Diseño e implementación de la lista blanca y lista negra del “Registro Nacional de Equipos Terminales Móviles para la Seguridad” en Bitel Perú

Abstract

The project of Design and Implementation of the White List and Black List of the "NATIONAL REGISTRY OF MOBILE TERMINAL EQUIPMENT FOR SECURITY" in BITEL Peru, consists of the implementation of databases and automated processes that will manage and keep updated on a daily basis the Subscribers Registry and the Registry of terminal equipment stolen, lost and recovered from Peru.In the development of the project, for the implementation, in-house Linux servers were used as the base platform for the applicationsand databases, on which the automated solutions developed through libraries in JAVA language were installed for the generation, upload anddownload of files. In addition, security and integrity methods were configured for files shared with OSIPTEL's RENTESEGSFTP platform, by creating the HASH file for each shared file.For the generation of the white list and black list files, all the indications and criteria of the Technical Instructions provided by OSIPTELwere taken as a reference and for the generation of the source data, procedures and automated PL/SQL packages were implemented, which are connected to other internal BITELdatabases to be able to obtain the necessary information for the generation of the reports of both Lists.For connectivity with theplatform, the internet connection was used, adding access and exit security policies in the firewalls, allowing only access and exits to the public IPs of BITELand OSIPTELrespectively, this in addition to the creation of public keys and private with ECDSA encryption algorithm for the access validation part and the user and ports assigned to BITELprovided by OSIPTEL, which together guarantee the unique and authorized access to RENTESEG's SFTP platform.To comply with the error correction part of the daily files, automatic alarms were configured to detect the errors to be corrected immediately, which allows the operations team to check dailyif it is necessary to take corrective actions or if there are no errors to correct, this in addition to the QLIKAnalytics platform which manages the information reported daily and cumulatively, in order to show the processed information with better visibility and to be able to take actions and decisions according to the need.The RENTESEGplatform implemented in BITELhas the necessary capacity to process in an automated and daily way all the modules involved in the processing of the information, from obtaining the source data to uploading the files in the RENTESEGSFTP,designed an Active-Standby type high availability architecture, which can provide operational continuity in the event of an incident with the main node, there is a backup copy that will beused to replace the affected node.Keywords: Java libraries, PL/SQL packages, ECDSA algorithm, Qlik Analytics, Active-Standby.

The project of Design and Implementation of the White List and Black List of the "NATIONAL REGISTRY OF MOBILE TERMINAL EQUIPMENT FOR SECURITY" in BITEL Peru, consists of the implementation of databases and automated processes that will manage and keep updated on a daily basis the Subscribers Registry and the Registry of terminal equipment stolen, lost and recovered from Peru.In the development of the project, for the implementation, in-house Linux servers were used as the base platform for the applicationsand databases, on which the automated solutions developed through libraries in JAVA language were installed for the generation, upload anddownload of files. In addition, security and integrity methods were configured for files shared with OSIPTEL's RENTESEGSFTP platform, by creating the HASH file for each shared file.For the generation of the white list and black list files, all the indications and criteria of the Technical Instructions provided by OSIPTELwere taken as a reference and for the generation of the source data, procedures and automated PL/SQL packages were implemented, which are connected to other internal BITELdatabases to be able to obtain the necessary information for the generation of the reports of both Lists.For connectivity with theplatform, the internet connection was used, adding access and exit security policies in the firewalls, allowing only access and exits to the public IPs of BITELand OSIPTELrespectively, this in addition to the creation of public keys and private with ECDSA encryption algorithm for the access validation part and the user and ports assigned to BITELprovided by OSIPTEL, which together guarantee the unique and authorized access to RENTESEG's SFTP platform.To comply with the error correction part of the daily files, automatic alarms were configured to detect the errors to be corrected immediately, which allows the operations team to check dailyif it is necessary to take corrective actions or if there are no errors to correct, this in addition to the QLIKAnalytics platform which manages the information reported daily and cumulatively, in order to show the processed information with better visibility and to be able to take actions and decisions according to the need.The RENTESEGplatform implemented in BITELhas the necessary capacity to process in an automated and daily way all the modules involved in the processing of the information, from obtaining the source data to uploading the files in the RENTESEGSFTP,designed an Active-Standby type high availability architecture, which can provide operational continuity in the event of an incident with the main node, there is a backup copy that will beused to replace the affected nodel.