Message-level security

Message-level security facilitates the protection of message data between an initiating and receiving WebSphere MQ Everyplace application. Message-level security is an application layer service. It requires the initiating WebSphere MQ Everyplace application to create a message-level attribute and provide it when using putMessage() to put a message to a target queue.

The receiving application must set up and pass a matching message-level attribute to the receiving queue manager so that the attribute is available when the application invokes getMessage() to get the message from the target queue.

Like local security, message-level security exploits the application of an attribute on a message, an MQeFields object descendent. The initiating application's queue manager handles the application's putMessage() with the message Java dump method or C API, which invokes the attached attribute's Java encodeData() method or C API to protect the message data. The receiving application's queue manager handles the application's getMessage() with the message's Java 'restore' method or C API, which in turn uses the supplied attribute's decodeData() method to recover the original message data.



© IBM Corporation 2002. All Rights Reserved