CRPT Connector for SAP ATT

The CRPT Connector is a solution provided by 3KEYS GmbH. The CRPT Connector helps companies to fulfil the reporting requirements to the Russian Federal Databases for medications, tobacco, footwear, tires, and light industry products, as well as for upcoming regulations, such as for water, dairy, and other goods.

The Connector is the combination of an ABAP SAP ATT add-on and Java-based middleware used to transfer digitally signed Russian reporting messages from SAP Advanced Track & Trace (SAP ATT) to the CRPT system using a secure connection. Moreover, it downloads incoming messages from CRPT and forwards them to SAP ATTP/ATT for further processing and provides the monitoring for outbound and inbound messages. The CRPT Connector is available both on-premises and as a cloud version. Learn how to become compliant with Russian regulations for Track & Trace by using the 3Keys CRPT Connector—the proven solution!

White Paper

14 COMPANIES FROM DIFFERENT INDUSTRIES OPTED FOR CRPT CONNECTOR AS A SOLUTION

WHY IS THE CONNECTOR NEEDED?

The current Russia Country Package for SAP ATTP 3.0 allows you to generate reports in XML/JSON formats and either automatically upload them to a file share or send them to GIS systems after manual approval and adding a locally applied digital signature. The 3Keys Connector enables bi-directional (inbound and outbound) integration between SAP ATT and GIS MT, IS MDLP, and IS MOTP systems in fully automated mode without the need to install digital signature software on user machines.

HOW WILL THE CONNECTOR
BE USED?

The CRPT Connector will be installed on SAP ATT as pre-delivered ABAP code implementing standard ATT BADIs. The BADIs call Java components, which are then used to communicate with the GIS systems. The BADIs call the HTTP endpoints of the Java component, which in turn communicates with the GIS systems. Vice versa, the ABAP code implements a set of function modules that are then exposed as HTTP endpoints from ATT and are called from the Java component to push notifications and update report statuses. The Java component of the Connector provides GOST TLS connectivity with the IS MDLP and GIS MT APIs, integrates with the CryptoPro JCP library to support digital signatures, and enables polling GIS APIs for incoming messages.

The 3KEYS CRPT Connector for SAP ATT provides the following functionalities:

Implements a fully featured communication and authentication layer and security features (document signature, certified based authentication) required by CRPT
Provides GOST digital signature functionality via the CryptoPro library or another certified cryptographic provider
Auto digital signature of crypto code orders to OMS (non-pharma industries)
Automatically sends reports from ATT to GIS APIs
Provides GOST TLS connection
Polls GIS systems for processing the status of sent outbound reports
Polls GIS systems for new inbound messages (6xx notifications) and downloads them to
ATT ATT transaction to monitor inbound and outbound messages

On the cloud, the Connector also provides: :

Middleware-as-a-Service to connect SAP ATT with OMS, GIS MT, IS MDLP, and MOTP
Cloud hosted in Russia (Yandex.Cloud) in order to provide full compliance for GOST Electronic Signatures usage (the cloud version)

SECURITY

The solution has been proven to be secure and GxP validated by an external independent professional company.
It has been proven that there is no possibility to bypass the access control list and gain unauthorised access to the API for the legitimate clients of the Connector Cloud.
The overall security level has been evaluated as high.
Additional client-side middleware (such as SAP PO) and security mechanisms (gateways, firewalls, proxies) can be used.

THE CRPT CONNECTOR FOR SAP ATT IS AVAILABLE BOTH ON-PREMISE AND AS A CLOUD VERSION.

Data flow
simplified

CRPT Connector: SaaS on Yandex Cloud

HOW IS
THE СONNECTOR
VALIDATED?

The 3KEYS CRPT Connector is developed in line with the best practices of computerised system validation (CSV).

HOW DO I MIGRATE
FROM CONNECTOR
TO SAP STANDARD IF NEEDED?

The 3KEYS CRPT Connector provides parameters that can be set as active or inactive at any time without making changes to the code. This allows customers to return to SAP standard and deactivate the Connector implementation without programming.

Support as a service