RE: [sqr-users] Fwd: Encrypting Credit Cards in Contributor Relations

["John J. Berlo" <john@johnberlo.com>]

We just had a situation where we needed to store FTP login information
in our database for use in an SQR to create and automate an SFTP
transfer.  

We had the requirement to allow the user to key in the ID and password
in PeopleSoft, but store the password encrypted.  Then, the SQR would
decrypt the password for use in the script.

The easiest way to accomplish this was to create an encrypt and decrypt
function in Oracle.  If you need the code, I can send it in a separate
email.  To store the password, we used a derived field to input the
password and then PeopleCode (SQLExec) to encrypt the password, using
the FTP userid as the "key", into a hidden password field.  If a user
entered a page with a userid and password already in the record,
PeopleCode was used to call the decrypt function, again using the FTP
userid as the "key", to get the "English" password and display it in the
derived field.  The same logic is used in the SQR for decrypting the
password.  This approach made it so we could use any "query" tool
against the database to get the password.

I know this mentions PeopleSoft a lot, but the same logic could be used
for any other system.  I also realize the specifics are limited to
Oracle, but I'm sure other databases have similar encrypt/decrypt
functionality.

---John
john@johnberlo.com
john.berlo@lendleaserei.com

-----Original Message-----
From: sqr-users-admin@sqrug.org [mailto:sqr-users-admin@sqrug.org] On
Behalf Of Christine Sessler
Sent: Friday, May 16, 2003 9:18 AM
To: sqr-users@sqrug.org
Subject: [sqr-users] Fwd: Encrypting Credit Cards in Contributor
Relations

All -

I'm forwarding this along for a colleague.

We have a need to encrypt credit card information and store it in 
PeopleSoft.  We're exploring what would be the best approach.  The data
is 
an incoming dataset from the bank.

Anyone have any experience encrypting data and storing it in PeopleSoft?

SQR?  App Engine firing PeopleCode?  Other methods?

Thanks!
Chris



>Is there an encryption procedure that can be called via a supplied
>sqc that emulates the peoplecode function 'encrypt'.   I am looking
>to load membership data into CR via a feed from a local bank.   The
>bank would be transmitting Credit Cards numbers and I would like to
>encrypt them prior to loading them into the PS_AV_EP_MBR_DTL record
>so that we can use CyberSource to validate the cards.

************************************************************
Christine Sessler
Cornell University
CIT/Business Information Systems
120 Maple Avenue
Ithaca, NY  14850

607.255.8149  - Office
607.255.6982  - Fax
cms41@cornell.edu
************************************************************
"Life shrinks or expands in proportion to one's courage." - Anais Nin
"If a dog jumps in your lap, it is because he is fond of you;
but if a cat does the same thing, it is because your lap is warmer." - 
Alfred North Whitehead
"The only normal people are the ones you don't know very well." - Joe
Ancis



_______________________________________________
sqr-users mailing list
sqr-users@sqrug.org
http://www.sqrug.org/mailman/listinfo/sqr-users


_______________________________________________
sqr-users mailing list
sqr-users@sqrug.org
http://www.sqrug.org/mailman/listinfo/sqr-users