ADSS Decryption Service Overview

Home > Concepts & Architecture > ADSS Decryption Service Overview

The ADSS Decryption Service enables business applications to request the decryption of encrypted documents, e.g. the documents may have been encrypted by end-users using a special version of the Go>Sign applet as part of a secure document upload process. The business application can then later request the decryption of the encrypted documents assuming the decryption private key is managed in the secure environment provided by ADSS Server. The interface for the decryption service is based on the OASIS DSS-X Encryption Profile.

A typical workflow for ADSS Decryption service is as follows:

A business application (pre-registered at ADSS Server) sends a decryption request to the ADSS Server.
The ADSS Decryption Service performs all the standard document decryption operations using the specified default decryption key or the key ID provided within the decryption request.
ADSS Server will then provide a decryption response to the calling business application which will either contain the plaintext object or an error message.