# Offline Organization Management with Mawingu

Project Mawingu introduces an innovative approach to managing organizations, ensuring security and accessibility even in offline settings. Here's how the offline management process works, incorporating robust security measures:

#### **Process:**

1. **Organization Information via SMS:**
   * Mawingu's server retrieves relevant organization information, such as tasks, deadlines, and announcements.
   * To accommodate SMS character limits, information is sent in encrypted batches, maintaining confidentiality during transmission.
2. **User Receives Encrypted SMS:**
   * Users receive encrypted SMS containing organization details directly on their phones.
3. **User Performs Actions and Encrypts:**
   * Users review organization information and perform actions such as task assignments or decision-making.
   * Actions and any necessary authentication are encrypted on users' phones using secure encryption methods.
4. **SMS Submission and Server Retrieval:**
   * Encrypted SMS, containing actions and authentication, are sent through the SMS gateway.
   * Mawingu's server retrieves encrypted SMS for processing.
5. **Server Decrypts and Verifies:**
   * The server decrypts SMS using secure keys and verifies users' authentication credentials.
6. **Action Submission (Optional Signing):**
   * **No Signing Required:**
     * Validated actions are directly executed within the organization's management system.
   * **Signing Required:**
     * For actions requiring additional authentication, users may be prompted via SMS to provide additional credentials.
7. **User Verifies (if required):**
   * Users may receive SMS prompts for additional authentication, ensuring secure execution of actions.
   * Additional credentials, if required, are encrypted and sent back via SMS for validation.
8. **Server Validates (if required):**
   * Encrypted credentials are decrypted and validated against secure key derivation functions (KDF).
9. **Final Action Execution (if required):**
   * Upon successful authentication, the server executes the actions within the organization's management system.
