We are looking for a way of securing a file against modification during
transfer.
A user logs in to our application to generate a payroll data export file
(.csv format) the file is generated and encrypted in our system and sent via
email to the requester. The requester then decrypts the file then logs into
another application and uploads the file. The problem is that between
decrypting and uploading the file the data can be manipulated.

Sarbanes oxley auditors are failing us on this deficiency.
We would like our system to automatically add the following options to the
file prior to email transfer.

1. Render the csv or text file read only (currently available in both Word
and Excel)
2. Option to Disable the application window scroll bar (so the file cannot
be read onscreen beyond the first page)
3. Encrypt the csv file with PGP encryption key of the requester (already in
place) 4. Create and save a hash value of the file in both the message field
of the transfer email message and in a table within our database.
The other application will be tasked with retrieving the Each quarter the
other application will be required to provide the hash values of all files
uploaded from our application. the hash values should match if not there was

I am asking for help and guidance in knowing how to accomplish step 2. As
well as feedback
3. Upon decripting Limit online MS office application options to upload
file, or close window in order to force the reciever. No save, modify, or
delete option.
3.
--
Pamela J Bradford
FEPS Business Analyst
ACS Inc.

----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.

http://www.microsoft.com/office/comm...el.programming