Show TOC

Encrypting the Display of Sensitive DataLocate this document in the navigation structure

Use

You can make fields that contain sensitive data in IDoc display transactions unrecognizable using encryption.

Result

Process

To display the data in encrypted format, proceed as follows:

  1. Call transaction WECRYPTDISPLAY.

    A table is displayed, in which you can enter the fields to be encrypted.

  2. Enter the message type, the segment, and the field in the table. You have the following options with regard to the encryption function:

    • If the field Encryption Function is left empty, the corresponding field is displayed with the value '********' in all display transactions.

    • However, you can also store a function module in the Encryption Function field to adjust the encryption; for example, to display only the last three digits of a credit card number, and to display the rest in encrypted format. This function module must be stored with the following interface:

      FUNCTION CC_FUNCTION.
      *"----------------------------------------------------------------------
      
      *"*"Lokale Schnittstelle:
      
      *"  IMPORTING
      
      *"     REFERENCE(I_CCNUM) TYPE  C
      
      *"  EXPORTING
      
      *"     REFERENCE(E_CCNUM_MASKED) TYPE  C
      
      *"----------------------------------------------------------------------
      
        e_ccnum_masked = 'coded value'.
      
       ENDFUNCTION.
      
      
                           
  3. Save your entries.

Result

You have encrypted the display of one or more fields so that the original value is no longer visible as such in the display.

Note

This form of encryption relates only to the display. Encryption at database level is implemented using the BAdI IDOC_DATA_MAPPER and the enhancement spot IDOC_DATA_CRYPT.