Data signatures

Question

I'm in troubles. I've a pdf form, made with livecycle, where I've put a submit by email button with data signature. The reicever can verify the signature visually by signature tab. There is a way to verify data signatures automatically, by javascript or Formcalc? The result of the verify is given back in a object or in anything else?

Answer 1

Hi Cory,
Here's how you can write signatures to detect Credit Card numbers and Social Security Numbers sent in clear text over email/web. There is a chance of false positives as mentioned below but you may be able to customize this to suit your needs.
1. Corporate credit card being sent over clear in email/ web:
If we are looking at Visa/Mastercard format, which is 1234 5678 1234 5678
To add some granularity, Visa numbers begin with 4 and Mastercard with 5, and can have dashes instead of spaces in between...
so the format will be
[45]234[\x20\x2d]5678[\x20\x2d]1234[\x20\x2d]5678
where \x20 is the hexadecimal number for space and \x2d for a dash (-)
If you consider Amex format, which is 1234 123456 12345 but the numbers begin with 3...
so the format is [3]234[\x20\x2d]123456[\x20\x2d]12345
Considering the above formats, the regex will be
[45][0-9][0-9][0-9][\x20\x2d][0-9][0-9][0-9][0-9][\x20\x2d][0-9][0-9][0-9][0-9][\x20\x2d][0-9][0-9][0-9][0-9]
or
[3][0-9][0-9][0-9][\x20\x2d][0-9][0-9][0-9][0-9][0-9][0-9][\x20\x2d][0-9][0-9][0-9][0-9][0-9]
in engine string-tcp to ports 25 and #WEBPORTS. The issue with this is...if there's something that matches the string, and it's not a credit card number, the signature will still fire.
The same note applies to social security numbers.
2. Social Security Numbers being sent in clear.
The regex will be [0-9][0-9][0-9][-][0-9][0-9][-][0-9][0-9][0-9][0-9]
in string-tcp to ports 25 and webports.
Any traffic that matches this pattern will fire the sig, hence there is a chance of false positives.