These forums are now Read Only. If you have an Acrobat question, ask questions and get help from one of our experts.

Encrypting pdf form to protect sensitive data in transit

gwh
Registered: May 19 2008
Posts: 47

Hi everyone,

I've created a form using Acrobat Professional 9. It will be stored up on a website for people to download and fill in. The form, which is a registration form for an event, will be asking for sensitive information such as credit card details and will be submitted by the user and emailed back to us.

Since this credit card information will be submitted by email, I need to find a way to encrypt the pdf so that it doesn't end up in the wrong hands.

Can someone tell me if there is a way to do this?

Really appreciate any help.

My Product Information:
Acrobat Pro Extended 9.0, Macintosh
nixopax
Registered: Feb 6 2009
Posts: 105
Usually, e-mails are received and sent by POP3 and SMTP respectively. Because neither of those natively are secure, I'd recommend a different method of collecting data. The PCI-DSS (Payment Card Industry Data Security Standard) would require a secure encryption method for you to collect data, otherwise you could be held liable in the event of something happening. There used to be an option to submit the FDF with a password locking it, however that was removed as of Reader 9. From what I've gathered in the API reference, there aren't any tools to lock the data with PKI encryption that are available in Reader.

What I would suggest for you to do, is since you plan on collecting and processing credit card information, you should read the [url=http://en.wikipedia.org/wiki/PCI_DSS#Requirements]requirements[/url] for the PCI-DSS. Also, industry standard accepts SSL encryption of 128bit and higher when using an HTTPS server. You could submit the form to your secure server to hold in a database temporarily until you process that particular card and then delete it. I'm in the midst of doing something similar to this, but because the company we're dealing with doesn't process the cards themselves, we hand off the credit processing part to an online processor and let them worry about the liability. :)
lkassuba
ExpertTeam
Registered: Jun 28 2007
Posts: 3636
You could also use Acrobat.com (https). Check out the blog post [url=http://www.acrobatusers.com/blogs/lkassuba/using-e-mail-form-distribution-mechanism]Using E-mail as a Form Distribution method.[/url]

Lori Kassuba is an AUC Expert and Community Manager for AcrobatUsers.com.