EDIsec

Danske EDIsec - General EDI security module
EDIsec is a registered trademark of Systematic Software Engineering A/S.

Danske EDIsec is a security module that facilitates the implementation of an authenticity check and confidentiality of EDI irrespective of the format.

Danske EDIsec is based on the generation of a digital signature that is inserted in an EDIFACT transmission. It is also possible to encrypt the message before it is sent. On receipt the transmission is decrypted and the authenticity of the digital signature is checked. The transmission is rejected if the signature is invalid.

The digital signature is generated by means of RSA cipher system with an optional key length of 1024 or 2048 bits.

Specifications

• Ensuring the authenticity and confidentiality by digital signature and encryption, respectively
• Using the SHA-1 hash function and RSA after the PKCS#1 standard for the generation of digital signatures
• Using the 3-DES algorithm for the encryption of messages. Using padding algorithm (ISO 10126) and Cipher-Block-Chaining algorithm (ISO 10116)
• Character conversion and conversion between EDIFACT version 3 and 4
• Simple command line interface for easy integration or API for Windows 95/NT, UNIX, AS/400 and MVS platforms

System description
The command line interface of the security module and API makes the following functionality available:

• Key handling
• Formatting a transmission to be sent
• Handling a transmission received

This module does not handle key compromising, as they are kept and administered by the internal systems, either in a database or files.