Batch Process Mapping and Process Records

Some batch processes are required to display the actual values of the sensitive data in their outputs (report files or pages). For example, the account numbers that appear in direct deposit transmit files created by the DDP001 process in Payroll for North America need to be unmasked.

The Encryption Framework supports the unmasking of data to be used in the outputs of batch processes in applications. Setup includes:

Defining the process record. This step defines an association between a source record (which stores the encrypted data) and the process record (which stores the masked data by deriving it from its source record).
Maps the application batch process that is required to display unmasked data in its outputs to a source record (from which the encrypted data is retrieved), and a source staging record (from where the data unmasking occurs).

During the application batch process run, the framework copies the required data from the source record over to the source staging record for decryption. The framework process also copies the required data from the process record over to the process staging record. After that, the framework process unmasks the data in the process staging record using the decrypted data in the source staging record. The application batch process can then retrieve the actual values of the sensitive data for use in its outputs.