[{"data":1,"prerenderedAt":135},["ShallowReactive",2],{"project:\u002Fprojects\u002Fsecure-access-platform":3,"projects-nav":125},{"id":4,"title":5,"body":6,"code":95,"description":89,"extension":96,"layers":97,"link":100,"meta":101,"navigation":102,"order":90,"path":103,"role":104,"seo":105,"sitemap":106,"stack":107,"stem":121,"summary":122,"year":123,"__hash__":124},"projects\u002Fprojects\u002Fsecure-access-platform.md","Secure access platform",{"type":7,"value":8,"toc":88},"minimark",[9,14,18,21,25,78,82,85],[10,11,13],"h2",{"id":12},"context","Context",[15,16,17],"p",{},"Industrial machines required centralized management of credentials, software configurations, users and operational requests without exposing sensitive information across applications, databases or administrative workflows.",[15,19,20],{},"The challenge was not simply storing machine data, but defining how secrets were generated, protected, exchanged and accessed throughout their lifecycle.",[10,22,24],{"id":23},"what-i-built","What I built",[26,27,28,36,42,48,54,60,66,72],"ul",{},[29,30,31,35],"li",{},[32,33,34],"strong",{},"Cryptographic architecture",": designed application-level protection for sensitive machine data using symmetric and asymmetric cryptographic primitives according to the type and lifecycle of each secret.",[29,37,38,41],{},[32,39,40],{},"Key management",": separated encrypted data from the cryptographic material required to access it, reducing the impact of database or application-layer compromise.",[29,43,44,47],{},[32,45,46],{},"Hardware-backed security",": integrated hardware-protected key operations and trusted key storage to reduce exposure of high-value cryptographic material.",[29,49,50,53],{},[32,51,52],{},"Credential lifecycle",": implemented secure generation, storage and retrieval of machine credentials and password policies, with sensitive information cryptographically protected and plaintext restricted to non-sensitive data.",[29,55,56,59],{},[32,57,58],{},"Access control",": modeled users, roles and authorization boundaries around security-sensitive operations and machine resources.",[29,61,62,65],{},[32,63,64],{},"Secure API layer",": developed .NET REST services with validation, controlled resource exposure, optimistic concurrency and explicit handling of sensitive entities.",[29,67,68,71],{},[32,69,70],{},"Contract-driven frontend",": used OpenAPI-generated TypeScript contracts to keep security-sensitive frontend and backend operations aligned as the platform evolved.",[29,73,74,77],{},[32,75,76],{},"Auditability & consistency",": structured operations so changes to critical machine information could be tracked and conflicting updates could not silently overwrite one another.",[10,79,81],{"id":80},"outcome","Outcome",[15,83,84],{},"A centralized security layer for machine-related credentials and configurations, replacing scattered handling of sensitive information with controlled cryptographic workflows.",[15,86,87],{},"The platform made security part of the application architecture itself rather than an additional protection layer applied after the system had already been designed.",{"title":89,"searchDepth":90,"depth":90,"links":91},"",2,[92,93,94],{"id":12,"depth":90,"text":13},{"id":23,"depth":90,"text":24},{"id":80,"depth":90,"text":81},"PRJ-002","md",[90,98,99],3,4,null,{},true,"\u002Fprojects\u002Fsecure-access-platform","Full-stack & cybersecurity engineer, from cryptographic architecture to operator interface",{"title":5,"description":89},{"loc":103},[108,109,110,111,112,113,114,115,116,117,118,119,120],"C#",".NET","Vue","SQL","OpenAPI","AES","RSA","ECC","X.509","TPM","Digital signatures","Envelope encryption","Key wrapping","projects\u002Fsecure-access-platform","A cybersecurity-focused platform for managing industrial machines, credentials and sensitive configurations through cryptographic protection, controlled access and auditable workflows.",2025,"4cmrO8O4YGuq5_hdHVOCOc0rNCwUYFsTB6lZYROCUak",[126,130,131],{"path":127,"code":128,"title":129},"\u002Fprojects\u002Fthermal-process-control","PRJ-001","Industrial thermal process control",{"path":103,"code":95,"title":5},{"path":132,"code":133,"title":134},"\u002Fprojects\u002Ftraining-management-platform","PRJ-003","Training management platform",1791651091122]