A Secure Model for Storage and Dissemination of Examination Results: A Case Study of Zambia Technical Education Vocational and Entrepreneurship Training Authority

Abstract

Most developing countries and public higher institutions of learning have low levels of Information and Communication Technology (ICT) and hence face challenges in securing information and information systems. Therefore, dissemination of examination results through web and mobile applications usually raise security concerns on how to ensure the confidentiality, integrity and authenticity of students’ examination results due to susceptibility of web and mobile applications. In this study, we are proposing a secure model for storage and dissemination of students’ examination results using encryption and cryptographic hash functions to simultaneously provide confidentiality, integrity and authenticity assurances of students’ examination results. The study is based on Technical Education, Vocational and Entrepreneurship Training Authority (TEVETA), an examination body in Zambia. A baseline study was conducted to determine the challenges faced by TEVETA and students regarding dissemination of students’ examination results. Data was collected from 558 respondents consisting of 514 students, 36 members of staff in-charge of examinations in TEVETA registered institutions and 8 TEVETA ICT staff. The results from the study indicate that the current TEVETA examination cycle business processes have a number of irregularities. These include candidate registration, storage of students’ examination results and dissemination of students’ examination results. The results from the baseline study were used to come up with the model which was then used to develop a prototype. The results obtained from the test and evaluation of the developed prototype based on the model shows that the system provides an avenue to ensure the confidentiality of students’ results through encryption as well of integrity and authenticity of students’ examination results through detection of altered students’ examination results during transmission and storage through cryptographic hash function.