The hotel hotel's Wireless Real name certification project is accepted. This part looks like a pass, but if it's done, it's only measured."Can normal residents pass the certification?"This is a scene that will be the problem. We've done our own projects with more holes to step on than we have in deployment, and here are some of the most easily leakable scenarios.
A peak scene with multiple devices certified simultaneously
The acceptance is usually measured by one or two persons with two devices. But in actual operations, dozens of residents may be certified for the first time at peak hours. The equipment can not be tested and processed by one or two devices.
It is recommended that a pressure test be performed when receiving: simulates 20 to 30 devices simultaneously initiating certification requests, observing the success rate of authentication, average authentication time and the minimum duration of certification in extreme cases. In case of overtime for certification, failure to retest after certification failed or a CPU-filled certification service process, this requires clear recording and correction requirements in acceptance reports.
Border testing for abnormal user input
The normal authentication process is that the resident fills in the correct cell number and authentication code. But there are a lot of unusual input scenarios that need to be covered: enter an existing cell phone number, enter a wrong ID number, enter English letters or special characters into the cell phone number entry box, retries after error in the authentication code entry, and submit after long time spent on the authentication page.
These scenarios not only measure whether the authentication system is being correctly processed (no crash, no error release, clear bug hints), but also whether the error suggests that it is friendly to the occupants. If the certification failed and the code of the system was wrong in English instead of a friendly tip in Chinese, that experience would be as if there were no validation optimization.
Network interruptions and restoration scenes
Certification system dependent on external services——SMS gateways, PMS interfaces, real name check interfaces, and public security logs can affect the authentication process if any external service is in trouble. The receiving and inspection phase simulates the following scenario: How does a certification system handle SMS when it is not available?
In particular, the PMS interface anomaly scenario, which is a critical error tolerance validation when the authentication system automatically matches the PMS interface and if there are problems with the PMS interface, whether the certification can be downgraded to manual input mode instead of being directly unavailable.
Compatibility certification of different mobile brands and operating systems
This scenario may be made in the selection phase, but also in the acceptance phase. In particular, the authentication page displays and interactive experiences on different mobile phones: the iPhone Safari, Andre's native browser, and the micro-letter internal browser. The page renderings of these three browsers vary widely, and if one is suitable for one of them and the other two are ignored, some of the residents see a deformed page.
In particular, the micro-letter internal browsers, many of which open their micro-mails even after WiFi has been installed, are disrupted by the fact that they cannot normally be redirected to authentication pages or to the submission of certification forms.
Authentication for clearance after check-out
The acceptance is a complete check-in process: the guest is registered, certified for WiFi, and then checked out for several hours. Once checked out, verify whether the client’s equipment can still use WiFi (which should not be able), whether the identity information of the customer in the certification system has been cleared (which should be cleared), whether the records of the guest are still available in the log but marked as completed (the log should be kept but the authentication status should be closed).
This scene was jumped in many projects, because testing is difficult and requires a full process of entry and exit with PMS. If the scene is not tested, when people leave their homes and have access to the Internet, the hotel front desk and the security team will be flooded.
Log integrity and exportability validation
The acceptance is performed in the system with a number of different groups of customers, different devices, different rooms and authentication operations. It then exports logs to check, article by article, whether fields in the log are complete, format is compliant, time-bound screening is supported and filtered by room numbers. If the log export requires a private tool from the manufacturer to be completed, the receipt is made sure that it is directly usable during the operational phase and that additional authorization is required.
Permanently running stability validation
Receiving and inspection usually starts at the time of deployment, when the equipment is just reboot and it's in the cleanest state. But the actual operation may run for months or even a year. So if there are conditions, a small cycle of stability tests can be performed during the receiving and inspection phase.——Allow equipment to run for a period of one or two weeks, simulate normal authentication requests, observe the growth rate of log storage, consumption trends in equipment memory and whether the response time for certification services has increased over time.
The acceptance of the wireless real name certification project in hotels and hotels is not a process, but an opportunity to thoroughly examine potential risks. It takes more time to cover these leaky scenes than it would be to handle malfunctions at midnight after being online."Acceptance and acceptance through". Each test scene is tested, the data tested, the results of the tests and the unusual treatments are recorded. This report is not just a delivery for A but also a first-hand reference to the problem of future deployment teams. If the acceptance report is only one page paper, then the receipt report will be used to identify the problem."All functions are normal."Six months later, there was a failure, and no one could tell what had been measured, how measured and what limits were known. Detailed acceptance reports were left to themselves.