Could someone please provide me with some guidance for a system I am designing...
A general overview of the system is that it is to store information on staff and "customers" - this information must be completely secure as it is highly sensitive! Staff must be able to access this information remotely - with functionality to view, add, edit and delete records, and upload/download files.
So the three models I have thought of for this system are:
Remotely login to the server (I have seen an existing system doing this - would it be for security reasons? and I assume it would still be running a client application on the server to allow multiple users?)
A Client application that runs on the users machine, establishes a TCP connection (would OpenSSH or a similar wrapper provide the level of security this system NEEDS?)
Building the system into the website - the browser effectively being the client (this is my favoured solution, however is it the best? )
Have I missed a better solution?
I understand all of these solutions could probably be built to be extremely secure, however I do not extensive knowledge of this area (but I am willing to learn)