SAP to NRA Document Processing Workflow - On-premise software service

1. WINDOWS SOFTWARE SERVICE INTO LAN NETWORK (INTERNAL)
192.168.x.x
iDoc XML FTP Download PKCS#11 Signed XML + Cert Status Response
1
SAP
SAP System
• ERP System
• Document source
• iDoc format output
2
iDoc XML
iDoc Converter
• Convert iDoc to XML
• Upload to FTP server
3
FTP Server
• Storage: XML files
• Protocol: FTP/SFTP
• Access: Read/Write
4
Windows Service into (LAN)
• Service: Take Control App Service
• Network: Internal LAN
• Operations:
  - Download XML from FTP
  - Sign with USB token
  - Send to NRA with public key
  - Listen for results from NRA
5
USB Token
• Type: Hardware USB device
• Cert: X.509
• PIN: Pre-defined
6
NRA
National Revenue Agency
• API: Web Service
• Auth: Certificate-based
• Validation: Digital signature

Process Flow Details

1.
SAP System: Generates iDoc documents from business transactions
2.
iDoc Converter: Transforms iDoc format to XML and uploads to FTP server
3.
FTP Server: Stores XML files
4.
Windows Service: Take Control App Service downloads XML files from FTP
5.
USB Token: Signs documents with pre-defined PIN code store to the machine
6.
NRA Processing: Receives signed XML with public key, validates signature, returns status