TSG presents
Data Secure for WebSphere MQ End-to-End Security

Data Secure for WebSphere MQ End-to-End Security (also known as DSMQE2E) is specifically designed to provide cryptographic protection for messages sent using WebSphere MQ without requiring changes to the application.

Data is protected in the form of PKCS#7 Data Objects (or messages). MQ messages may be either signed or signed and encrypted. In addition to the cryptographic protection of messages, DSMQE2E can also be used to compress message data using an LZW based compression technique.

The compression of messages is particularly relevant when cryptographic processing is to be applied, as a PKCS#7 format message (or Data Object) will be larger than the clear text message from which it is created. A further benefit from compression is that the cost of compressing and then encrypting a message is typically lower than the cost of just encrypting the same message.

DSMQE2E uses just three DSTK API calls:

1. P7GSGND To digitally sign an MQ message or message segment
2. P7GSGEV To digitally sign and encrypt an MQ message or message segment
3. P7GETD To extract the clear text and verify the signature

DSMQE2E supports all message types including segmented messages. Distribution lists are fully supported. If messages are encrypted, they are also encrypted on the queues as well as in the MQ log files.

DSMQE2E works by pre and post processing the MQ API calls. To achieve this we use a call interception technique for z/OS batch applications and also for the MQSeries 5.2 distributed systems that we support.

z/OS CICS is supported using the MQ CICS API crossing exit (CSQCAPX).

For WebSphere MQ 5.3 distributed platforms we use the new MQ API crossing exit which provides us with a formally supported technique to pre and post process MQ API calls. Processing is controlled entirely by the DSMQE2E configuration. DSMQE2E will only perform its processing on messages when both the logged on user and the queue being opened have appropriate entries in the configuration.

 

For further information Click Here