Returning Merchandise

For this assignment, add the ability to return defective high-end electronic merchandise to TheLargeRiver.com.

Start with the diagram on Slide 43 (“Final Configuration”) from the March 23 lecture. Your system design needs to support the following scenarios:

• Before returning an item, customers must discuss their problems with it with a support person via a chat system on the sales platform.
• If the tech agrees that there is a legitimate issue, they will issue the customer an RMA (return merchandise authorization) number. This number must be on the returned package. The tech will also document their assessment of the problem on an internal system.
• When the package is received, the RMA is checked, the goods are inspected and evaluated per the stored assessment.
• If everything checks out, a credit is issued to the customer's credit card—but the goods are shipped back to the customer if no problem is found or if the returned merchandise appears to be damaged by the customer.
• If the suspect merchandise is not received within a reasonable period, the customer is notified via email and the RMA is canceled.

Your solution must address the following issues:

• What new resources, if any, need to be protected?
• What new components, if any, need to be added?
• What new information flows need to be added?
• Why is your design secure against these threats?

You may, if you wish, start by printing out my diagram and drawing on it, but that's by no means required; every entity on that diagram has a unique name that you can refer to. (If anyone wishes, I've even uploaded the .pic file I used to draw that diagram, but I suspect that you'll end up spending more time learning how to use pic and playing with the formatting than actually doing anything productive…) If you do print out the diagram, scan or photograph it and included it in the submitted PDF of your assignment.

This homework must be submitted via Courseworks as a PDF file. To permit anonymous grading, DO NOT put your name on the PDF file. However, you MUST put your group number on the page.