Re: Secured txt file

[Tim Bronski <tim.bronski@xxxxxxxxx>]

Hi Gad,

You don't say whether confidentiality is needed as well as integrity or 
how the process on the PC will work. That said, a solution to detect 
changes would be to create a PGP detached signature file and send that 
with the original file to the PC. The PC process would need to perform a 
signature check immediately before sending to the bank. This involves no 
encryption so the contents of the original file aren't modified and no 
key or password is required on the PC end.

Tim


On 8/16/2017 7:28 AM, Gad Miron wrote:
> Hello pundits
>
> Need advice with the following:
>
> I'm asked to create on the i a "payment instructions" text file to be sent
> to our bank.
> The actual uploading of the file to the bank is done by a special secured
> *PC based* software.
>
> When testing the process someone pointed to me the need to prevent any user
> (i user or domain user) from changing the content of this text file.
>
> I can create a txt file on the IFS and deny i users access to it (using
> CHGAUT)
> BUT when the file is copied from the IFS to the user's PC in order to send
> it to the bank
> then the access restrictions on the i are no longer valid.
>
> I guess it is worth mentioning that we do not use SSO (Single sign on) for
> accessing the i
>
>
> TIA
>
> Gad