GDG SX3200 supports digital signatures in Facturae v.3.2.1 format. The following video shows how the SSFTEST (ABAP) application signs an invoice in XML format.
-
Facturae, digital signature of XML invoices in SAP
Read more " -
Two-factor authentication in SAP using SNC and DNIe
GDG SX3200 supports digital signatures using external security devices such as USB tokens or smartcards. In the following video you can see how to perform two-factor authentication in SAP Logon using SNC (secure connection to SAP) within a Windows domain and the use of a cryptographic storage device such as electronic ID.
The SNC configuration provides security in SAP client-server communications, this configuration has been done using the Windows domain. This configuration combined with the use of the SX3200 product to implement an extra authentication factor is one of the most interesting and striking uses of this new security product.
Reduce incidents due to credential blocking in your organization by delegating the responsibility for credential maintenance to the user.
Read more " -
Invoice Accounting Record and Transparency Law at INTA
GDG Crypt, has successfully completed the project of secure integration of the necessary services to interact between the National Institute of Aerospace Technology "Esteban Terradas" (INTA) and the Accounting Registry of Invoices of SIC3 (Accounting Information System) under the General State Comptroller, for the management of electronic invoicing in the Agency. Through the GDG SX3200 system, an external security product certified by SAP, the distance between the administrations has been narrowed, thanks to the implementation of the web services security protocol, which guarantees not only the identity of the institutions or organizations that interact with the administration, but also the non-repudiation of operations and the integrity of the data protected and managed from the SAP core. This is a further step towards the complete integration of ERP systems to the processes of Public Administrations.
INTA is in the process of developing the integration of its SAP RMS-based records management system, which includes procurement records, with the State Procurement Platform (PCE) owned by the Ministry of Finance and Public Administrations.
INTA Information Technologies is currently finalizing a first phase for the publication of minor contracts. This integration will enable the organization to automatically publish its minor contracts (more than 2000 per year) in the Transparency Portal regulated by Law 19/2013 on Transparency, Access to Public Information and Good Governance, which is fed by the PCE.
Thanks to this, INTA will have an obvious benefit, since it will speed up the publication procedures, and will save efforts and errors in the uploading of this information where it is legally required.
About INTA
The National Institute for Aerospace Technology "Esteban Terradas" (better known as INTA) is an autonomous Spanish organization attached to the Secretary of State for Defense of the Ministry of Defense. It was founded in 1942 by Esteban Terradas, a naval, industrial and aeronautical engineer. Its headquarters are located in Torrejón de Ardoz, Madrid.
Its main functions include:
- The acquisition, maintenance and continuous improvement of all those technologies of application in the aerospace field.
- The performance of all types of tests to check and certify materials, components, equipment, subsystems and systems for application in the aerospace field.
- Technical advice and provision of services to official entities and organizations, as well as to industrial or technological companies.
- Acting as a technological center of the Ministry of Defense.
Read more " -
SAP signature with electronic ID. LTV PADES
GDG SX3200 supports digital signatures using external security devices such as USB tokens or smartcards. In the following video you can see how an electronic signature of a PDF (PADES) is made in SAP with the electronic ID. The signed PDF has LTV (Long Term Validation) format, long term validation, being able to add a time stamp to the signature. Easy integration, natively from ABAP without the need to install extra modules.
Read more " -
SAP signature with electronic ID. PKCS#7
GDG SX3200 supports digital signatures using external security devices such as USB tokens or smartcards. In the following video you can see how a PKCS#7 electronic signature is performed in SAP with the electronic ID.
Easy integration, natively from ABAP without the need to install extra modules.
Compatible with any smart card or USB token on Windows platforms.Read more " -
Reliably protecting data across SAP and beyond
GDG CRYPT is very pleased to announce the release of our GDG SX 3200 security solution for SAP now available in the SAP store. The GDG SX3200 appliance is a cryptographic engine designed to protect and secure data and documents through electronic signatures and envelopes.
Read more " -
Message protection when registering invoices from SAP
GDG Crypt SL, a channel-oriented product company, in its eagerness to offer solutions with guarantees and based on security standards, both for hardware certification in FIPS 140-2 LEVEL 3 and for having the certification provided by the SAP company in terms of data protection, makes available to the market its solution for integrators in SAP business environments. The solution, oriented to protect all the frames included in the operation of the Accounting Register of Invoices (RCF), more specifically to interact with both the General Point of Electronic Invoices (FACe) as well as with the General State Administration Intervention. In this way, GDG SX3200 manages to cover all the mechanisms of interaction with the registry of invoices, both for the public and private sector.
In addition, a long-lasting storage mechanism of the frames has been designed, thus making available at any time all the actions executed in the dialogue process between the administrations and the different companies, with full legal validity and in a standard and personalized way per company; turning a communication frame into an operation record, providing validity, security, monitoring of the operation with full legal validity and security coherence in the business processes.
We invite you to contact us and try our technology.
Read more " -
Security certified by suppliers specialized in corporate management.
Many of the electronic signature services provided by the growing market needs, are focused from a generalist perspective of providing a simple electronic signature without taking into account the environments in which they are going to be deployed; without any intention of undermining the different security evaluation profiles for their importance, independent of their types of modalities (centralized, semi-centralized, almost centralized, pseudo-centralized or mandatory deployment at the client workstation) and their levels of protection(CC, FIPS 140, among others).
From the point of view of a technology-based company, such as GDG Crypt SL, oriented to cover security requirements for enterprise planning systems, having achieved a perfect fusion between security elements with business elements, we want to provide an opportunity for companies to not only choose a tool by technical security criteria but by business criteria, which in the end are those that determine the true return on investment in security in large corporations.
The times of big security certifications as the only differentiating element without taking into account the real environments in which these solutions must be deployed are starting to be left behind, how many times security schemes are unfeasible with business rules... How many software are modified in order to reduce security gaps so that they can be integrated and how many certified devices are self-certified in order to face a real usability scheme.
From our perspective as a technology-based security company, by having security devices with certified cryptographic firmware versions and at the same time providing an external SAP certified security product for enterprise environments, we create this new differentiating factor at the product level, which pursues a single purpose: to strengthen security processes within organizations.
Our commitment is to continue working towards the protection of this critical business process, evolving it towards optimal levels of reliability and with ample guarantees in its execution. We invite you to get to know us and learn a little more about us!
Read more " -
SAP S/4HANA GDG Crypt Certification
GDG Crypt has obtained the certification of the security module for SAP BC-SSF S/4HANA for its SX3200 product.
With this certification, a new solution for the security layer of enterprise software is made available to the market with a new paradigm and updating SAP' s security operations with the latest algorithms and security mechanisms, renewing its catalog of formats.
The certification guarantees native integration from SAP for its cryptographic functionality, without introducing third party elements that modify the data already stored by the enterprise software. The data is handled directly by the SAP kernel and in a natural way. SX3200 manages digital certificates and their keys centrally.
Providing security through a product such as the SX3200, which incorporates an HSM cryptographic device accredited with the main security certifications(FIPS 140-2 Level 3, PCI-DSS, CC EAL 4+) guarantees the safe custody and use of keys.
You can find us in the list of SAP certified solutions here.
Read more " -
Hello everyone!
We invite you to contact GDG Crypt and to participate in this blog, focused on the discussion of general aspects of information security as well as news related to the world of computer security.
Welcome!
Read more "