Data encryption criteria


The Data Encryption Criteria screen, shown in the below figure, allows you to encrypt and decrypt data.

Data Encryption Criteria Screen

Action  Sets  Display  Show  Options  Menu  Help
 -------------------------------------------------------------------------------
 File-AID/Data Solutions ------- Data Encryption Criteria ----------------------
 COMMAND ===>                                                  SCROLL ===> PAGE

 SET  1 OF  1           EMPLOYEE-MASTER-FILE                     GBL = N SEL = N
 ---- FIELD LEVEL/NAME ------- -FORMAT- RO ----PARAMETERS---- + ENCRYPTION NAME
 ******************************* TOP OF DATA ***********************************
 5 EMP-NUMBER                    5/AN
 5 EMP-LAST-NAME                15/AN
 5 EMP-FIRST-NAME               10/AN
 5 EMP-MID-INIT                  1/AN
 5 FILLER                        2/AN
 5 EMP-TITLE                    30/AN
 5 EMP-PERSONAL-INFO SYNC       23/GRP
   10 EMP-NATL-ID-NUMBER         9/NUM
   10 FILLER                     1/AN
   10 EMP-DATE-OF-BIRTH          6/AN
   10 EMP-DOB-REDEF REDEFINES EMP-DATE-OF-BIRTH
   10 EMP-DOB-REDEF SYNC         6/GRP
     15 EMP-DOB-MM               2/NUM
     15 EMP-DOB-DD               2/NUM
 Valid RO: EX, EP, FM - For a list of exits, leave ENCRYPTION NAME blank.   
 Commands: SELect, GBL, View 

Field Descriptions

Set

Identifies the set of criteria displayed.

01 Level Name

Name of the record file structure from layout.

GBL

Specifies whether one or more global fields have been attached to this set of criteria (N or Y).

SEL

Specifies whether selection criteria has been attached to this set of criteria (N or Y).

FIELD LEVEL/NAME

Name of the field from layout.

FORMAT

Length and type of field.

RO

Specify a relational operator. Possible values are:

EX

Execute

EP

Edit parameters

=

Replicates last entered criteria

FM

Field mask. For more information, see Field Mask.

Parameters

Specify E for encryption or D for decryption.

Encryption Name

Specify the Encryption exit name. If this field is left blank when a relational operator (RO) is specified, Data Solutions displays the Available Encryption/ Decryption Exits screen.

Primary commands

The following is a list of primary commands and their abbreviations that are valid on the Euro Conversion, Euro Triangulation, Data Analysis, Date Pattern Analysis, Data Translator, Data Generator, Pattern Data, Data Encryption, and Data Replace Criteria screens.

ALIGN (AL)

Controls display of ALIGNED/UNALIGNED term for PL/I data.

ARRAY (AR)

Controls display of array declaration information for PL/I data.

BACK

Positions the display to the previous criteria. Synonym for LEFT.

CANCEL (CAN)

Returns to main panel without saving current updates.

CHANGE (CHG or C)

Switch from the Selection Criteria to the Change Criteria panels. This command is only valid on the Record Layout Selection Criteria and Global Selection Criteria panels.

COMPLEX (CM)

Controls display of COMPLEX terms for PL/I data.

DELETE (DEL)

Deletes a criteria set (change and associated selection criteria).

DISPLAY (DIS)

Specifies a display format.

DOWN

Scrolls down.

END

Terminates display of the formatted criteria screen and displays the Change Criteria Menu.

FILLER (FILL)

Controls display of FILLER fields.

FORWARD (FWD)

Positions the display to the next criteria. Synonym for RIGHT.

GLOBAL (GBL)

Displays the GLOBAL Change Criteria panel which shows the defined global fields (variables). Use this panel to create criteria which will test values of global fields. Valid only if a global field has been defined.

On the GLOBAL Change Criteria panel, you enter change criteria in the same way you enter change criteria on the record layout; the normal relational operators are available to operate against the global variables.

GROUP (G)

Controls the display of occurrences of group-level items.

INPUT/ INSERT (I)

Inputs/inserts a new criteria set.

IMPORT

Imports an existing change criteria set.

LEFT

Positions the display to the previous criteria. Synonym for BACK.

LOCATE (L)

Scrolls directly to the specified record layout line.

LR (Locate Record)

Positions the display to the specified criteria number.

MESSAGE (MSG)

Controls the message display.

OCCURS (OCC)

Controls the display of array declaration items.

OFFSET (OFST)

Controls format of SHOW OFFSET (Columns, Relative, or Hex).

PICTURE (PIC)

Controls the display of the PICTURE or DISPLAY line for numeric data.

PROFILE (PROF)

Displays profile information lines.

RECORD (REC)

Closes the Global Change or Global Selection Criteria panel and returns to the Formatted Selection or Change Criteria panel. Only valid on the Global Selection Criteria or Global Change Criteria panels.

REDEFINE (RED)

Controls the display of data item redefinitions.

REFLNG (REF)

Controls the display of BIT/CHAR REFER field length reference lines for PL/I data.

REPEAT (R)

Causes a criteria set (formatted change and selection) to be repeated.

RESET (RES)

Causes excluded lines to be redisplayed.

RETURN

Returns to the Primary Option Menu.

RIGHT

Positions the display to the next criteria. Synonym for FORWARD.

SELECT (SEL)

Displays the Formatted Selection Criteria screen.

SHOW (S)

Displays LEVEL, NUMBER, FORMAT, OFFSET, or PICTURE information for the selection fields.

SYNC

Controls the display of the SYNC term for fields in a COBOL record layout.

UP

Scrolls up.

VIEW (V)

Displays the View Criteria screen which is a keyword summary of the current settings for formatted change and selection criteria. See View Specification Keywords Screen.

ZERO (Z)

Controls the display of leading zeros in the numeric data fields.

Shortcut Commands

When entering or modifying change criteria you can change the type of criteria you are about to enter by using any of the following primary commands:

AGING

Switches to Date Aging

DATAENCR

Switches to Data Encryption

DATAGEN

Switches to Data Generation

DATANALY

Switches to Data Analysis

DATAPGEN

Switches to Pattern Data Generation

DATAREPL

Switches to Data Replace

DATATRAN

Switches to Data Translator

DATAVALD

Switches to Validate Criteria

DATEANLY

Switches to Date Pattern Analysis

EUROCNV

Switches to Euro Conversion

EUROTRI

Switches to Currency Triangulation

FLDEXITS

Switches to Field Exits

For example: You have selected “7 Encryption” on the criteria menu and you are entering encryption criteria and then you want to switch to data translation.

You could press PF3 to go back to the menu and then select “4 Translator” or you could enter the primary command DATATRAN on the data encryption criteria screen.

If you have already entered criteria for the set that is currently displayed, the primary command process assumes that you want to insert the new type of criteria after the current set.

Selection criteria

The Selection Criteria screen is displayed when you enter the SELECT (SEL) primary command on the Data Encryption Criteria screen. See Selection-criteria for a sample of this screen and field descriptions.

Global criteria

The Global Criteria screen is displayed when you enter the GLOBAL (GBL) primary command in any of the Data Solutions Change or Selection Criteria screens. It lists all global variables defined with option G of the Criteria Menu. See Global Criteria for a sample of this screen and field descriptions.

Field mask

The Field Mask Criteria screen is displayed when you enter the Field Mask (FM) relational operator in the relational operator (RO) column on the Data Encryption Criteria screen. See Field Mask for a sample of this screen and field descriptions.

Storing encryption Key In A separate data set

When the encryption criteria is created, you can specify to store the encryption key in a data set that is separate from the change criteria. This protects the data set so that anyone without authority is not able to view the encryption key. The data set file can be any type, including PDS or PDS/E; there is no restriction on the type of file. The name you specify must be a fully-qualified data set name. When the encryption criteria is executed, File-AID/Data Solutions reads the data set and uses the encryption key value that is specified in the first record in the data set.

Important

This feature only applies to the Key Encrypt/Decrypt exits (ENCRYPT, ENCRYPTC and ENCRYPTN). It is not available with other encryption exits.

To specify a separate data set, enter the EP parameter at the Data Encryption Criteria screen. This will display the Field Exit Parameters screen. From this screen: Instead of entering the actual encryption key, enter DSN= followed by the fully-qualified name of the data set where the encryption key resides (see the below figure).

Entering Dataset Name to Store Encryption Key

File-AID/Data Solutions --- Field Exit Parameters ----------------------------
 Command ===>
 Field Name:  MIX-FIELD
  Exit Name:  ENCRYPT  

  E  DSN=<MY.KEY.FILE>__________________________________
 _______________________________________________________
 _______________________________________________________
 _______________________________________________________
 _______________________________________________________

Available encryption/decryption exits

The Available Encryption/Decryption Exits window, shown in the below figure, allows you to select the name of the encryption/decryption exit for Data Solutions to use to process the indicated data field. This window displays only the names of encryption/decryption exits (i.e., field exit type E).

The Available Encryption/Decryption Exits window is displayed when you leave the Encryption Name field blank on the Data Encryption/Decryption Criteria screen.

Available Encryption/Decryption Exits Screen

image2021-9-21_12-34-52.png

Data Encryption Output

Data Encryption Output from Analysis or Copy

   Menu  Utilities  Compilers  Help
 -------------------------------------------------------------------------------
 BROWSE    DFHLLM0.DASOLUTN.WF.D00047.T153655         Line 00000000 Col 001 080
 Command ===>                                                  Scroll ===> PAGE
********************************* Top of Data **********************************
SET  1 ENCR-====================================================================
SET  1 ENCR-Records Read 16, Selected 16, Fields Processed 16, Invalid 0  

******************************** Bottom of Data *************************

Data Encryption Output from Update/Review

 Menu  Utilities  Compilers  Help
 -------------------------------------------------------------------------------
 BROWSE    DFHLLM0.DASOLUTN.WF.D00047.T154741         Line 00000000 Col 001 080
 Command ===>                                                  Scroll ===> PAGE
********************************* Top of Data **********************************
HRHIE, XTCL Y.                         
SQFCHLHL, XHIKE                         
FHUVKU, XWIIP                           
FOKBKOHLR, NUTBKU                       
KWEKLCTMKU, RMWNCV R.                   
ZTUR, NKUHOR U.                         
CTTBKU, CKUSKUV F.                      
XKZZKUETL, VCTIHE K.                    
DKLLKRP, XTCL Z.                        
OWLFTOL, HSK (CTLKEV)                   
ITLUTK, XHIKE                           
UTTEKBKOV, ZUHLDOWL R.                  
UTTEKBKOV, VKR. K.                      
VHZV, MWOOWHI C.                        
MHECWLNVTL, NKTUNK                     
MWOETL, MTTRUTM                         
SET  1 ENCR-====================================================================
SET  1 ENCR-Records Read 16, Selected 16, Fields Processed 16, Invalid 0

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*