Solution overview
Data Protection
After a Security Administrator has configured the data protection policy, the data in the intercepted request body will be protected accordingly to previously configured data protection policies. The data will be indexed upon its protection so that it can be searched later on. The request will be then forwarded to the target API where it is only accessible in protected form. If a response is retrieved via eperi sEcure Platform, it will also be unprotected, so that the user only sees data in cleartext. The following graphic shows the process of data protection data by eperi sEcure Platform.
Wildcard Search
A prerequisite is that a Security Administrator has configured wildcard search for a respective API, a data protection policy has been configured and the API endpoint is able to process the result set provided by eperi sEcure Platform as an array. After that, any REST API Request which contains search inputs matching the configuration will be intercepted by eperi sEcure Platform. There, provided search inputs will be searched in the search index. The search inputs then will be replaced by their respective list of results in the request body before passing on their unique references to the target API. Results for this search from the target API are unveiled to clear text during response detokenization. The following graphic shows the process of wildcard search by eperi sEcure Platform.
