History of the Ketroute Framework

Ketroute Framework was originally created by Peter Ramokone with a core philosophy of reducing coding effort through its "less coding" approach. This philosophy emphasizes efficiency and productivity by minimizing repetitive tasks and promoting modular, reusable components. The framework adheres to the principles of "Don't Repeat Yourself" (DRY), ensuring that developers write concise and maintainable code without redundancy.

In 2010, Ketroute Framework was adopted by Tucksee (PTY) LTD. A Leading Software Development and Consultation House based in Johannesburg, South Africa, marking a significant milestone in its development and adoption within the industry.

The framework underwent substantial structural changes with the introduction of version 15 in 2018. This pivotal update introduced support for hybrid service controllers and unlimited interface contexts, enhancing its capabilities to meet the evolving needs of complex government IT solutions. These advancements solidified Ketroute Framework's reputation for robustness, flexibility, and scalability in handling diverse and demanding application environments.

Ketroute Framework embraces a "Zero Trust Architecture" approach to security, where no entity, whether inside or outside the network perimeter, is trusted by default. This security model ensures that every access attempt is verified and authenticated, significantly reducing the risk of data breaches and unauthorized access to sensitive government information.

Data & Storage Security

On our platform, we prioritize data security and transmission integrity by employing top-tier encryption methods and adhering to established security standards.

Password Complexity Configurations to ensure robust protection and compliance with industry best practices.
Data Protection Mechanisms with Tokenization & 1way data hashing and encryption.
3-Eye Principle for processes involving sensitive and business-critical information.
We maintain comprehensive audit logs of user activities to help in monitoring, detecting, and responding to unauthorized or suspicious activities.

Inter-Connected Processes

Application requests are generally initiated by the end users interacting with various self-service portals or backend interfaces.

Backgroup processes and console requests are managed by an in-house toolkit called ChooChoo Handler to handle high-volume data processing.
Hybrid (Web Service) that support both RESTful and SOAP services providing the developers with auto-generated swagger(OpenAPI) and WSDL.
Powerful Context Bridge that routes and manages requests based on their type(application,web service,cron jobs and console applications).
Component Handshake & Configuration model to establishing communication and configuration between various components.

Access Control Security Framework

Sophisticated role-based access control mechanisms, allowing you to define and manage user roles and permissions with precision. This ensures that your application's security policies are enforced consistently.

Role Access Generation: user permissions is verified based on the their role, defining access to various components and modules within the application.
Resource Access Check: Additional checks are performed to ensure the user has the right to access specific resources (components and modules).
Multi-Factor Authentication (MFA) using TOTP, Pattern and external Authentication apps(Google Authenticator and more).
Prohibition of Access: This mechanism also allows for prohibiting access to components from specific application contexts or interfaces

Web Service Architecture

Enhanced Web Service Hybrid(SOAP, RESTful) method to authenticate using API keys digital signatures, and optional VPN connectivity. We implement robust handshaking mechanisms with encryption using AES and one-way hashing.

API Credentials: Utilize API username, password, and key for secure authentication and authorization.
Digital Signatures: Implement digital signatures to verify the authenticity and integrity of communications.
Encryption: Employ AES encryption to protect data in transit and at rest.
VPN Connectivity: Offer the option to connect over a VPN for an additional layer of security.