is a relational database management system, which organizes data in the form of
tables. Oracle is one of many database servers based on RDBMS model, which manages
a seer of data that attends three specific things-data structures, data integrity and data
manipulation.
With oracle cooperative server technology we can realize the benefits of open,
relational systems for all the applications. Oracle makes efficient use of all systems
resources, on all hardware architecture; to deliver unmatched performance, price
performance and scalability. Any DBMS to be called as RDBMS has to satisfy
Dr.E.F.Codd’s rules.
Features of Oracle:
Portable
The Oracle RDBMS is available on wide range of platforms ranging from PCs to super
computers and as a multi user loadable module for Novel NetWare, if you develop application
on system you can run the same application on other systems without any modifications.
Compatible
Oracle commands can be used for communicating with IBM DB2 mainframe RDBMS
that is different from Oracle, which is Oracle compatible with DB2. Oracle RDBMS is a high
performance fault tolerant DBMS, which is specially designed for online transaction processing
and for handling large database applications.
Oracle has become the most popular RDBMS in the market because of its ease of use
• Client/server architecture.
• Data independence.
• Ensuring data integrity and data security.
• Managing data concurrency.
• Parallel processing support for speed up data entry and online transaction processing
used for applications.
• DB procedures, functions and packages.
Dr.E.F.Codd’s Rules
These rules are used for valuating a product to be called as relational database
management systems. Out of 12 rules, a RDBMS product should satisfy at least 8 rules + rule
called rule 0 that must be satisfied.
4.4.5 HTML
HTML provides are not case-sensitive. Using graphics,fonts,different sizes, color, etc.. can
enhance the presentation of the document. Anything
That is not a tag is part of the document it self.
A D V A N T A G E S:-
A HTML document is small and hence easy to send over the net.It is small
because it does not include formatted information.
HTML is platform independent
HTML tags are not case-sensitive.
4.4.6 JAVA SCRIPT
The Java Script Language
JavaScript is a compact , object-based scripting language for developing client and server
internet applications. Netscape Navigator 2.0 interprets JavaScript statements embedded
directly in an HTML page. and Livewire enables you to create server-based applications
similar to common gateway interface(cgi) programs.
Systems design
• External entities
• Data stores
• Process
• Data Flow
DFD DIAGRAMS:
The Unified Modeling Language allows the software engineer to express an analysis model
using the modeling notation that is governed by a set of syntactic semantic and pragmatic
rules.
A UML system is represented using five different views that describe the system from distinctly
different perspective. Each view is defined by a set of diagram, which is as follows.
• User Model View
i. This view represents the system from the users perspective.
ii. The analysis representation describes a usage scenario from the end-
users perspective.
In this the structural and behavioral aspects of the environment in which the
system is to be implemented are represented.
Use case Diagrams represent the functionality of the system from a user’s point of view. Use
cases are used during requirements elicitation and analysis to represent the functionality of the
system. Use cases focus on the behavior of the system from external point of view.
Actors are external entities that interact with the system. Examples of actors include users like
administrator, bank customer …etc., or another system like central database.
UML DIAGRAMS
Use Case Diagram for Administrator:
Use Case Diagram for Bank Administrator:
Use Case Diagram for A/C Holder:
Class Diagram:
Sequence Diagram for Admin:
Sequence Diagram for Bank Admin:
Sequence Diagram for Customer:
State Diagram for Admin:
State Diagram for Customer:
State Diagram for Bank Admin:
5.4. ER DIAGRAMS
5.5. NORMALIZATION
Normalization
A relation R is in first normal form if and only if all underlying domains contained
atomic values only.
Introduction to Testing:
Testing is a process, which reveals errors in the program. It is the major quality measure
employed during software development. During software development. During testing, the
program is executed with a set of test cases and the output of the program for the test cases is
evaluated to determine if the program is performing as it is expected to perform.
In order to make sure that the system does not have errors, the different levels of
testing strategies that are applied at differing phases of software development are:
Unit Testing:
Unit Testing is done on individual modules as they are completed and become
executable. It is confined only to the designer's requirements.
In this the test cases are generated on the logic of each module by drawing flow
graphs of that module and logical decisions are tested on all the cases. It has been uses to
generate the test cases in the following cases:
Integrating Testing :
Integration testing ensures that software and subsystems work together a whole. It
tests the interface of all the modules to make sure that the modules behave properly
when integrated together.
System Testing :
Involves in-house testing of the entire system before delivery to the user. It's aim is to
satisfy the user the system meets all requirements of the client's specifications.
Acceptance Testing :
It is a pre-delivery testing in which entire system is tested at client's site on real world data
to find errors.
Test Approach :
Bottom up approach
Top down approach
Bottom up Approach:
Testing can be performed starting from smallest and lowest level modules and
proceeding one at a time. For each module in bottom up testing a short program executes
the module and provides the needed data so that the module is asked to perform the way it
will when embedded with in the larger system. When bottom level modules are tested
attention turns to those on the next level that use the lower level ones they are tested
individually and then linked with the previously examined lower level modules.
This type of testing starts from upper level modules. Since the detailed activities
usually performed in the lower level routines are not provided stubs are written. A stub is a
module shell called by upper level module and that when reached properly will return a
message to the calling module indicating that proper interaction occurred. No attempt is
made to verify the correctness of the lower level module.
Validation:
The system has been tested and implemented successfully and thus ensured that all the
requirements as listed in the software requirements specification are completely fulfilled. In
case of erroneous input corresponding error messages are displayed
8.1 INTRODUCTION
System Security:
Introduction:
To configure authentication for a Web Application, use the <login-config>
element of the web.xml deployment descriptor. In this element you define the security realm
containing the user credentials, the method of authentication, and the location of resources for
authentication.
8.2 SECURITY IN SOFTWARE
1. Open the web.xml deployment descriptor in a text editor or use the Administration
Console. Specify the authentication method using the <auth-method> element. The
available options are:
BASIC
Basic authentication uses the Web Browser to display a username/password dialog
box. This username and password is authenticated against the realm.
FORM
Form-based authentication requires that you return an HTML form containing the username and
password. The fields returned from the form elements must be: j_username and j_password, and the
action attribute must be j_security_check. Here is an example of the HTML coding for using FORM
authentication:
<form method="POST" action="j_security_check">
<inputtype="text"name="j_username">
<input type="password" name="j_password">
</form>
The resource used to generate the HTML form may be an HTML page, a JSP, or a servlet. You define
this resource with the <form-login-page> element.
The HTTP session object is created when the login page is served. Therefore, the session.isNew()
method returns FALSE when called from pages served after successful authentication.
9. BIBLIOGRAPHY
References for the Project Development Were Taken From the following
Books and Web Sites.
JAVA Technologies
HTML
JDBC