Question Re: Client Side Encryption in SAP PI in Technology Q&A

Client Side Encryption in SAP PI

melchior_periyanayagam — Thu, 09 May 2019 13:29:31 GMT

Hi Experts,

My requirement is to send a SOAP request with encrypted card data (card number, expiry year, expiry month, holder name and cvc) to the payment card site.

Before sending the SOAP request to payment card site, the card data needs to be encrypted as per the client side encryption. To encrypt it, they have provided a java script which will encrypt the card data along with the public key configured in our account provided by payment card site.

The javascript will provide the key string which needs to be included in the SOAP request.

Sample SOAP request,

<SOAP_request>

<encrypted_carddata> Key string generated using javascript </encrypted_carddata>

</SOAP_request>

In the above SOAP request, the Java script needs to be executed separately with card data and it will provide the Key string which needs to be included in the main SOAP request.

Kindly provide your expert help on how to execute the java script for card encrytion in the main SOAP request.

Many Thanks

Melchior

Re: Client Side Encryption in SAP PI

vicky20691 — Fri, 10 May 2019 03:32:30 GMT

Hi,

This is already answered in below thread

https://answers.sap.com/questions/11907760/index.html

https://blogs.sap.com/2012/12/14/pgp-encrypting-part-of-an-xml-message/

Regards,

Vikas

Re: Client Side Encryption in SAP PI

melchior_periyanayagam — Mon, 13 May 2019 07:24:46 GMT

Thanks for your reply Vikas.

As per the compliance, we can't use the PGP encryption.

Our payment site has provided a javascript to encrypt the card data using the key defined for our account. My requirment is to encrypt the card data by executing the java script and key provided by them and the output key string needs to be included in the main SOAP request to the payment site.

Kindly provide your suggestion on how to run the javascript in SAP PI/PO for data encryption

Many Thanks

Re: Client Side Encryption in SAP PI

Muniyappan — Mon, 13 May 2019 10:06:24 GMT

may be you can try using java mapping to achieve this. please check if you are able to call java script from java program. You can google to check on how to call javascript from java code.

https://stackoverflow.com/questions/22856279/call-external-javascript-functions-from-java-code

Re: Client Side Encryption in SAP PI

vicky20691 — Mon, 13 May 2019 10:20:28 GMT

Hi,

For this you need to have the following (you have to be good with java).

1. JavaScript in one file

2. Read the javascript file inside a java code.. ( my choice is to use UDF as it is only one field and apply udf on that field)..

3. writing UDF to read an external file can be tedious job, so you can go for entire java code

import javax.script.*;

public class InvokeScript

{

public static void main(String[] args) throws Exception

{

ScriptEngineManager manager = new ScriptEngineManager();

ScriptEngine engine = manager.getEngineByName("JavaScript");

engine.eval(Files.newBufferedReader(Paths.get("usr/sap/home/myjavascriptfile.js"),StandardCharsets.UTF_8));

Invocable inv = (Invocable) engine;

Object obj = inv.invokeFunction("functioninJavaSript", "fieldValue to encrypt");

return obj.toString()

}