E A I U S E R M A N U A L - Favv

XML Security Token Type
This setting defines which Security strategy is followed in the XML messages. i.e. it
defines what is being passed in the security token. The options are:
1. Security Token
2. Hashed Security Token
3. Date-based Security Token
4. Hashed Date-based Security Token
5. Key-based Security Token
6. Hashed Key-based Security Token
7. AES Encrypted Date-Time Value
The table underneath gives an overview of what the XML Security Token Settings are
and additionally demonstrate how the security token can be filled in. Finally, column 5
gives an example iof the real security token as filled in in the XML .
Option Description Security Token example Key
example
XML Security Token
1. Security Token The security token
plays the role of a
kind of password
SomeSecret - SomeSecret
2. Hashed Security The above security SomeSecret - o3En/+Fm638yxFW4AHlSkb7Taz4=
Token
toke is hashed with
the SHA1 algorithm
3. Date-Based The security token is Some{0}Secret
Some20080929Secret
Security Token combined with the
key
SomeSecret
4. Hashed Date- The security token is Some{0}Secret
hNvdH6haYJ4WAdMYJx9vF/ewpaQ=
Based Security combined with the
Token
key
SomeSecret
5. Key-based The security token is Some{0}Secret
Some210Secret
Security Token combined with the
210*
key
SomeSecret
SomeSecret210
6. Hashed Key-based The combined key / Some{0}Secret
/bvVn9ub3lj1yOKKedP2I024ftc=
Security Token security token is
210*
hashed with the SHA1
algorithm
SomeSecret
v+KoBSaBWHAqMCDVzXGnJi3ejDQ=
7. AES Encrypted A value
= encrypted
encrypted using AES
Sn1Qn6B6bUakN2kjztRMjQU7jfwXor0Jg
WTpX2lrjibwiR/iOI5rkSX4Gzfy0Nufjyb9q
MllSVvSU34fRRoPhg==
(1) Security Token is the simplest form and could be easily rolled out.
(2) Hides this secret from the user
(3) And (4) are still quite simple and make the connection already quite secure. This
should be the targeted average security level…
(5),(6) and (7) are advanced security means making the connection more or less as secure
as if you would have installed a special certificate on the PC of this user.
Sanitel EAI Manual – v1.28 EAIManual.doc 126