C1 (2 points)
https://knobit.org/id/task/dsec-access-design/C1
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dsec-access-design/C1 |
| rdfs:label | C1 (2 points) en |
| schema:hasPart | dsec-access-design C1: the PAN masked in the mart and portal but in clear in the agency file |
| schema:hasPart | dsec-access-design C1: an unkeyed hash of the personal code is recoverable and replaced by a keyed method |
| schema:identifier | C1 |
| schema:position | 1 |
| schema:text | Masking that holds, 1 each. (a) MK-001 masks card_account.pan to the last four digits, but the daily agency file TR-001 carries card_account.pan in clear: the answer reports the clear copy and closes it - TR-001 carries no full PAN (the last four digits the agency's letters need, or a token), or MK-001 is applied to TR-001 too. (b) MK-002 'masks' party.personal_code with an unsalted, unkeyed SHA-256 hash: personal codes are 11 digits with a known structure (birth date, serial, check digit), so hashing every candidate code recovers them. The answer says so and replaces it with a keyed method (tokenisation, or HMAC with a secret key outside the analysts' reach) or an internal surrogate such as party_id - not with another unkeyed hash. en |