Encryption of Image document

RE: Encryption of Image document

ericg329 — Wed, 19 Dec 2018 17:15:25 GMT

Are you using Appian Cloud? If so, when you store the image in Appian's document management system, it will be encrypted via the server's OS level encryption. Doing additional custom encryption or storing the document in the database will add a lot more complexity for very limited security gains.

RE: Encryption of Image document

Dude — Mon, 17 Dec 2018 05:10:32 GMT

In Appian storing encrypted data needs customized plug-in because Appian will support data types which can be declared in the CDT. If you want to store the encrypted text in to the text data type, Appian text data type allows maximum 66000 characters. So we have to create a custom plug-in which will encrypt the file and store its BLOB characters in to the table field.

Another way is to use PGP, which will create encryption document and decryption document. This can be stored in the folders instead of sql table. We can store the document ID in the tables to track the documents.

As I tried the PGP, its raising error while decryption though its being configured correctly.

RE: Encryption of Image document

josep — Sat, 15 Dec 2018 05:17:40 GMT

Hello Pradeep,

From this link it mentions
“It requires a Secure Credentials Store configured with an attribute named "password" which contains the password of the private key”

forum.appian.com/.../summary

Do you have the external system key configured(admin console ) ? And the plugin configured as part of it ?

Some links that can help.
docs.appian.com/.../Secure_Credentials_Store.html

docs.appian.com/.../Appian_Administration_Console.html

Jose

RE: Encryption of Image document

pradeepb0001 — Fri, 14 Dec 2018 11:08:07 GMT

Thanks for your suggestions,but i got an error like this mentioned below.

This plug-in [PGPEncryptionUtilities] is not registered to access secured values for the given external system key
[[externalSystemKey=*****, fieldKey=*****, usePerUser=false]].
Check the external systems plug-ins list in the Administration Console. can you Please tell why this error is coming?

Thank you.

RE: Encryption of Image document

josep — Mon, 10 Dec 2018 18:00:21 GMT

Hello Pradeep,

For the PGP install the plugin is is straight forward. You first need the file on Appian and then an encrypted file will be created. It uses the Openpgp libraries.

The only note here is that you need to have public and private key to use it.

Jose

RE: Encryption of Image document

chandu — Mon, 10 Dec 2018 15:25:58 GMT

Hi Pradeep,

There is no direct plugin readily available for File encryption and decryption service, You can create a plugin for this

Please check the below url for sample java code

www.codejava.net/.../file-encryption-and-decryption-simple-example

RE: Encryption of Image document

pradeepb0001 — Mon, 10 Dec 2018 11:51:06 GMT

Hi ,
Thank you for your suggestions.Actually the requirement is i have to encrypt an image document and decrypt it when needed,move it to pdf document generated.but we have to store encrypted file right?should it be appian itself or in DB like SQL.Also is there any document regarding PGP encrption so that it will be helpful for me to understand it.

Thank you.

RE: Encryption of Image document

josep — Mon, 10 Dec 2018 11:31:21 GMT

Hello Pradeep,

I have to say that personally it wouldn’t be my first choice to store a file into the DB.

Are you completely sure you want to store images into the DB? Would it be an option just to encrypt them in the file system along with all the other files? If you are in the cloud you have the BYOK.
docs.appian.com/.../byok.html
If you are worried about some people accessing documents this can be in combination with the folder security restricting the access to the designers for example.

Some thought, When encrypting text you don’t know the actual size of the text but it increase, talking about KB that sounds like it could be a huge one. Then when reading the file again.

I would think you can create a zip file with a password,
Is that an option?

forum.appian.com/.../summary

Or using the PGP encrypt
forum.appian.com/.../summary

Or in Amazon
forum.appian.com/.../summary

With all this options if you insist then after creating the file you can use something like the RDBMS utility shared component.

forum.appian.com/.../summary

Hope this helps
Jose