YCPMassageApiInputUE user exit to encrypt sensitive personal information data

Answer

A new generic user-exit, YCPMassageApiInputUE has been introduced in IBM Sterling Order Management 9.5 fix-pack 19. This user-exit is a counterpart of YCPMassageApiOutputUE.

Steps to implement the UE is as follows:

1. Identify the PI columns/attributes which need to be encrypted. Columns like Country, Zip code etc should not be encrypted as they may be used in functional calculations.
   
    
2. Decide an encryption logic which will be used to encrypt the PI data before passing it to the actual API call.
   NOTE: The encryption logic should be such that a text when encrypted again should give the same encrypted value always. If this is not followed, then for the same PI data multiple records may get created in the database, also search by PI data fields may not work.
   
    
3. Based on the encryption logic, using entity extensions, increase the length as necessary, for the above columns chosen for encryption so that the encrypted data can be stored.
   
    
4. Implement the UE YCPMassageAPIInputUE, which will be called before the actual API call. Herein, the above attributes can be encrypted. This encrypted value will be passed on to the API call to store the data into the database.
   
    
5. If needed, the data coming in the API output can be decrypted by implementing the UE YCPMassageAPIOutputUE.
   
    

Please refer to Java documentation for more information.