Hi
I need to develop an online solution for primary school kids from many schools.
A school needs an administrative login in order to add and manage teachers.
The teachers then need to log in to add and manage the children in their class.
The children then need to log in to perform tests.
The trouble is balancing security with usability. The children will forget and lose their user names and passwords . The teacher needs online access to the children's credentials in order to remind the children of their log in details. Therefore at least the children's log in credentials need to be stored using two way encryption, but this isn't as secure as one way hash.
I've thought about time restricting the children's log in capability by the teacher as a way of increasing security, since this is public facing.
But, I thought it was worth asking on this forum if anyone has any experience developing a more complex authentication system such as this and if they could share their experience and techniques.
Many thanks
Terry
