SAP Basis

ADM100 Lesson: Security in the SAP Environment
Encrypted Data Transfer: SNC
Figure 188: Secure Network Communication (SNC)
SAP does not provide encryption itself here, but provides the interface
to connect encryption tools.
SNCisusedtoencrypttheDIAGandRFCprotocols,suchasthe
communication with the SAP GUI or SAPlpd.
You should explain the three levels of protection in the notes for this figure.
The explanation of the technologies for this (digital signature, digital
envelope) is provided later in the lesson. “Authentication” is sometimes
used, “integrity” is rarely used, but complete encryption is usually used
for “confidentiality”, such as for online banking or when exchanging
confidential, person-related data.
SNC is a software layer in the SAP system architecture that provides an
interface to an external security product. You can increase the security of
your SAP system with SNC by implementing additional security functions
that are not directly provided by SAP systems (such as the use of smart
cards for user authentication).
SNC provides security at application level. This means that a secure
connection is guaranteed between the components of an SAP system
(for example, between the SAP GUI and the SAP application server,
irrespective of the communication connection or the transport medium.
You therefore have access to a secure network connection between two
communication partners secured with SNC.
2003/Q3 © 2003 SAP AG. All rights reserved. 591