PCI-DSS Standard - HTTP Custom Adapter Module

[Former Member]

i have a xml message that i post using a HTTP adapter. Its a synchronous message. Its inbound.

XML message contains sensitive information say - Credit Card #, SSN # etc.

Client wants to mask the Credit Card #, SSN # (as per the PCI-DSS standards) even before the xml message hits the integration engine so as to avoid this entry to be stored anywhere in the PI database.

One of the solutions i am thinking is to write a module adapter and to parse the XML message to mask the credit card, SSN # in java

Did anyone implement a similar solution or any other ideas they have who wrote a custom adapter - an extension to HTTP/HTTPS - to mask the sensitive information?

Thanks in advance,

KP

[MichalKrawczyk · Accepted solution]

Hi,

>>>Did anyone implement a similar solution or any other ideas they have who wrote a custom adapter - an extension to HTTP

with http it's pretty simple - it's based on ABAP service in SICF so you just copy it and create your

own service and inside it mask whatever you need before calling XI services

Regards,

Michal Krawczyk

[Former Member · Accepted solution]

Thanks, Michal.

Any documentation that you can refer me to on how to create this service?

Thanks in advance.

KP

[Former Member · Accepted solution]

I got it.

Thanks. I will dig into this and see how i can mask them.

KP