마스킹 유틸리티 추가 (MaskingUtils + 단위테스트)

- 보안아키텍처 마스킹 정책에 따라 고유식별정보·금융식별정보·인증정보·신상정보·온라인정보
- 카테고리별 마스킹 처리 유틸 및 JUnit 5 단위테스트(3단계 번호 체계) 신규 작성

src/main/java/com/eactive/eai/adapter/http/client/impl/HttpClient5AdapterServiceBody.java

@@ -7,6 +7,8 @@ import com.eactive.eai.adapter.http.client.HttpClientAdapterVO;
 import com.eactive.eai.common.TransactionContextKeys;
 import com.eactive.eai.common.message.MessageType;
 import com.eactive.eai.common.util.CommonLib;
+import com.eactive.eai.common.util.TxFileLogger;
+
 import org.apache.commons.httpclient.HttpStatus;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.commons.lang3.time.StopWatch;
@@ -118,7 +120,9 @@ public class HttpClient5AdapterServiceBody extends HttpClient5AdapterServiceSupp
 				HttpMemoryLogger.txlog(vo.getAdapterGroupName() + vo.getAdapterName(),
 						"SEND [" + sendData + "]" + CommonLib.getDumpMessage(sendData));
 			}
-
+			
+			TxFileLogger.logTxFile(tempProp, sendData, "[OUT_SEND]");
+			
 			String uuid = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID);
 			HttpContext context = new BasicHttpContext();
 			context.setAttribute(TransactionContextKeys.TRANSACTION_UUID, uuid);
@@ -147,7 +151,8 @@ public class HttpClient5AdapterServiceBody extends HttpClient5AdapterServiceSupp
 			}
 
 			stopWatch.stop();
-
+			TxFileLogger.logTxFile(tempProp, responseString, "[OUT_RECV]");
+			
 
 			if (status >= 400 && status < 500) {
 				String errMsg = String.format(

src/main/java/com/eactive/eai/adapter/http/client/impl/HttpClient5AdapterServiceRest.java

@@ -75,6 +75,7 @@ import com.eactive.eai.common.exception.ExceptionUtil;
 import com.eactive.eai.common.message.MessageType;
 import com.eactive.eai.common.property.PropManager;
 import com.eactive.eai.common.util.CommonLib;
+import com.eactive.eai.common.util.TxFileLogger;
 import com.jayway.jsonpath.DocumentContext;
 import com.jayway.jsonpath.JsonPath;
 import com.kjbank.encrypt.exchange.crypto.AES256Cipher;
@@ -427,6 +428,8 @@ public class HttpClient5AdapterServiceRest extends HttpClient5AdapterServiceSupp
 				HttpMemoryLogger.txlog(vo.getAdapterGroupName() + vo.getAdapterName(),
 						"SEND [" + sendData + "]" + CommonLib.getDumpMessage(sendData));
 			}
+			
+			TxFileLogger.logTxFile(tempProp, sendData, "[OUT_SEND]");
 
 			String uuid = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID);
 			HttpContext context = new BasicHttpContext();
@@ -472,11 +475,14 @@ public class HttpClient5AdapterServiceRest extends HttpClient5AdapterServiceSupp
 					// 여기까지
 
 					responseHeaders = response.getHeaders();
+					
+					TxFileLogger.logTxFile(tempProp, new String(responseMessage,  vo.getEncode()), "[OUT_RECV]");
 
 					if (logger.isDebug()) {
 						logger.debug("[received status]" + status);
 						logger.debug("HttpClientAdapterServiceRest] RECV (" + vo.getAdapterGroupName() + ") = [" + responseMessage + "]");
 					}
+					
 				}
 			} catch (ConnectException e) {
 				if (logger.isDebug() && "N".equals(vo.getTestCallYn())) {

src/main/java/com/eactive/eai/adapter/http/client/impl/HttpClient5AdapterServiceRestAddFilter.java

@@ -0,0 +1,142 @@
+package com.eactive.eai.adapter.http.client.impl;
+
+import java.util.Properties;
+
+import org.apache.commons.lang3.StringUtils;
+import org.dom4j.Node;
+import org.json.simple.JSONObject;
+
+import com.eactive.eai.adapter.http.client.HttpClientAdapterServiceKey;
+import com.eactive.eai.adapter.http.client.impl.filter.HttpClient5AdapterFilterFactory;
+import com.eactive.eai.adapter.http.client.impl.filter.HttpClientAdapterFilter;
+
+/**
+ * 1. 기능 : HttpClient5AdapterServiceRest 호출 전후 Filter 적용할 수 있는 기능을 제공한다.<br>
+ * 2. 처리 개요 : <br>
+ * 3. 주의사항 <br>
+ *
+ * @author :
+ * @version : v 1.0.0
+ * @see : HttpClientAdapterServiceFactory.java,
+ *      HttpClientAdapterServiceSupport.java, HttpClient5AdapterServiceRest.java
+ * @since :
+ * 
+ */
+public class HttpClient5AdapterServiceRestAddFilter extends HttpClient5AdapterServiceRest
+		implements HttpClientAdapterServiceKey {
+
+	// 요청전 수행할 필터(쉼표(,)로 구분)
+	static final String PRE_FILTERS = "PRE_FILTERS";
+
+	// 요청후 수행할 필터(쉼표(,)로 구분)
+	static final String POST_FILTERS = "POST_FILTERS";
+
+//	// Adapter에서 Exception이 발생한 경우, 처리할 필터
+//	static final String EXCEPTION_FILTER = "EXCEPTION_FILTER";
+
+	/**
+	 * 1. 기능 : HttpClient 호출 전후 Filter 적용용 2. 처리 개요 : <br>
+	 * 3. 주의사항 <br>
+	 *
+	 * @param prop Http Adapter 속성 정보
+	 * @return 반환 된 Object
+	 * @exception Exception 수동 시스템 간 통신 중 발생
+	 */
+	public Object execute(Properties prop, Object data, Properties tempProp) throws Exception {
+
+		String adptGrpName = tempProp.getProperty(ADAPTER_GROUP_NAME);
+		String adptName = tempProp.getProperty(ADAPTER_NAME);
+
+		data = doPreFilters(adptGrpName, adptName, prop, data, tempProp);
+
+		Object adapterResponse = super.execute(prop, data, tempProp);
+
+		adapterResponse = doPostFilters(adptGrpName, adptName, prop, adapterResponse, tempProp);
+		if (adapterResponse instanceof JSONObject)
+			adapterResponse = ((JSONObject) adapterResponse).toJSONString();
+
+		if (adapterResponse instanceof Node)
+			adapterResponse = ((Node) adapterResponse).asXML();
+
+		return adapterResponse;
+	}
+
+	protected Object doPreFilters(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+
+//		boolean isSetCommonFilterInAdapterProp = false;
+		// 1. adapter에 설정된 필터 수행
+		String preFiltersStr = prop.getProperty(PRE_FILTERS);
+		if (StringUtils.isNotEmpty(preFiltersStr)) {
+			String[] preFilters = StringUtils.split(preFiltersStr, ",");
+			for (String filterName : preFilters) {
+				if (StringUtils.isBlank(filterName)) {
+					continue;
+				}
+
+				logger.debug("HttpClient5AdapterServiceRestAddFilter] Processing Start [" + filterName + "]");
+				HttpClientAdapterFilter adapterFilter = HttpClient5AdapterFilterFactory.createFilter(filterName.trim());
+
+				if (adapterFilter != null) {
+//					if (adapterFilter instanceof IBKOutCommonFilter)
+//						isSetCommonFilterInAdapterProp = true;
+
+					message = adapterFilter.doPreFilter(adptGrpName, adptName, prop, message, tempProp);
+				} else {
+					throw new Exception("Failed get Filter Class: " + filterName);
+				}
+			}
+		}
+
+//		// 2. IBKOutCommonFilter 필터 수행(adapter 필터에서 수행하지 않을 때만)
+//		if (!isSetCommonFilterInAdapterProp) {
+//			HttpClientAdapterFilter ibkFilter = HttpClient5AdapterFilterFactory
+//					.createFilter(IBKOutCommonFilter.class.getName());
+//			if (ibkFilter != null) {
+//				message = ibkFilter.doPreFilter(adptGrpName, adptName, prop, message, tempProp);
+//			}
+//		} else {
+//			logger.debug("IBKOutCommonFilter isSetCommonFilterInAdapterProp 'POST_FILTERS'. already in adapter filters");
+//		}
+
+		return message;
+	}
+
+	protected Object doPostFilters(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+
+//		boolean isSetCommonFilterInAdapterProp = false;
+		// 1. adapter에 설정된 필터 수행
+		String postFiltersStr = prop.getProperty(POST_FILTERS);
+		if (StringUtils.isNotEmpty(postFiltersStr)) {
+			String[] postFilters = StringUtils.split(postFiltersStr, ",");
+			for (String filterName : postFilters) {
+				if (StringUtils.isBlank(filterName)) {
+					continue;
+				}
+
+				HttpClientAdapterFilter adapterFilter = HttpClient5AdapterFilterFactory.createFilter(filterName.trim());
+				if (adapterFilter != null) {
+//					if (adapterFilter instanceof IBKOutCommonFilter)
+//						isSetCommonFilterInAdapterProp = true;
+					message = adapterFilter.doPostFilter(adptGrpName, adptName, prop, message, tempProp);
+				} else {
+					throw new Exception("Failed get Filter Class: " + filterName);
+				}
+			}
+		}
+
+//		// 2. IBKOutCommonFilter 필터 수행
+//		if (!isSetCommonFilterInAdapterProp) {
+//			HttpClientAdapterFilter ibkFilter = HttpClient5AdapterFilterFactory
+//					.createFilter(IBKOutCommonFilter.class.getName());
+//			if (ibkFilter != null) {
+//				message = ibkFilter.doPostFilter(adptGrpName, adptName, prop, message, tempProp);
+//			}
+//		} else {
+//			logger.debug("IBKOutCommonFilter isSetCommonFilterInAdapterProp 'PRE_FILTERS'. already in adapter filters");
+//		}
+		return message;
+	}
+
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/AllHeaderFilter.java

@@ -0,0 +1,121 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Arrays;
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+import java.util.stream.Stream;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+public class AllHeaderFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+	
+	public static final String PROPERTIES_GROUP_NAME = "HttpHeaderFilter";
+	public static final String HEADER_KEY_NAMES = "AllHeaderFilter.blackList";
+
+
+	String[] HttpHeaderRelayBlackList = {
+			"Content-Length",
+			"Transfer-Encoding",
+			"Host",
+			"Authorization",
+			"Accept",
+			"Host",
+			"Cookie",
+			"Connection",
+			"Keep-Alive",
+			"Proxy-Authenticate",
+			"Proxy-Authorization",
+			"TE",
+			"Trailer",
+			"Transfer-Encoding",
+			"Upgrade",
+			"Content-Type",
+			"Content-Encoding",
+			"Content-Language",
+			"Content-Location",
+			"Content-MD5",
+			"Expect",
+	};
+	
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("doPreFilter Processing Start.");
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		
+		Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+		
+		String propValue = PropManager.getInstance().getProperty(PROPERTIES_GROUP_NAME, HEADER_KEY_NAMES, "").trim();
+		
+		String[] userSettingBlackList = propValue.split(",");
+		
+		if( userSettingBlackList.length > 0 ) {
+			HttpHeaderRelayBlackList = Stream
+			        .concat(Arrays.stream(HttpHeaderRelayBlackList), Arrays.stream(userSettingBlackList))
+			        .toArray(String[]::new);
+		}
+		
+		
+		for(String keyName : inboundHeaderMap.keySet() ) {
+			
+			if( StringUtils.equalsAnyIgnoreCase( keyName, HttpHeaderRelayBlackList ) ) {
+				logger.debug("Skip Processing Key ["+keyName+"], value ["+inboundHeaderMap.get(keyName)+"] in HttpHeaderRelayBlackList");
+				continue;
+			}
+			
+			filterHeaders.put(keyName, inboundHeaderMap.get(keyName));
+			logger.debug("Processing Key ["+keyName+"], value ["+inboundHeaderMap.get(keyName)+"]");
+		}
+		
+		logger.debug("doPreFilter Processing End.");
+		
+		return message;
+	}
+	
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/AsyncReponseFilter.java

@@ -0,0 +1,118 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Arrays;
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.TransactionContextKeys;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class AsyncReponseFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String X_TRACE_ID = "partnerTraceId";
+	public static final String TRACE_ID = "traceId";
+	
+	public static final String PROPERTIES_GROUP_NAME = "HttpHeaderFilter";
+	public static final String HEADER_KEY_NAMES = "AsyncReponseFilter";
+	
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("AsyncReponseFilter] PreFilter Processing Start!!");
+		String traceId = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID, "");
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		
+		String propValue = PropManager.getInstance().getProperty(PROPERTIES_GROUP_NAME, HEADER_KEY_NAMES, "").trim();
+
+		String[] headerKeyNames = propValue.split(",");
+		
+		
+		headerKeyNames = Arrays.stream(headerKeyNames)
+		        .map(String::trim)
+		        .toArray(String[]::new);
+		
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(X_TRACE_ID)) {
+					filterHeaders.put(X_TRACE_ID, inboundHeaderMap.get(X_TRACE_ID));
+					logger.debug("AsyncReponseFilter] Processing Key ["+X_TRACE_ID+"], value ["+inboundHeaderMap.get(X_TRACE_ID)+"]");
+				}
+				
+				if (inboundHeaderMap.containsKey(TransactionContextKeys.X_LOAN_TOKEN)) {
+					filterHeaders.put(TransactionContextKeys.X_LOAN_TOKEN, inboundHeaderMap.get(TransactionContextKeys.X_LOAN_TOKEN));
+					logger.debug("AsyncReponseFilter] Processing Key ["+TransactionContextKeys.X_LOAN_TOKEN+"], value ["+inboundHeaderMap.get(TransactionContextKeys.X_LOAN_TOKEN)+"]");
+				}
+			}
+			
+			filterHeaders.setProperty(TRACE_ID, traceId);
+			logger.debug("AsyncReponseFilter] Processing Key ["+TRACE_ID+"], value ["+traceId+"]");
+			
+			for (String keyName : inboundHeaderMap.keySet()) {
+
+				if (StringUtils.equalsAnyIgnoreCase(keyName, headerKeyNames)) {
+					String value = inboundHeaderMap.get(keyName);
+					filterHeaders.put(keyName, value);
+					logger.debug("AsyncReponseFilter] Processing Key [" + keyName + "], value [" + value + "]");
+				}
+
+			}
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return message;
+	}
+	
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/HttpClient5AdapterFilterFactory.java

@@ -0,0 +1,90 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.concurrent.ConcurrentHashMap;
+
+import com.eactive.eai.common.util.Logger;
+
+public class HttpClient5AdapterFilterFactory {
+	static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+	static String customBasePackage = "com.eactive.eai.custom.adapter.http.client.filter";
+	static String basePackage = "com.eactive.eai.adapter.http.client.impl.filter";
+	private static ConcurrentHashMap<String, HttpClientAdapterFilter> h = new ConcurrentHashMap<>();
+	
+	private HttpClient5AdapterFilterFactory() {
+		throw new IllegalStateException("Utility class");
+	}
+
+	public static HttpClientAdapterFilter createFilter(String type) {
+		if (h.containsKey(type)) {
+			return h.get(type);
+		}
+
+		HttpClientAdapterFilter filter = null;
+		switch (HttpClient5AdapterFilterType.getValue(type)) {
+		case SIMPLEFRAMEWORK:
+			filter = new SimpleFrameworkFilter();
+			break;
+		case SIMPLEFRAMEWORKBODY:
+			filter = new SimpleframeworkBodyFilter();
+			break;
+		case JBOBP:
+			filter = new JBOBPFilter();
+			break;
+		case KFTCFACE:
+			filter = new KFTCFaceFilter();
+			break;
+		case KFTCP2P:
+			filter = new KFTCP2PFilter();
+			break;
+		case KAKAOBANK:
+			filter = new KAKAOBankFilter();
+			break;
+		case NAVERFIN:
+			filter = new NAVERFinFilter();
+			break;
+		case NICECREDIT:
+			filter = new NICECreditFilter();
+			break;
+		case TRACEBODY:
+			filter = new TraceBodyFilter();
+			break;
+		case TOSSBANK:
+			filter = new TOSSBankFilter();
+			break;
+		case ASYNCRESPONSE:
+			filter = new AsyncReponseFilter();
+			break;
+		case ALLHEADER:
+			filter = new AllHeaderFilter();
+			break;
+		default:
+			filter = classForName(type);
+			if (filter == null) {
+				filter = classForName(customBasePackage + "." + type);
+			}
+			if (filter == null) {
+				filter = classForName(basePackage + "." + type);
+			}
+			break;
+		}
+
+		if (filter != null) {
+			h.put(type, filter);
+			return filter;
+		} else {
+			return null;
+		}
+	}
+	
+	private static HttpClientAdapterFilter classForName(String type) {
+		try {
+			Class<?> cl = Class.forName(type);
+			return (HttpClientAdapterFilter) cl.newInstance();
+		} catch (ClassNotFoundException | IllegalAccessException | InstantiationException e) {
+			logger.error("Cannot create a HttpClientAdapterFilter. - {}", type);
+			return null;
+		}
+	}
+
+	
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/HttpClient5AdapterFilterType.java

@@ -0,0 +1,27 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+public enum HttpClient5AdapterFilterType {
+	SIMPLEFRAMEWORK,
+	SIMPLEFRAMEWORKBODY,
+	JBOBP,
+	KFTCFACE,
+	KFTCP2P,
+	KAKAOBANK,
+	NAVERFIN,
+	NICECREDIT,
+	TOSSBANK,
+	TRACEBODY,
+	ASYNCRESPONSE,
+	ALLHEADER,
+	UNKNOWN;
+
+	public static HttpClient5AdapterFilterType getValue(String type) {
+		try {
+			return valueOf(type.toUpperCase());
+		} catch (NullPointerException e) {
+			return UNKNOWN;
+		} catch (Exception e) {
+			return UNKNOWN;
+		}
+	}
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/HttpClientAdapterFilter.java

@@ -0,0 +1,12 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Properties;
+
+public interface HttpClientAdapterFilter {
+
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception;
+
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception;
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/HttpClientAdapterFilterException.java

@@ -0,0 +1,35 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Properties;
+
+import lombok.Getter;
+
+public class HttpClientAdapterFilterException extends RuntimeException {
+	private static final long serialVersionUID = -1208983360831093751L;
+	@Getter
+	private final String code;
+	@Getter
+	private final Properties prop;
+	@Getter
+	private final Properties tempProp;
+	
+	public HttpClientAdapterFilterException(String code, String msg, Properties prop, Properties tmepProp) {
+		super(msg);
+		this.code = code;
+		this.prop = prop;
+		this.tempProp = tmepProp;
+	}
+
+	public HttpClientAdapterFilterException(String code, String msg, Properties prop, Properties tempProp, Throwable cause) {
+		super(msg, cause);
+		this.code = code;
+		this.prop = prop;
+		this.tempProp = tempProp;
+	}
+
+	@Override
+	public String toString() {
+		return "HttpClientAdapterFilterException [code=" + code + ", prop=" + prop + ", tempProp=" + tempProp + ", parent=" + super.toString() + "]";
+	}
+
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/JBOBPFilter.java

@@ -0,0 +1,106 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.TransactionContextKeys;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class JBOBPFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String X_OBP_PARTNERCODE = "x-obp-partnercode";
+	public static final String X_OBP_TXID = "x-obp-txid";
+	public static final String X_OBP_TRUST_SYSTEM = "x-obp-trust-system";
+	String systemTrustKey = "APIMGW-0001-QVBJTUdXLTAwMDE=";
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("JBOBPFilter] PreFilter Processing Start!!");
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) systemTrustKey = propGroupVo.getProperty(X_OBP_TRUST_SYSTEM, systemTrustKey);
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			String obpPartnerCode = "000000-00";
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(X_OBP_PARTNERCODE)) {
+					filterHeaders.put(X_OBP_PARTNERCODE, inboundHeaderMap.get(X_OBP_PARTNERCODE));
+					logger.debug("JBOBPFilter] Processing Key ["+X_OBP_PARTNERCODE+"], value ["+inboundHeaderMap.get(X_OBP_PARTNERCODE)+"]");
+				} else {
+					filterHeaders.put(X_OBP_PARTNERCODE, obpPartnerCode);
+					logger.debug("JBOBPFilter] Processing Key ["+X_OBP_PARTNERCODE+"], value ["+obpPartnerCode+"]");
+				}
+			} else {
+				filterHeaders.put(X_OBP_PARTNERCODE, obpPartnerCode);
+				logger.debug("JBOBPFilter] Processing Key ["+X_OBP_PARTNERCODE+"], value ["+obpPartnerCode+"]");
+			}
+
+			String uuid = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID, "");
+			if (StringUtils.isNotBlank(uuid)) {
+				filterHeaders.setProperty(X_OBP_TXID, uuid); // JB OBP Framework용
+				logger.debug("JBOBPFilter] Processing Key ["+X_OBP_TXID+"], value ["+uuid+"]");
+			}
+			if (StringUtils.isNotBlank(systemTrustKey)) {
+				filterHeaders.setProperty(X_OBP_TRUST_SYSTEM, systemTrustKey); // JB OBP Framework용
+				logger.debug("JBOBPFilter] Processing Key ["+X_OBP_TRUST_SYSTEM+"], value ["+systemTrustKey+"]");
+			}
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return message;
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/KAKAOBankFilter.java

@@ -0,0 +1,135 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.text.SimpleDateFormat;
+import java.util.Date;
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class KAKAOBankFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String PROP_PREFIX = "kakaobank";
+	public static final String X_KKB_PARTNER_CODE = "X-KKB-PARTNER-CODE";
+	public static final String X_KKB_API_NAME = "X-KKB-API-NAME";
+	public static final String X_KKB_API_TX_ID = "X-KKB-API-TX-ID";
+	public static final String X_KKB_TX_TIME = "X-KKB-TX-TIME";
+	public static final String X_KKB_CMPR_MGMT_NO = "X-KKB-CMPR-MGMT-NO";
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("KAKAOBankFilter] PreFilter Processing Start!!");
+		Object returnMessage = message;
+		String partnerCode = "KJB";
+		String apiName = "status_change";
+		String apiTxId = "0";
+		String txTime = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
+		String cmprMgmtNo = "0";
+
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) {
+			partnerCode = propGroupVo.getProperty(PROP_PREFIX + "." + X_KKB_PARTNER_CODE);
+			apiName = propGroupVo.getProperty(PROP_PREFIX + "." + X_KKB_API_NAME);
+			apiTxId = propGroupVo.getProperty(PROP_PREFIX + "." + X_KKB_API_TX_ID);
+			cmprMgmtNo = propGroupVo.getProperty(PROP_PREFIX + "." + X_KKB_CMPR_MGMT_NO);
+		}
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(X_KKB_PARTNER_CODE)) {
+					filterHeaders.put(X_KKB_PARTNER_CODE, inboundHeaderMap.get(X_KKB_PARTNER_CODE));
+				} else {
+					filterHeaders.put(X_KKB_PARTNER_CODE, partnerCode);
+				}
+				if (inboundHeaderMap.containsKey(X_KKB_API_NAME)) {
+					filterHeaders.put(X_KKB_API_NAME, inboundHeaderMap.get(X_KKB_API_NAME));
+				} else {
+					filterHeaders.put(X_KKB_API_NAME, apiName);
+				}
+				if (inboundHeaderMap.containsKey(X_KKB_API_TX_ID)) {
+					filterHeaders.put(X_KKB_API_TX_ID, inboundHeaderMap.get(X_KKB_API_TX_ID));
+				} else {
+					filterHeaders.put(X_KKB_API_TX_ID, apiTxId);
+				}
+				if (inboundHeaderMap.containsKey(X_KKB_TX_TIME)) {
+					filterHeaders.put(X_KKB_TX_TIME, inboundHeaderMap.get(X_KKB_TX_TIME));
+				} else {
+					filterHeaders.put(X_KKB_TX_TIME, txTime);
+				}
+				if (inboundHeaderMap.containsKey(X_KKB_CMPR_MGMT_NO)) {
+					filterHeaders.put(X_KKB_CMPR_MGMT_NO, inboundHeaderMap.get(X_KKB_CMPR_MGMT_NO));
+				} else {
+					filterHeaders.put(X_KKB_CMPR_MGMT_NO, cmprMgmtNo);
+				}
+			} else {
+				filterHeaders.put(X_KKB_PARTNER_CODE, partnerCode);
+				filterHeaders.put(X_KKB_API_NAME, apiName);
+				filterHeaders.put(X_KKB_API_TX_ID, apiTxId);
+				filterHeaders.put(X_KKB_TX_TIME, txTime);
+				filterHeaders.put(X_KKB_CMPR_MGMT_NO, cmprMgmtNo);
+			}
+			logger.debug("KAKAOBankFilter] Processing Key ["+X_KKB_PARTNER_CODE+"], value ["+filterHeaders.getProperty(X_KKB_PARTNER_CODE)+"]");
+			logger.debug("KAKAOBankFilter] Processing Key ["+X_KKB_API_NAME+"], value ["+filterHeaders.getProperty(X_KKB_API_NAME)+"]");
+			logger.debug("KAKAOBankFilter] Processing Key ["+X_KKB_API_TX_ID+"], value ["+filterHeaders.getProperty(X_KKB_API_TX_ID)+"]");
+			logger.debug("KAKAOBankFilter] Processing Key ["+X_KKB_TX_TIME+"], value ["+filterHeaders.getProperty(X_KKB_TX_TIME)+"]");
+			logger.debug("KAKAOBankFilter] Processing Key ["+X_KKB_CMPR_MGMT_NO+"], value ["+filterHeaders.getProperty(X_KKB_CMPR_MGMT_NO)+"]");
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return returnMessage;
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/KFTCFaceFilter.java

@@ -0,0 +1,154 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.text.SimpleDateFormat;
+import java.util.Date;
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import org.apache.commons.lang3.RandomStringUtils;
+import org.apache.commons.lang3.StringUtils;
+import org.json.simple.JSONObject;
+import org.json.simple.JSONValue;
+
+import com.eactive.eai.adapter.AdapterGroupVO;
+import com.eactive.eai.adapter.AdapterManager;
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.server.EAIServerManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class KFTCFaceFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String PROP_PREFIX = "kftcface";
+	public static final String H_CLIENT_ID = "Client-Id";
+	public static final String B_ORG_CODE = "org_code";
+	public static final String B_TRANSACTION_ID = "transaction_id";
+	public static final String B_REQUEST_DATETIME = "request_datetime";
+	public static String instId = null;
+
+	static {
+		EAIServerManager eaiServerManager = EAIServerManager.getInstance();
+		instId = eaiServerManager.getInstId();
+	}
+
+	@SuppressWarnings({ "unchecked" })
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("KFTCFaceFilter] PreFilter Processing Start!!");
+		JSONObject returnMessage = null;
+		String clientId = "";
+		String orgCode = "034"; // 광주은행 행코드
+
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) {
+			if (StringUtils.isEmpty(clientId))
+				clientId = propGroupVo.getProperty(PROP_PREFIX + "." + H_CLIENT_ID);
+			orgCode = propGroupVo.getProperty(PROP_PREFIX + "." + B_ORG_CODE);
+		}
+
+		String request_datetime = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
+		String reqDate = new SimpleDateFormat("yyMMdd").format(new Date());
+		String reqTime = new SimpleDateFormat("HHmmss").format(new Date());
+		// 기관코드(3) + 요청일자(6) -- 금결원 표준화 항목, 고정 9자리.
+		// 요청시간(6) + 인스턴스ID(2) + RandomString(3) -- 기관별 생성 거래고유번호(11자리)
+		// 기관코드(3) + 요청일자(6) + 요청시간(6) + 인스턴스ID(2) + RandomString(3) -- 20자리.
+		String transaction_id = orgCode + reqDate + reqTime + instId + RandomStringUtils.random(3, true, true).toUpperCase();
+		
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(H_CLIENT_ID)) {
+					filterHeaders.put(H_CLIENT_ID, inboundHeaderMap.get(H_CLIENT_ID));
+					logger.debug("KFTCFaceFilter] Processing Key ["+H_CLIENT_ID+"], value ["+inboundHeaderMap.get(H_CLIENT_ID)+"]");
+				} else {
+					filterHeaders.put(H_CLIENT_ID, clientId);
+					logger.debug("KFTCFaceFilter] Processing Key ["+H_CLIENT_ID+"], value ["+clientId+"]");
+				}
+			} else {
+				filterHeaders.setProperty(H_CLIENT_ID, clientId);
+				logger.debug("KFTCFaceFilter] Processing Key ["+H_CLIENT_ID+"], value ["+clientId+"]");
+			}
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		AdapterManager adapterManager = AdapterManager.getInstance();
+		AdapterGroupVO adptGrpVO = adapterManager.getAdapterGroupVO(adptGrpName);
+		String encode = adptGrpVO.getMessageEncode();
+		if (message == null) {
+			returnMessage = new JSONObject();
+		} else {
+			if (message instanceof JSONObject) {
+				returnMessage = (JSONObject) message;
+			} else if (message instanceof String) {
+				returnMessage = parseJson((String) message);
+			} else if (message instanceof byte[]) {
+				returnMessage = parseJson(new String((byte[]) message, encode));
+			}
+		}
+		
+		returnMessage.put(B_ORG_CODE, orgCode);
+		returnMessage.put(B_TRANSACTION_ID, transaction_id);
+		returnMessage.put(B_REQUEST_DATETIME, request_datetime);
+
+		return returnMessage.toJSONString();
+	}
+
+	private JSONObject parseJson(String message) throws Exception {
+		if (message == null) {
+			return null;
+		}
+
+		return (JSONObject) JSONValue.parse(message);
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/KFTCP2PFilter.java

@@ -0,0 +1,122 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.text.SimpleDateFormat;
+import java.util.Date;
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import org.apache.commons.lang3.RandomStringUtils;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.server.EAIServerManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class KFTCP2PFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String PROP_PREFIX = "kftcp2p";
+	public static final String H_ORG_CODE = "org_code";
+	public static final String H_TRX_NO = "api_trx_no";
+	public static final String H_TRX_DTM = "api_trx_dtm";
+	public static String instId = null;
+
+	static {
+		EAIServerManager eaiServerManager = EAIServerManager.getInstance();
+		instId = eaiServerManager.getInstId();
+	}
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("KFTCP2PFilter] PreFilter Processing Start!!");
+		String orgCode = "D210400012"; // 광주은행 개발 기관코드(운영: K210800020)
+
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) {
+			orgCode = propGroupVo.getProperty(PROP_PREFIX + "." + H_ORG_CODE);
+		}
+	
+		String apiTrxDtm = new SimpleDateFormat("yyyyMMddHHmmssSSS").format(new Date());
+		String apiTrxTm = new SimpleDateFormat("HHmmss").format(new Date());
+		// 기관코드(10) + 인스턴스ID(2) + 일시(6) + RandomString(2) -- 총 20자리 
+		String apiTrxNo = orgCode + instId + apiTrxTm + RandomStringUtils.random(2, true, true).toUpperCase(); 
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(H_TRX_NO)) {
+					filterHeaders.put(H_TRX_NO, inboundHeaderMap.get(H_TRX_NO));
+					logger.debug("KFTCP2PFilter] Processing Key ["+H_TRX_NO+"], value ["+inboundHeaderMap.get(H_TRX_NO)+"]");
+				} else {
+					filterHeaders.put(H_TRX_NO, apiTrxNo);
+					logger.debug("KFTCP2PFilter] Processing Key ["+H_TRX_NO+"], value ["+apiTrxNo+"]");
+				}
+				if (inboundHeaderMap.containsKey(H_TRX_DTM)) {
+					filterHeaders.put(H_TRX_DTM, inboundHeaderMap.get(H_TRX_DTM));
+					logger.debug("KFTCP2PFilter] Processing Key ["+H_TRX_DTM+"], value ["+inboundHeaderMap.get(H_TRX_DTM)+"]");
+				} else {
+					filterHeaders.put(H_TRX_DTM, apiTrxDtm);
+					logger.debug("KFTCP2PFilter] Processing Key ["+H_TRX_DTM+"], value ["+apiTrxDtm+"]");
+				}
+			} else {
+				filterHeaders.put(H_TRX_NO, apiTrxNo);
+				filterHeaders.put(H_TRX_DTM, apiTrxDtm);
+			}
+			logger.debug("KFTCP2PFilter] Processing Key ["+H_TRX_NO+"], value ["+filterHeaders.getProperty(H_TRX_NO)+"]");
+			logger.debug("KFTCP2PFilter] Processing Key ["+H_TRX_DTM+"], value ["+filterHeaders.getProperty(H_TRX_DTM)+"]");
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return message;
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/NAVERFinFilter.java

@@ -0,0 +1,107 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class NAVERFinFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String PROP_PREFIX = "naverfin";
+	public static final String X_PARTNER_ID = "X-Partner-Id";
+	public static final String X_FINTECH_ID = "X-Fintech-Id";
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("NAVERFinFilter] PreFilter Processing Start!!");
+		String partnerID = "r0jtqwC9gAW5";
+		String fintechId = "NF";
+
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) {
+			partnerID = propGroupVo.getProperty(PROP_PREFIX + "." + X_PARTNER_ID);
+			fintechId = propGroupVo.getProperty(PROP_PREFIX + "." + X_FINTECH_ID);
+		}
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(X_PARTNER_ID)) {
+					filterHeaders.put(X_PARTNER_ID, inboundHeaderMap.get(X_PARTNER_ID));
+					logger.debug("NAVERFinFilter] Processing Key ["+X_PARTNER_ID+"], value ["+inboundHeaderMap.get(X_PARTNER_ID)+"]");
+				} else {
+					filterHeaders.put(X_PARTNER_ID, partnerID);
+					logger.debug("NAVERFinFilter] Processing Key ["+X_PARTNER_ID+"], value ["+partnerID+"]");
+				}
+				if (inboundHeaderMap.containsKey(X_FINTECH_ID)) {
+					filterHeaders.put(X_FINTECH_ID, inboundHeaderMap.get(X_FINTECH_ID));
+					logger.debug("NAVERFinFilter] Processing Key ["+X_FINTECH_ID+"], value ["+inboundHeaderMap.get(X_FINTECH_ID)+"]");
+				} else {
+					filterHeaders.put(X_FINTECH_ID, fintechId);
+					logger.debug("NAVERFinFilter] Processing Key ["+X_FINTECH_ID+"], value ["+fintechId+"]");
+				}
+			} else {
+				filterHeaders.put(X_PARTNER_ID, partnerID);
+				filterHeaders.put(X_FINTECH_ID, fintechId);
+			}
+			logger.debug("NAVERFinFilter] Processing Key ["+X_PARTNER_ID+"], value ["+filterHeaders.getProperty(X_PARTNER_ID)+"]");
+			logger.debug("NAVERFinFilter] Processing Key ["+X_FINTECH_ID+"], value ["+filterHeaders.getProperty(X_FINTECH_ID)+"]");
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return message;
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/NICECreditFilter.java

@@ -0,0 +1,138 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Map.Entry;
+import java.text.SimpleDateFormat;
+import java.util.Date;
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import org.apache.commons.lang3.StringUtils;
+import org.json.simple.JSONObject;
+import org.json.simple.JSONValue;
+
+import com.eactive.eai.adapter.AdapterGroupVO;
+import com.eactive.eai.adapter.AdapterManager;
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class NICECreditFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String PROP_PREFIX = "nicecredit";
+	public static final String H_PRODUCTID = "ProductID";
+	public static final String B_REQ_DTM = "req_dtm";
+	public static final String B_GOODS_CLS = "goods_cls";
+
+	@SuppressWarnings({ "unchecked" })
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		JSONObject returnMessage = null;
+		String productId = "2303102120";
+		String reqDtm = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
+		String goodsCls = "KJBAPI0001";
+
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) {
+			productId = propGroupVo.getProperty(PROP_PREFIX + "." + H_PRODUCTID);
+			goodsCls = propGroupVo.getProperty(PROP_PREFIX + "." + B_GOODS_CLS);
+		}
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+			if (inboundHeaderMap != null && inboundHeaderMap.containsKey(H_PRODUCTID)) {
+				for (Entry<String, String> e : inboundHeaderMap.entrySet()) {
+					String key = (String) e.getKey();
+					String value = (String) e.getValue();
+	
+					if (StringUtils.equalsIgnoreCase(key, H_PRODUCTID)) {
+						filterHeaders.setProperty(key, value);
+					}
+					if (logger.isDebugEnabled()) {
+						logger.debug("Request Header :" + key + "=[" + value + "]");
+					}
+				}
+			} else {
+				filterHeaders.setProperty(H_PRODUCTID, productId);
+			}
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		AdapterManager adapterManager = AdapterManager.getInstance();
+		AdapterGroupVO adptGrpVO = adapterManager.getAdapterGroupVO(adptGrpName);
+		String encode = adptGrpVO.getMessageEncode();
+		if (message == null) {
+			returnMessage = new JSONObject();
+		} else {
+			if (message instanceof JSONObject) {
+				returnMessage = (JSONObject) message;
+			} else if (message instanceof String) {
+				returnMessage = parseJson((String) message);
+			} else if (message instanceof byte[]) {
+				returnMessage = parseJson(new String((byte[]) message, encode));
+			}
+		}
+		
+		returnMessage.put(B_REQ_DTM, reqDtm);
+		returnMessage.put(B_GOODS_CLS, goodsCls);
+
+		return returnMessage.toJSONString();
+	}
+
+	private JSONObject parseJson(String message) throws Exception {
+		if (message == null) {
+			return null;
+		}
+
+		return (JSONObject) JSONValue.parse(message);
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/OutCryptoFilter.java

@@ -0,0 +1,87 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.nio.charset.StandardCharsets;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Properties;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.adapter.http.filter.AbstractCryptoFilter;
+
+/**
+ * HTTP 클라이언트 어댑터용 암복호화 필터 (송신 방향).
+ *
+ * doPreFilter  : 외부 시스템으로 보내는 요청 암호화 (CRYPTO_ENC_* 프로퍼티 기반)
+ * doPostFilter : 외부 시스템에서 받은 응답 복호화 (CRYPTO_DEC_* 프로퍼티 기반)
+ *
+ * DYNAMIC 키 컨텍스트가 필요한 경우 {@link #buildRuntimeContext}를 오버라이드한다.
+ * STATIC 키 모듈을 사용하는 경우 빈 Map이 기본값이므로 오버라이드 불필요.
+ *
+ * 프로퍼티 설명은 {@link AbstractCryptoFilter} 참조.
+ * AAD 관련 추가 프로퍼티:
+ *   CRYPTO_AAD_PROP  tempProp에서 AAD 값을 조회할 키 이름.
+ *                    미설정 또는 해당 키 없으면 aad=null → IV를 AAD 대체값으로 사용.
+ */
+public class OutCryptoFilter extends AbstractCryptoFilter implements HttpClientAdapterFilter {
+
+    public static final String PROP_AAD_PROP = "CRYPTO_AAD_PROP";
+
+    /**
+     * DYNAMIC 키 도출용 컨텍스트를 구성한다.
+     * STATIC 키 모듈이면 빈 Map({@code new HashMap<>()})을 반환한다.
+     * 서브클래스에서 오버라이드하여 tempProp으로부터 값을 추출할 수 있다.
+     */
+    protected Map<String, String> buildRuntimeContext(Properties prop, Properties tempProp) {
+        return new HashMap<>();
+    }
+
+    /**
+     * CRYPTO_AAD_PROP 프로퍼티에 지정된 키로 tempProp에서 AAD 값을 조회한다.
+     * 미설정 또는 값 없으면 null을 반환하여 GCM 기본 동작(IV를 AAD 대체값으로 사용)을 따른다.
+     */
+    protected byte[] buildAad(Properties prop, Properties tempProp) {
+        String propKey = prop.getProperty(PROP_AAD_PROP);
+        if (StringUtils.isBlank(propKey) || tempProp == null) {
+            return null;
+        }
+        String value = tempProp.getProperty(propKey);
+        return StringUtils.isBlank(value) ? null : value.getBytes(StandardCharsets.UTF_8);
+    }
+
+    @Override
+    public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message,
+            Properties tempProp) throws Exception {
+
+        String moduleName = required(prop, PROP_MODULE_NAME);
+        String scope      = getProp(prop, PROP_SCOPE, SCOPE_FIELD).toUpperCase();
+        String body       = toBodyString(message);
+        Map<String, String> runtimeCtx = buildRuntimeContext(prop, tempProp);
+        byte[] aad        = buildAad(prop, tempProp);
+
+        if (SCOPE_FIELD.equals(scope)) {
+            return encryptField(body, moduleName, runtimeCtx, aad,
+                    getProp(prop, PROP_ENC_FROM_PATH, PATH_ROOT),
+                    getProp(prop, PROP_ENC_TO_PATH, PATH_ENCDATA));
+        }
+        return encryptBody(body, moduleName, runtimeCtx, aad);
+    }
+
+    @Override
+    public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+            Properties tempProp) throws Exception {
+
+        String moduleName = required(prop, PROP_MODULE_NAME);
+        String scope      = getProp(prop, PROP_SCOPE, SCOPE_FIELD).toUpperCase();
+        String body       = toBodyString(message);
+        Map<String, String> runtimeCtx = buildRuntimeContext(prop, tempProp);
+        byte[] aad        = buildAad(prop, tempProp);
+
+        if (SCOPE_FIELD.equals(scope)) {
+            return decryptField(body, moduleName, runtimeCtx, aad,
+                    getProp(prop, PROP_DEC_FROM_PATH, PATH_ENCDATA),
+                    getProp(prop, PROP_DEC_TO_PATH, PATH_ROOT));
+        }
+        return decryptBody(body, moduleName, runtimeCtx, aad);
+    }
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/SimpleFrameworkFilter.java

@@ -0,0 +1,109 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceSupport;
+import com.eactive.eai.common.TransactionContextKeys;
+import com.eactive.eai.common.util.Logger;
+
+public class SimpleFrameworkFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String CLIENTID = "clientId";
+	public static final String TRACEID = "traceId";
+	public static final String GUID = "guid";
+	public static final String RECEIVEDTIMESTAMP = "receivedTimestamp";
+	public static final String PARTNER_TRACE_ID = "partnerTraceId";
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("SimpleFrameworkFilter] PreFilter Processing Start!!");
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		
+		Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);	
+		
+		try {
+    		/* 업체정보 */
+			String clientId = tempProp.getProperty(HttpAdapterServiceSupport.PROPERTIES_NAME_CLIENT_ID);
+			if (StringUtils.isEmpty(clientId)) clientId = "";
+			filterHeaders.put(CLIENTID, clientId);
+			logger.debug("SimpleFrameworkFilter] Processing Key ["+CLIENTID+"], value ["+clientId+"]");
+            
+            /* APIM 거래추적자 */
+            String uuid = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID, "");
+			filterHeaders.put(TRACEID, uuid);
+			logger.debug("SimpleFrameworkFilter] Processing Key ["+TRACEID+"], value ["+uuid+"]");
+            
+            /* GUID */
+            String guid = tempProp.getProperty(TransactionContextKeys.GUID, "");
+            filterHeaders.put(GUID, guid);
+			logger.debug("SimpleFrameworkFilter] Processing Key ["+GUID+"], value ["+guid+"]");
+               
+            /* 최초요청시간  */
+            String receivedTimestamp = tempProp.getProperty(HttpAdapterServiceKey.INBOUND_REQUESTED_TIME, "");
+            filterHeaders.put(RECEIVEDTIMESTAMP, receivedTimestamp);
+			logger.debug("SimpleFrameworkFilter] Processing Key ["+RECEIVEDTIMESTAMP+"], value ["+receivedTimestamp+"]");
+			
+			String partnerTraceId = inboundHeaderMap.getOrDefault(PARTNER_TRACE_ID, "");
+			filterHeaders.put(PARTNER_TRACE_ID, partnerTraceId);
+			logger.debug("SimpleFrameworkFilter] Processing Key ["+PARTNER_TRACE_ID+"], value ["+partnerTraceId+"]");
+			
+			String x_loan_token = inboundHeaderMap.getOrDefault(TransactionContextKeys.X_LOAN_TOKEN, "");
+			filterHeaders.put(TransactionContextKeys.X_LOAN_TOKEN, x_loan_token);
+			logger.debug("SimpleFrameworkFilter] Processing Key ["+TransactionContextKeys.X_LOAN_TOKEN+"], value ["+x_loan_token+"]");
+
+			
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return message;
+	}
+	
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/SimpleframeworkBodyFilter.java

@@ -0,0 +1,28 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Properties;
+
+import org.json.simple.JSONObject;
+import org.json.simple.JSONValue;
+
+import com.eactive.eai.common.TransactionContextKeys;
+
+public class SimpleframeworkBodyFilter extends SimpleFrameworkFilter {
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+		
+		Object returnMessage = super.doPreFilter(adptGrpName, adptName, prop, message, tempProp);
+		
+		JSONObject bizJsonStr = null;
+		
+		if ( returnMessage instanceof String ) {
+			bizJsonStr = (JSONObject) JSONValue.parse( (String)returnMessage);
+			if( bizJsonStr != null ) {
+			    bizJsonStr.put("GUID", tempProp.getOrDefault(TransactionContextKeys.GUID, "") );
+			}
+		}
+		
+		return bizJsonStr != null ? bizJsonStr.toJSONString() : returnMessage;
+	}
+}

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/TOSSBankFilter.java

@@ -0,0 +1,97 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Map;
+import java.util.Properties;
+import java.util.TreeMap;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.TransactionContextKeys;
+import com.eactive.eai.common.property.PropGroupVO;
+import com.eactive.eai.common.property.PropManager;
+import com.eactive.eai.common.util.Logger;
+
+
+public class TOSSBankFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+	public static final String KJB_HEADER = "KJB_Header";
+	public static final String PROP_PREFIX = "tossbank";
+	public static final String X_TOSSBANK_LOAN_TRACE_ID = "X-TOSSBANK-LOAN-TRACE-ID";
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		logger.debug("TOSSBankFilter] PreFilter Processing Start!!");
+		String traceId = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID, "");
+
+		PropGroupVO propGroupVo = PropManager.getInstance().getPropGroupVO(KJB_HEADER);
+		if (propGroupVo != null) {
+		}
+
+		Properties filterHeaders = (Properties) tempProp.get("FILTERHEADER");
+		if (filterHeaders == null) {
+			filterHeaders = new Properties();
+			tempProp.put("FILTERHEADER", filterHeaders);
+		}
+		try {
+			Map<String, String> inboundHeaderMap = getInboundHeaderProp(tempProp);
+
+			if (!inboundHeaderMap.isEmpty()) {
+				if (inboundHeaderMap.containsKey(X_TOSSBANK_LOAN_TRACE_ID)) {
+					filterHeaders.put(X_TOSSBANK_LOAN_TRACE_ID, inboundHeaderMap.get(X_TOSSBANK_LOAN_TRACE_ID));
+					logger.debug("TOSSBankFilter] Processing Key ["+X_TOSSBANK_LOAN_TRACE_ID+"], value ["+inboundHeaderMap.get(X_TOSSBANK_LOAN_TRACE_ID)+"]");
+				} else {
+					filterHeaders.put(X_TOSSBANK_LOAN_TRACE_ID, traceId);
+					logger.debug("TOSSBankFilter] Processing Key ["+X_TOSSBANK_LOAN_TRACE_ID+"], value ["+traceId+"]");
+				}
+			} else {
+	            /* APIM 거래추적자 */
+				filterHeaders.setProperty(X_TOSSBANK_LOAN_TRACE_ID, traceId);
+				logger.debug("TOSSBankFilter] Processing Key ["+X_TOSSBANK_LOAN_TRACE_ID+"], value ["+traceId+"]");
+			}
+			logger.debug("TOSSBankFilter] Processing Key ["+X_TOSSBANK_LOAN_TRACE_ID+"], value ["+filterHeaders.getProperty(X_TOSSBANK_LOAN_TRACE_ID)+"]");
+
+		} catch (Exception e) {
+			logger.error(e.getMessage());
+		}
+		
+		return message;
+	}
+
+	public Map<String, String> getInboundHeaderProp(Properties prop) {
+		Properties header = new Properties();
+		Map<String, String> inboundHeaderMap = new TreeMap<>(String.CASE_INSENSITIVE_ORDER);
+		try {
+			Object headerObj = prop.get(HttpAdapterServiceKey.INBOUND_HEADER);
+			if (headerObj instanceof Properties) {    //tomcat
+				header = (Properties) headerObj;
+				for (String name : header.stringPropertyNames()) {
+					inboundHeaderMap.put(name, header.getProperty(name));
+				}
+			} else if (headerObj instanceof String) {  //weblogic
+				String str = (String) headerObj;
+				str = str.substring(1, str.length() - 1);
+				// key=value 쌍 분리
+				String[] entries = str.split(",");
+				for (String entry : entries) {
+				    String[] kv = entry.split("=", 2);
+				    if (kv.length == 2) {
+				    	inboundHeaderMap.put(kv[0].trim(), kv[1].trim());
+				    }
+				}
+			}	
+		} catch (Exception  e) {
+		    e.printStackTrace();
+		}
+		return inboundHeaderMap;
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		return message;
+	}
+
+}
+

src/main/java/com/eactive/eai/adapter/http/client/impl/filter/TraceBodyFilter.java

@@ -0,0 +1,71 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import java.util.Properties;
+
+import org.json.simple.JSONObject;
+import org.json.simple.JSONValue;
+
+import com.eactive.eai.adapter.http.dynamic.HttpAdapterServiceKey;
+import com.eactive.eai.common.TransactionContextKeys;
+import com.eactive.eai.common.util.Logger;
+import com.nimbusds.jose.shaded.gson.JsonObject;
+
+public class TraceBodyFilter implements HttpClientAdapterFilter, HttpAdapterServiceKey {
+
+	protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+	
+	public static final String BIZ_HEADER = "header";
+	public static final String GUID = "guid";
+	public static final String TRACEID = "traceId";
+
+	@Override
+	public Object doPreFilter(String adptGrpName, String adptName, Properties prop, Object message, Properties tempProp)
+			throws Exception {
+
+		JSONObject bizJsonStr = null;
+
+		if (message instanceof String) {
+
+			bizJsonStr = (JSONObject) JSONValue.parse((String) message);
+			
+			if ( bizJsonStr == null ) return message; //json string이 아님.
+
+			if (bizJsonStr.containsKey(BIZ_HEADER)) {
+				JSONObject bizHeader = (JSONObject) bizJsonStr.get(BIZ_HEADER);
+
+				putBizHeaderData(bizHeader, tempProp);
+
+			}else {
+				
+				JSONObject bizHeader = new JSONObject();
+				bizJsonStr.put(BIZ_HEADER, bizHeader);
+				putBizHeaderData(bizHeader, tempProp);
+				
+			}
+
+		}
+
+		return bizJsonStr != null ? bizJsonStr.toJSONString() : message;
+	}
+	
+	static private void putBizHeaderData(JSONObject bizHeader, Properties tempProp) {
+
+		String traceId = tempProp.getProperty(TransactionContextKeys.TRANSACTION_UUID, "");
+
+		String guid = tempProp.getProperty(TransactionContextKeys.GUID, "");
+
+		bizHeader.put(GUID, guid);
+		logger.debug("Processing Key [" + GUID + "], value [" + guid + "]");
+
+		bizHeader.put(TRACEID, traceId);
+		logger.debug("Processing Key [" + TRACEID + "], value [" + traceId + "]");
+	}
+
+	@Override
+	public Object doPostFilter(String adptGrpName, String adptName, Properties prop, Object message,
+			Properties tempProp) throws Exception {
+		// TODO Auto-generated method stub
+		return message;
+	}
+
+}

src/main/java/com/eactive/eai/adapter/http/dynamic/HttpAdapterServiceSupport.java

@@ -6,6 +6,7 @@ import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 
 import org.apache.commons.lang3.StringUtils;
+import org.slf4j.MDC;
 
 import com.eactive.eai.adapter.AdapterGroupVO;
 import com.eactive.eai.adapter.AdapterManager;
@@ -13,10 +14,12 @@ import com.eactive.eai.adapter.RequestDispatcher;
 import com.eactive.eai.adapter.http.HttpStatusException;
 import com.eactive.eai.adapter.http.client.HttpClientAdapterServiceKey;
 import com.eactive.eai.adapter.http.dynamic.filter.HttpAdapterFilter;
-import com.eactive.eai.adapter.http.dynamic.filter.HttpAdapterFilterFactoryKjb;
+import com.eactive.eai.adapter.http.dynamic.filter.HttpAdapterFilterFactory;
 import com.eactive.eai.adapter.http.dynamic.filter.HttpAdapterFilterType;
 import com.eactive.eai.adapter.http.dynamic.filter.JwtAuthException;
+import com.eactive.eai.common.TransactionContextKeys;
 import com.eactive.eai.common.util.Logger;
+import com.eactive.eai.common.util.UUIDGenerator;
 
 public abstract class HttpAdapterServiceSupport implements HttpAdapterService, HttpAdapterServiceKey {
 	private static final String LOG_PREFIX = "HttpAdapterServiceSupport] ";
@@ -27,53 +30,70 @@ public abstract class HttpAdapterServiceSupport implements HttpAdapterService, H
 
 	public Object service(String adptGrpName, String adptName, Object message, Properties prop,
 			HttpServletRequest request, HttpServletResponse response) throws Exception {
+		String uuid = prop.getProperty(TransactionContextKeys.TRANSACTION_UUID);
+		boolean bMDCput = false;
+		if(uuid == null) {
+			uuid = UUIDGenerator.getUUID().toString().replaceAll("-", "");
+			prop.setProperty(TransactionContextKeys.TRANSACTION_UUID, uuid);
+		}
 		
-		String transactionId = request.getHeader(HttpClientAdapterServiceKey.TRANSACTION_ID);
-		if (StringUtils.isNotBlank(transactionId)) {
-			prop.put(HttpClientAdapterServiceKey.TRANSACTION_ID, transactionId);
+		if(MDC.get(Logger.DISCRIMINATOR) == null) {
+		    MDC.put(Logger.DISCRIMINATOR, uuid);
+		    bMDCput = true;
 		}
 		
 		try {
-			String clientId = request.getHeader(HEADER_NAME_CLIENT_ID);
-			if (StringUtils.isNotBlank(clientId)) {
-				prop.put(PROPERTIES_NAME_CLIENT_ID, clientId);
+			String transactionId = request.getHeader(HttpClientAdapterServiceKey.TRANSACTION_ID);
+			if (StringUtils.isNotBlank(transactionId)) {
+				prop.put(HttpClientAdapterServiceKey.TRANSACTION_ID, transactionId);
 			}
 			
-			String instanceId = request.getHeader(HttpClientAdapterServiceKey.INSTANCE_ID);
-			if (StringUtils.isNotBlank(instanceId)) {
-				prop.put(HttpClientAdapterServiceKey.INSTANCE_ID, instanceId);
+			try {
+				String clientId = request.getHeader(HEADER_NAME_CLIENT_ID);
+				if (StringUtils.isNotBlank(clientId)) {
+					prop.put(PROPERTIES_NAME_CLIENT_ID, clientId);
+				}
+				
+				String instanceId = request.getHeader(HttpClientAdapterServiceKey.INSTANCE_ID);
+				if (StringUtils.isNotBlank(instanceId)) {
+					prop.put(HttpClientAdapterServiceKey.INSTANCE_ID, instanceId);
+				}
+			} catch (Exception e) {
+				 logger.warn(LOG_PREFIX + "Failed to read request headers: " + e.getMessage());
 			}
-		} catch (Exception e) {
-		}
-
-		Object obj = null;
-		try {
-			message = doPreFilters(adptGrpName, adptName, message, prop, request, response);
-			obj = RequestDispatcher.getRequestDispatcher(adptGrpName).handle(adptName, message, prop);
-			obj = doPostFilters(adptGrpName, adptName, obj, prop, request, response);
-		} catch (HttpStatusException e) { // inbound error
-			logger.warn(LOG_PREFIX + transactionId + "-" + adptGrpName + "-" + adptName + ">>" + e.getMessage(), e);
-			throw e;
-		} catch (JwtAuthException e) { // filter error
-			logger.error(LOG_PREFIX + transactionId + "-" + adptGrpName + "-" + adptName + ">>" + e.getMessage(), e);
-			UnkownMessageLogUtils.logUnkownMessage(adptGrpName, adptName, message, prop, request, response,
-					"RECEAIIRP202", e);
-			throw e;
-		} catch (Exception e) { // filter error
-			logger.error(LOG_PREFIX + transactionId + "-" + adptGrpName + "-" + adptName + ">>" + e.getMessage(), e);
-			UnkownMessageLogUtils.logUnkownMessage(adptGrpName, adptName, message, prop, request, response,
-					"RECEAIIRP201", e);
-			throw e;
-		}
-		
-		if (obj == null) {
-			return null;
-		} else if (obj instanceof byte[]) {
-			return (byte[]) obj;
-		} else if (obj instanceof String) {
-			return (String) obj;
-		} else {
-			throw new Exception("RECEAIAHA001");
+	
+			Object obj = null;
+			try {
+				message = doPreFilters(adptGrpName, adptName, message, prop, request, response);
+				obj = RequestDispatcher.getRequestDispatcher(adptGrpName).handle(adptName, message, prop);
+				obj = doPostFilters(adptGrpName, adptName, obj, prop, request, response);
+			} catch (HttpStatusException e) { // inbound error
+				logger.warn(LOG_PREFIX + transactionId + "-" + adptGrpName + "-" + adptName + ">>" + e.getMessage(), e);
+				throw e;
+			} catch (JwtAuthException e) { // filter error
+				logger.error(LOG_PREFIX + transactionId + "-" + adptGrpName + "-" + adptName + ">>" + e.getMessage(), e);
+				UnkownMessageLogUtils.logUnkownMessage(adptGrpName, adptName, message, prop, request, response,
+						"RECEAIIRP202", e);
+				throw e;
+			} catch (Exception e) { // filter error
+				logger.error(LOG_PREFIX + transactionId + "-" + adptGrpName + "-" + adptName + ">>" + e.getMessage(), e);
+				UnkownMessageLogUtils.logUnkownMessage(adptGrpName, adptName, message, prop, request, response,
+						"RECEAIIRP201", e);
+				throw e;
+			}
+			
+			if (obj == null) {
+				return null;
+			} else if (obj instanceof byte[]) {
+				return (byte[]) obj;
+			} else if (obj instanceof String) {
+				return (String) obj;
+			} else {
+				throw new Exception("RECEAIAHA001");
+			}
+		} finally {
+			if(bMDCput)
+				MDC.remove(Logger.DISCRIMINATOR);
 		}
 	}
 
@@ -85,7 +105,7 @@ public abstract class HttpAdapterServiceSupport implements HttpAdapterService, H
 		if (!"HTC".equals(group.getType())) {
 			String allowIp = prop.getProperty(ALLOW_IP,"");
 			if (StringUtils.isNotBlank(allowIp)) {
-				HttpAdapterFilter adapterFilter = HttpAdapterFilterFactoryKjb.createFilter(HttpAdapterFilterType.ADAPTERALLOWIPLISTFILTER.toString());
+				HttpAdapterFilter adapterFilter = HttpAdapterFilterFactory.createFilter(HttpAdapterFilterType.ADAPTERALLOWIPLISTFILTER.toString());
 				if (adapterFilter != null) {
 					message = adapterFilter.doPreFilter(adptGrpName, adptName, message, prop, request, response);
 				}
@@ -103,7 +123,7 @@ public abstract class HttpAdapterServiceSupport implements HttpAdapterService, H
 				continue;
 			}
 
-			HttpAdapterFilter adapterFilter = HttpAdapterFilterFactoryKjb.createFilter(filterName.trim());
+			HttpAdapterFilter adapterFilter = HttpAdapterFilterFactory.createFilter(filterName.trim());
 			if (adapterFilter != null) {
 				message = adapterFilter.doPreFilter(adptGrpName, adptName, message, prop, request, response);
 			} else {
@@ -126,7 +146,7 @@ public abstract class HttpAdapterServiceSupport implements HttpAdapterService, H
 				continue;
 			}
 
-			HttpAdapterFilter adapterFilter = HttpAdapterFilterFactoryKjb.createFilter(filterName.trim());
+			HttpAdapterFilter adapterFilter = HttpAdapterFilterFactory.createFilter(filterName.trim());
 			if (adapterFilter != null) {
 				resultMessage = adapterFilter.doPostFilter(adptGrpName, adptName, resultMessage, prop, request,
 						response);

src/main/java/com/eactive/eai/adapter/http/dynamic/filter/BaseCryptoFilter.java

@@ -1,21 +0,0 @@
-package com.eactive.eai.adapter.http.dynamic.filter;
-
-import java.util.HashMap;
-import java.util.Map;
-import java.util.Properties;
-
-import javax.servlet.http.HttpServletRequest;
-
-/**
- * HTTP 어댑터 요청/응답 암복호화 필터 기반 클래스.
- * 
- */
-public class BaseCryptoFilter extends CryptoFilter {
-    /**
-     * 빈 Runtime Context를 생성한다.
-     */
-    protected Map<String, String> buildRuntimeContext(Properties prop, HttpServletRequest request) {
-    	return new HashMap<>();
-    }
-
-}

src/main/java/com/eactive/eai/adapter/http/dynamic/filter/CryptoFilter.java

@@ -1,232 +0,0 @@
-package com.eactive.eai.adapter.http.dynamic.filter;
-
-import java.nio.charset.StandardCharsets;
-import java.util.Base64;
-import java.util.Map;
-import java.util.Properties;
-
-import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-
-import org.apache.commons.lang3.StringUtils;
-
-import com.eactive.eai.common.security.CryptoModuleService;
-import com.eactive.eai.common.util.Logger;
-import com.eactive.eai.util.JsonPathUtil;
-
-/**
- * HTTP 어댑터 요청/응답 암복호화 필터 기반 클래스.
- *
- * 서브클래스는 {@link #buildRuntimeContext}를 구현하여
- * DYNAMIC 키 도출에 필요한 컨텍스트 맵을 제공한다.
- * STATIC 키 모듈을 사용하는 경우 빈 Map을 반환하면 된다.
- * (CryptoModuleManager가 KEY_SOURCE_TYPE=STATIC이면 runtimeContext를 무시하고 고정 키를 사용한다.)
- *
- * 어댑터 프로퍼티 키:
- *   CRYPTO_MODULE_NAME   필수. DB에 등록된 암호화 모듈명.
- *   CRYPTO_SCOPE         BODY | FIELD (기본 FIELD)
- *                        BODY  : 메시지 전체를 암복호화 (Base64 인코딩/디코딩)
- *                        FIELD : 특정 JSON 경로의 값만 암복호화
- *
- *   FIELD 범위 전용:
- *   CRYPTO_DEC_FROM_PATH 복호화 대상 JSON 경로 (예: /encrypted_data)
- *   CRYPTO_DEC_TO_PATH   복호화 결과 반영 경로. "/" = 전체 body 교체.
- *   CRYPTO_ENC_FROM_PATH 암호화 대상 JSON 경로. "/" = 전체 body 암호화.
- *   CRYPTO_ENC_TO_PATH   암호화 결과(Base64)를 넣을 JSON 경로 (예: /encrypted_data)
- *
- *   GCM AAD 전용 (선택):
- *   CRYPTO_AAD_HEADER    AAD로 사용할 HTTP 요청 헤더명 (예: X-Api-Request-Id).
- *                        미설정 또는 헤더값 없으면 aad=null → IV를 AAD 대체값으로 사용.
- */
-public abstract class CryptoFilter implements HttpAdapterFilter {
-
-    protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
-
-    public static final String PROP_MODULE_NAME   = "CRYPTO_MODULE_NAME";
-    public static final String PROP_SCOPE         = "CRYPTO_SCOPE";
-    public static final String PROP_DEC_FROM_PATH = "CRYPTO_DEC_FROM_PATH";
-    public static final String PROP_DEC_TO_PATH   = "CRYPTO_DEC_TO_PATH";
-    public static final String PROP_ENC_FROM_PATH = "CRYPTO_ENC_FROM_PATH";
-    public static final String PROP_ENC_TO_PATH   = "CRYPTO_ENC_TO_PATH";
-    public static final String PROP_AAD_HEADER    = "CRYPTO_AAD_HEADER";
-
-    public static final String SCOPE_BODY  = "BODY";
-    public static final String SCOPE_FIELD = "FIELD";
-    public static final String PATH_ROOT   = "/";
-    public static final String PATH_ENCDATA   = "/encrypted_data";
-
-    // ------------------------------------------------------------------
-    // 추상 메서드
-    // ------------------------------------------------------------------
-
-    /**
-     * DYNAMIC 키 도출에 필요한 runtimeContext 맵을 구성한다.
-     * STATIC 키 모듈이면 빈 Map({@code new HashMap<>()})을 반환한다.
-     */
-    protected abstract Map<String, String> buildRuntimeContext(Properties prop, HttpServletRequest request);
-
-    // ------------------------------------------------------------------
-    // doPreFilter: 요청 복호화
-    // ------------------------------------------------------------------
-
-    @Override
-    public Object doPreFilter(String adptGrpName, String adptName, Object message, Properties prop,
-            HttpServletRequest request, HttpServletResponse response) throws Exception {
-
-        String moduleName = required(prop, PROP_MODULE_NAME);
-        String scope      = getProp(prop, PROP_SCOPE, SCOPE_FIELD).toUpperCase();
-        String body       = toBodyString(message);
-        Map<String, String> runtimeCtx = buildRuntimeContext(prop, request);
-        byte[] aad        = buildAad(prop, request);
-
-        if (SCOPE_FIELD.equals(scope)) {
-            return decryptField(body, moduleName, runtimeCtx, aad,
-                    getProp(prop, PROP_DEC_FROM_PATH, PATH_ENCDATA),
-                    getProp(prop, PROP_DEC_TO_PATH, PATH_ROOT));
-        }
-        return decryptBody(body, moduleName, runtimeCtx, aad);
-    }
-
-    // ------------------------------------------------------------------
-    // doPostFilter: 응답 암호화
-    // ------------------------------------------------------------------
-
-    @Override
-    public Object doPostFilter(String adptGrpName, String adptName, Object resultMessage, Properties prop,
-            HttpServletRequest request, HttpServletResponse response) throws Exception {
-
-        String moduleName = required(prop, PROP_MODULE_NAME);
-        String scope      = getProp(prop, PROP_SCOPE, SCOPE_FIELD).toUpperCase();
-        String body       = toBodyString(resultMessage);
-        Map<String, String> runtimeCtx = buildRuntimeContext(prop, request);
-        byte[] aad        = buildAad(prop, request);
-
-        if (SCOPE_FIELD.equals(scope)) {
-            return encryptField(body, moduleName, runtimeCtx, aad,
-                    getProp(prop, PROP_ENC_FROM_PATH, PATH_ROOT),
-                    getProp(prop, PROP_ENC_TO_PATH, PATH_ENCDATA));
-        }
-        return encryptBody(body, moduleName, runtimeCtx, aad);
-    }
-
-    // ------------------------------------------------------------------
-    // 복호화 구현
-    // ------------------------------------------------------------------
-
-    private String decryptBody(String body, String moduleName, Map<String, String> runtimeCtx, byte[] aad) throws Exception {
-        byte[] cipherBytes = Base64.getDecoder().decode(body.trim());
-        byte[] plainBytes  = CryptoModuleService.getInstance().decrypt(moduleName, runtimeCtx, aad, cipherBytes);
-        return new String(plainBytes, StandardCharsets.UTF_8);
-    }
-
-    /**
-     * fromPath의 Base64 값을 복호화하여 toPath에 반영.
-     * toPath = "/" → 복호화된 텍스트로 body 전체 교체.
-     */
-    private String decryptField(String body, String moduleName, Map<String, String> runtimeCtx, byte[] aad,
-            String fromPath, String toPath) throws Exception {
-
-        String encBase64 = JsonPathUtil.getValueAtPath(body, fromPath);
-        if (StringUtils.isBlank(encBase64)) {
-            logger.warn("CryptoFilter] 복호화 대상 필드 없음: path=" + fromPath);
-            return body;
-        }
-
-        byte[] cipherBytes = Base64.getDecoder().decode(encBase64.trim());
-        byte[] plainBytes  = CryptoModuleService.getInstance().decrypt(moduleName, runtimeCtx, aad, cipherBytes);
-        String plainText   = new String(plainBytes, StandardCharsets.UTF_8);
-
-        if (PATH_ROOT.equals(toPath)) {
-            return plainText;
-        }
-        return JsonPathUtil.setValueAtPath(body, toPath, plainText, false);
-    }
-
-    // ------------------------------------------------------------------
-    // 암호화 구현
-    // ------------------------------------------------------------------
-
-    private String encryptBody(String body, String moduleName, Map<String, String> runtimeCtx, byte[] aad) throws Exception {
-        byte[] cipherBytes = CryptoModuleService.getInstance().encrypt(moduleName, runtimeCtx, aad,
-                body.getBytes(StandardCharsets.UTF_8));
-        return Base64.getEncoder().encodeToString(cipherBytes);
-    }
-
-    /**
-     * fromPath 값을 암호화하여 toPath(Base64)에 반영.
-     * fromPath = "/" → body 전체를 암호화하여 toPath 필드명으로 래핑.
-     */
-    private String encryptField(String body, String moduleName, Map<String, String> runtimeCtx, byte[] aad,
-            String fromPath, String toPath) throws Exception {
-
-        String plainText;
-        if (PATH_ROOT.equals(fromPath)) {
-            plainText = body;
-        } else {
-            plainText = JsonPathUtil.getValueAtPath(body, fromPath);
-            if (StringUtils.isBlank(plainText)) {
-                logger.warn("CryptoFilter] 암호화 대상 필드 없음: path=" + fromPath);
-                return body;
-            }
-        }
-
-        byte[] cipherBytes = CryptoModuleService.getInstance().encrypt(moduleName, runtimeCtx, aad,
-                plainText.getBytes(StandardCharsets.UTF_8));
-        String encBase64 = Base64.getEncoder().encodeToString(cipherBytes);
-
-        if (PATH_ROOT.equals(fromPath)) {
-            String fieldName = toPath.replaceFirst("^/", "");
-            return "{\"" + fieldName + "\":\"" + encBase64 + "\"}";
-        }
-        return JsonPathUtil.setValueAtPath(body, toPath, encBase64, false);
-    }
-
-    // ------------------------------------------------------------------
-    // 유틸
-    // ------------------------------------------------------------------
-
-    /**
-     * 필터로 전달되는 message 객체를 JSON 문자열로 변환한다.
-     * <ul>
-     *   <li>{@code String} — 그대로 반환</li>
-     *   <li>{@code byte[]} — UTF-8 디코딩</li>
-     *   <li>{@code JSONObject} / 기타 — {@code toString()} 호출
-     *       (json-simple JSONObject는 toString()이 toJSONString()을 위임함)</li>
-     * </ul>
-     */
-    protected String toBodyString(Object message) {
-        if (message instanceof String) {
-            return (String) message;
-        }
-        if (message instanceof byte[]) {
-            return new String((byte[]) message, StandardCharsets.UTF_8);
-        }
-        return message.toString();
-    }
-
-    /**
-     * crypto.aad.header 프로퍼티에 지정된 헤더값을 UTF-8 바이트로 반환한다.
-     * 프로퍼티 미설정 또는 헤더값 없으면 null을 반환하여 GCM 기본 동작(IV를 AAD 대체값으로 사용)을 따른다.
-     */
-    protected byte[] buildAad(Properties prop, HttpServletRequest request) {
-        String headerName = prop.getProperty(PROP_AAD_HEADER);
-        if (StringUtils.isBlank(headerName) || request == null) {
-            return null;
-        }
-        String headerValue = request.getHeader(headerName);
-        return StringUtils.isBlank(headerValue) ? null : headerValue.getBytes(StandardCharsets.UTF_8);
-    }
-
-    protected String required(Properties prop, String key) {
-        String v = prop.getProperty(key);
-        if (StringUtils.isBlank(v)) {
-            throw new IllegalArgumentException("CryptoFilter 필수 프로퍼티 누락: " + key);
-        }
-        return v;
-    }
-
-    private String getProp(Properties prop, String key, String defaultVal) {
-        String v = prop.getProperty(key);
-        return StringUtils.isBlank(v) ? defaultVal : v;
-    }
-}

src/main/java/com/eactive/eai/adapter/http/dynamic/filter/HttpAdapterFilterFactory.java

@@ -6,13 +6,10 @@ import com.eactive.eai.common.util.Logger;
 
 public class HttpAdapterFilterFactory {
 	static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+	static String basePackage = "com.eactive.eai.adapter.http.dynamic.filter";
+	static String customBasePackage = "com.eactive.eai.custom.adapter.http.dynamic.filter";
 	static private ConcurrentHashMap<String, HttpAdapterFilter> h = new ConcurrentHashMap<String, HttpAdapterFilter>();
 
-	public HttpAdapterFilterFactory() {
-		super();
-	}
-
-	@SuppressWarnings("rawtypes")
 	public static HttpAdapterFilter createFilter(String type) {
 		if (h.containsKey(type)) {
 			return (HttpAdapterFilter) h.get(type);
@@ -32,12 +29,19 @@ public class HttpAdapterFilterFactory {
 		case ADAPTERALLOWIPLISTFILTER:
 			filter = new AdapterAllowIPListFilter();
 			break;
+		case HMAC_SHA256:
+			filter = new HmacSha256VerifyFilterKjb();
+			break;
+		case REFLECTALLHEADER:
+			filter = new ReflectAllHeaderFilter();
+			break;
 		default:
-			try {
-				Class cl = Class.forName(type);
-				filter = (HttpAdapterFilter) cl.newInstance();
-			} catch (Exception e) {
-				logger.error("Cannot create a HttpAdapterFilter. - {}", type);
+			filter = classForName(type);
+			if (filter == null) {
+				filter = classForName(basePackage + "." + type);
+			}
+			if (filter == null) {
+				filter = classForName(customBasePackage + "." + type);
 			}
 			break;
 		}
@@ -49,4 +53,14 @@ public class HttpAdapterFilterFactory {
 			return null;
 		}
 	}
+
+	private static HttpAdapterFilter classForName(String type) {
+		try {
+			Class<?> cl = Class.forName(type);
+			return (HttpAdapterFilter) cl.newInstance();
+		} catch (ClassNotFoundException | IllegalAccessException | InstantiationException e) {
+			logger.error("Cannot create a HttpAdapterFilter. - {}", type);
+			return null;
+		}
+	}
 }

src/main/java/com/eactive/eai/adapter/http/dynamic/filter/HttpAdapterFilterFactoryKjb.java

@@ -1,71 +0,0 @@
-package com.eactive.eai.adapter.http.dynamic.filter;
-
-import java.util.concurrent.ConcurrentHashMap;
-
-import com.eactive.eai.common.util.Logger;
-
-public class HttpAdapterFilterFactoryKjb extends HttpAdapterFilterFactory {
-	static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
-	static String basePackage = "com.eactive.eai.adapter.http.dynamic.filter";
-	static String customBasePackage = "com.eactive.eai.custom.adapter.http.dynamic.filter";
-	static private ConcurrentHashMap<String, HttpAdapterFilter> h = new ConcurrentHashMap<String, HttpAdapterFilter>();
-
-	public HttpAdapterFilterFactoryKjb() {
-		super();
-	}
-
-	@SuppressWarnings("rawtypes")
-	public static HttpAdapterFilter createFilter(String type) {
-		if (h.containsKey(type)) {
-			return (HttpAdapterFilter) h.get(type);
-		}
-
-		HttpAdapterFilter filter = null;
-		switch (HttpAdapterFilterType.getValue(type)) {
-		case APIAUTHFILTER:
-			filter = new ApiAuthFilter();
-			break;
-		case JWTAUTHFILTER:
-			filter = new JwtAuthFilter();
-			break;
-		case IPWHITELISTFILTER:
-			filter = new IpWhiteListFilter();
-			break;
-		case ADAPTERALLOWIPLISTFILTER:
-			filter = new AdapterAllowIPListFilter();
-			break;
-		case HMAC_SHA256:
-			filter = new HmacSha256VerifyFilterKjb();
-			break;
-		case REFLECTALLHEADER:
-			filter = new ReflectAllHeaderFilter();
-			break;
-		default:
-			filter = classForName(type);
-			if (filter == null) {
-				filter = classForName(basePackage + "." + type);
-			}
-			if (filter == null) {
-				filter = classForName(customBasePackage + "." + type);
-			}
-			break;
-		}
-
-		if (filter != null) {
-			h.put(type, filter);
-			return filter;
-		} else {
-			return null;
-		}
-	}
-
-	private static HttpAdapterFilter classForName(String type) {
-		try {
-			Class<?> cl = Class.forName(type);
-			return (HttpAdapterFilter) cl.newInstance();
-		} catch (ClassNotFoundException | IllegalAccessException | InstantiationException e) {
-			logger.error("Cannot create a HttpAdapterFilter. - {}", type);
-			return null;
-		}
-	}
-}

src/main/java/com/eactive/eai/adapter/http/dynamic/filter/InCryptoFilter.java

@@ -0,0 +1,85 @@
+package com.eactive.eai.adapter.http.dynamic.filter;
+
+import java.nio.charset.StandardCharsets;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Properties;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.adapter.http.filter.AbstractCryptoFilter;
+
+/**
+ * HTTP 서버 어댑터용 암복호화 필터 (수신 방향).
+ *
+ * doPreFilter  : 수신 요청 복호화 (CRYPTO_DEC_* 프로퍼티 기반)
+ * doPostFilter : 송신 응답 암호화 (CRYPTO_ENC_* 프로퍼티 기반)
+ *
+ * DYNAMIC 키 컨텍스트가 필요한 경우 {@link #buildRuntimeContext}를 오버라이드한다.
+ * STATIC 키 모듈을 사용하는 경우 빈 Map이 기본값이므로 오버라이드 불필요.
+ *
+ * 프로퍼티 설명은 {@link AbstractCryptoFilter} 참조.
+ */
+public class InCryptoFilter extends AbstractCryptoFilter implements HttpAdapterFilter {
+
+    /**
+     * DYNAMIC 키 도출용 컨텍스트를 구성한다.
+     * STATIC 키 모듈이면 빈 Map({@code new HashMap<>()})을 반환한다.
+     * 서브클래스에서 오버라이드하여 HttpServletRequest로부터 값을 추출할 수 있다.
+     */
+    protected Map<String, String> buildRuntimeContext(Properties prop, HttpServletRequest request) {
+        return new HashMap<>();
+    }
+
+    /**
+     * CRYPTO_AAD_HEADER 프로퍼티에 지정된 헤더값을 UTF-8 바이트로 반환한다.
+     * 미설정 또는 헤더값 없으면 null을 반환하여 GCM 기본 동작(IV를 AAD 대체값으로 사용)을 따른다.
+     */
+    protected byte[] buildAad(Properties prop, HttpServletRequest request) {
+        String headerName = prop.getProperty(PROP_AAD_HEADER);
+        if (StringUtils.isBlank(headerName) || request == null) {
+            return null;
+        }
+        String headerValue = request.getHeader(headerName);
+        return StringUtils.isBlank(headerValue) ? null : headerValue.getBytes(StandardCharsets.UTF_8);
+    }
+
+    @Override
+    public Object doPreFilter(String adptGrpName, String adptName, Object message, Properties prop,
+            HttpServletRequest request, HttpServletResponse response) throws Exception {
+
+        String moduleName = required(prop, PROP_MODULE_NAME);
+        String scope      = getProp(prop, PROP_SCOPE, SCOPE_FIELD).toUpperCase();
+        String body       = toBodyString(message);
+        Map<String, String> runtimeCtx = buildRuntimeContext(prop, request);
+        byte[] aad        = buildAad(prop, request);
+
+        if (SCOPE_FIELD.equals(scope)) {
+            return decryptField(body, moduleName, runtimeCtx, aad,
+                    getProp(prop, PROP_DEC_FROM_PATH, PATH_ENCDATA),
+                    getProp(prop, PROP_DEC_TO_PATH, PATH_ROOT));
+        }
+        return decryptBody(body, moduleName, runtimeCtx, aad);
+    }
+
+    @Override
+    public Object doPostFilter(String adptGrpName, String adptName, Object resultMessage, Properties prop,
+            HttpServletRequest request, HttpServletResponse response) throws Exception {
+
+        String moduleName = required(prop, PROP_MODULE_NAME);
+        String scope      = getProp(prop, PROP_SCOPE, SCOPE_FIELD).toUpperCase();
+        String body       = toBodyString(resultMessage);
+        Map<String, String> runtimeCtx = buildRuntimeContext(prop, request);
+        byte[] aad        = buildAad(prop, request);
+
+        if (SCOPE_FIELD.equals(scope)) {
+            return encryptField(body, moduleName, runtimeCtx, aad,
+                    getProp(prop, PROP_ENC_FROM_PATH, PATH_ROOT),
+                    getProp(prop, PROP_ENC_TO_PATH, PATH_ENCDATA));
+        }
+        return encryptBody(body, moduleName, runtimeCtx, aad);
+    }
+}

src/main/java/com/eactive/eai/adapter/http/filter/AbstractCryptoFilter.java

@@ -0,0 +1,153 @@
+package com.eactive.eai.adapter.http.filter;
+
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+import java.util.Map;
+import java.util.Properties;
+
+import org.apache.commons.lang3.StringUtils;
+
+import com.eactive.eai.common.security.CryptoModuleService;
+import com.eactive.eai.common.util.Logger;
+import com.eactive.eai.util.JsonPathUtil;
+import com.fasterxml.jackson.databind.JsonNode;
+
+/**
+ * InCryptoFilter / OutCryptoFilter 공통 기반 클래스.
+ *
+ * BODY/FIELD 범위 암복호화 로직, 프로퍼티 상수, 유틸리티 메서드를 제공한다.
+ * HTTP 서버 어댑터용은 {@link InCryptoFilter}, 클라이언트 어댑터용은 {@link OutCryptoFilter} 참조.
+ *
+ * 프로퍼티 키:
+ *   CRYPTO_MODULE_NAME   필수. DB에 등록된 암호화 모듈명.
+ *   CRYPTO_SCOPE         BODY | FIELD (기본값: FIELD)
+ *                        BODY  : 메시지 전체를 암복호화 (Base64 인코딩/디코딩)
+ *                        FIELD : 특정 JSON 경로의 값만 암복호화
+ *
+ *   FIELD 범위 전용:
+ *   CRYPTO_DEC_FROM_PATH 복호화 대상 JSON 경로 (기본값: /encrypted_data)
+ *   CRYPTO_DEC_TO_PATH   복호화 결과 반영 경로. "/" = 전체 body 교체.
+ *   CRYPTO_ENC_FROM_PATH 암호화 대상 JSON 경로. "/" = 전체 body 암호화.
+ *   CRYPTO_ENC_TO_PATH   암호화 결과(Base64)를 넣을 JSON 경로 (기본값: /encrypted_data)
+ *
+ *   GCM AAD 전용 (선택):
+ *   CRYPTO_AAD_HEADER    AAD로 사용할 HTTP 요청 헤더명 (InCryptoFilter 전용).
+ *                        미설정 또는 헤더값 없으면 aad=null → IV를 AAD 대체값으로 사용.
+ */
+public abstract class AbstractCryptoFilter {
+
+    protected static Logger logger = Logger.getLogger(Logger.LOGGER_ADAPTER);
+
+    public static final String PROP_MODULE_NAME   = "CRYPTO_MODULE_NAME";
+    public static final String PROP_SCOPE         = "CRYPTO_SCOPE";
+    public static final String PROP_DEC_FROM_PATH = "CRYPTO_DEC_FROM_PATH";
+    public static final String PROP_DEC_TO_PATH   = "CRYPTO_DEC_TO_PATH";
+    public static final String PROP_ENC_FROM_PATH = "CRYPTO_ENC_FROM_PATH";
+    public static final String PROP_ENC_TO_PATH   = "CRYPTO_ENC_TO_PATH";
+    public static final String PROP_AAD_HEADER    = "CRYPTO_AAD_HEADER";
+
+    public static final String SCOPE_BODY   = "BODY";
+    public static final String SCOPE_FIELD  = "FIELD";
+    public static final String PATH_ROOT    = "/";
+    public static final String PATH_ENCDATA = "/encrypted_data";
+
+    // ------------------------------------------------------------------
+    // 복호화 구현
+    // ------------------------------------------------------------------
+
+    protected String decryptBody(String body, String moduleName, Map<String, String> runtimeCtx,
+            byte[] aad) throws Exception {
+        byte[] cipherBytes = Base64.getDecoder().decode(body.trim());
+        byte[] plainBytes  = CryptoModuleService.getInstance().decrypt(moduleName, runtimeCtx, aad, cipherBytes);
+        return new String(plainBytes, StandardCharsets.UTF_8);
+    }
+
+    /**
+     * fromPath의 Base64 값을 복호화하여 toPath에 반영. JSON 파싱 1회.
+     * toPath = "/" → fromPath 필드를 제거하고 복호화된 JSON을 body에 병합.
+     */
+    protected String decryptField(String body, String moduleName, Map<String, String> runtimeCtx,
+            byte[] aad, String fromPath, String toPath) throws Exception {
+        JsonNode root = JsonPathUtil.toTree(body);
+        String encBase64 = JsonPathUtil.getAt(root, fromPath);
+        if (StringUtils.isBlank(encBase64)) {
+            logger.warn("CryptoFilter] 복호화 대상 필드 없음: path=" + fromPath);
+            return body;
+        }
+        byte[] cipherBytes = Base64.getDecoder().decode(encBase64.trim());
+        byte[] plainBytes  = CryptoModuleService.getInstance().decrypt(moduleName, runtimeCtx, aad, cipherBytes);
+        String plainText   = new String(plainBytes, StandardCharsets.UTF_8);
+        if (PATH_ROOT.equals(toPath)) {
+            return JsonPathUtil.mergeAtRoot(root, fromPath, plainText);
+        }
+        JsonPathUtil.setAt(root, toPath, plainText);
+        return JsonPathUtil.fromTree(root);
+    }
+
+    // ------------------------------------------------------------------
+    // 암호화 구현
+    // ------------------------------------------------------------------
+
+    protected String encryptBody(String body, String moduleName, Map<String, String> runtimeCtx,
+            byte[] aad) throws Exception {
+        byte[] cipherBytes = CryptoModuleService.getInstance().encrypt(moduleName, runtimeCtx, aad,
+                body.getBytes(StandardCharsets.UTF_8));
+        return Base64.getEncoder().encodeToString(cipherBytes);
+    }
+
+    /**
+     * fromPath 값을 암호화하여 toPath(Base64)에 반영. JSON 파싱 1회.
+     * fromPath = "/" → body 전체를 암호화하여 toPath 필드명으로 래핑 (파싱 불필요).
+     */
+    protected String encryptField(String body, String moduleName, Map<String, String> runtimeCtx,
+            byte[] aad, String fromPath, String toPath) throws Exception {
+        if (PATH_ROOT.equals(fromPath)) {
+            byte[] cipherBytes = CryptoModuleService.getInstance().encrypt(moduleName, runtimeCtx, aad,
+                    body.getBytes(StandardCharsets.UTF_8));
+            String encBase64 = Base64.getEncoder().encodeToString(cipherBytes);
+            String fieldName = toPath.replaceFirst("^/", "");
+            return "{\"" + fieldName + "\":\"" + encBase64 + "\"}";
+        }
+        JsonNode root = JsonPathUtil.toTree(body);
+        String plainText = JsonPathUtil.getAt(root, fromPath);
+        if (StringUtils.isBlank(plainText)) {
+            logger.warn("CryptoFilter] 암호화 대상 필드 없음: path=" + fromPath);
+            return body;
+        }
+        byte[] cipherBytes = CryptoModuleService.getInstance().encrypt(moduleName, runtimeCtx, aad,
+                plainText.getBytes(StandardCharsets.UTF_8));
+        String encBase64 = Base64.getEncoder().encodeToString(cipherBytes);
+        JsonPathUtil.setAt(root, toPath, encBase64);
+        return JsonPathUtil.fromTree(root);
+    }
+
+    // ------------------------------------------------------------------
+    // 유틸
+    // ------------------------------------------------------------------
+
+    /**
+     * 필터로 전달되는 message 객체를 JSON 문자열로 변환한다.
+     */
+    protected String toBodyString(Object message) {
+        if (message instanceof String) {
+            return (String) message;
+        }
+        if (message instanceof byte[]) {
+            return new String((byte[]) message, StandardCharsets.UTF_8);
+        }
+        return message.toString();
+    }
+
+    protected String required(Properties prop, String key) {
+        String v = prop.getProperty(key);
+        if (StringUtils.isBlank(v)) {
+            throw new IllegalArgumentException("CryptoFilter 필수 프로퍼티 누락: " + key);
+        }
+        return v;
+    }
+
+    protected String getProp(Properties prop, String key, String defaultVal) {
+        String v = prop.getProperty(key);
+        return StringUtils.isBlank(v) ? defaultVal : v;
+    }
+}

src/main/java/com/eactive/eai/common/authoutbound/AccessTokenManagerByDB.java

@@ -13,15 +13,21 @@ import com.eactive.eai.common.lifecycle.Lifecycle;
 import com.eactive.eai.common.lifecycle.LifecycleException;
 import com.eactive.eai.common.lifecycle.LifecycleListener;
 import com.eactive.eai.common.lifecycle.LifecycleSupport;
+import com.eactive.eai.common.session.SessionManager;
+import com.eactive.eai.common.session.SessionManagerForIgnite;
 import com.eactive.eai.common.util.ApplicationContextProvider;
 import com.eactive.eai.common.util.Logger;
+import com.mchange.v1.cachedstore.CachedStore.Manager;
 import com.openbanking.eai.common.token.AccessTokenVO;
 import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Component;
 
 import java.util.*;
+import java.util.Map.Entry;
 import java.util.concurrent.*;
+import java.util.function.Function;
+import java.util.function.Supplier;
 
 /** 
 * 1. 기능 : Access 토큰 정보를 DB로 부터 로딩하고 만료시 재발급 정보를 메모리에 관리하는 Manager 클래스
@@ -55,13 +61,8 @@ public class AccessTokenManagerByDB implements Lifecycle {
 	/**
 	 * 기동 여부
 	 */
-	private boolean started;
-
-	/**
-	 * 토큰 정보를 저장하는 collection
-	 */
-	private HashMap<String, AccessTokenVO> tokens;
-
+	private boolean started; 
+	
 	/**
 	 * 인증 정보를 저장하는 Map
 	 */
@@ -78,7 +79,6 @@ public class AccessTokenManagerByDB implements Lifecycle {
 	private static final int TOKEN_SCHEDULER_THREAD_POOL_SIZE = 30;
 
 	public AccessTokenManagerByDB() {
-		tokens = new HashMap<>();
 		scheduledTasks = new ConcurrentHashMap<>();
 		outboundOAuthCredentialVos = new HashMap<>();
 		runningTasks = Collections.newSetFromMap(new ConcurrentHashMap<>());
@@ -117,7 +117,6 @@ public class AccessTokenManagerByDB implements Lifecycle {
 		lifecycle.fireLifecycleEvent(STARTING_EVENT, this);
 
 		try {
-			tokens.clear();
 			init();
 		} catch(Exception e) {
 			throw new LifecycleException(ExceptionUtil.getErrorCode(e,"RECEAICPM201"));
@@ -168,7 +167,6 @@ public class AccessTokenManagerByDB implements Lifecycle {
 			logger.error("Scheduler shutdown interrupted", e);
 		}
 
-		this.tokens = null;
 		started = false;
 
 		if (logger.isWarn()){
@@ -240,27 +238,34 @@ public class AccessTokenManagerByDB implements Lifecycle {
 				try {
 					logger.debug("Executing token issuance for adapter group: {}", adapterGroupName);
 
-					// 현재 토큰 가져오기
-					AccessTokenVO accessToken = tokens.get(adapterGroupName);
+					SessionManager.getInstance().getOutboundAccessToken(adapterGroupName, new Function<AccessTokenVO, AccessTokenVO>() {
 
-					// 다음 스케줄 시간 계산
-					long intervalTime = System.currentTimeMillis() + (credential.getIntervalSec() * 1000);
-					// 토큰이 없거나, 다음 스케줄 시간 전에 만료될 경우 재발급
-					if (accessToken == null) {
-						issueToken(credential, false);
-					} else if(accessToken.getExpiration() != null) {
-						// 토큰이 있고 만료시간이 설정 된 경우
-						if(accessToken.getExpiration().before(new Date(intervalTime))){
-							// 다음 스케줄 전에 토큰이 만료되는 경우 재발급
-							issueToken(credential, true);
+					    @Override
+					    public AccessTokenVO apply(AccessTokenVO accessToken) {
+
+						long intervalTime = System.currentTimeMillis() + (credential.getIntervalSec() * 1000);
+//						// 토큰이 없거나, 다음 스케줄 시간 전에 만료될 경우 재발급
+						if (accessToken == null) {
+							return issueToken(credential);
+						} else if(accessToken.getExpiration() != null) {
+							// 토큰이 있고 만료시간이 설정 된 경우
+							if(accessToken.getExpiration().before(new Date(intervalTime))){
+								// 다음 스케줄 전에 토큰이 만료되는 경우 재발급
+							    return issueToken(credential);
+							} else {
+								// 토큰이 아직 유효한 경우
+								logger.debug("Token still valid until next schedule for adapter group: {}, expiration date: {}", adapterGroupName, accessToken.getExpiration());
+								return accessToken;
+							}
 						} else {
-							// 토큰이 아직 유효한 경우
-							logger.debug("Token still valid until next schedule for adapter group: {}, expiration date: {}", adapterGroupName, accessToken.getExpiration());
+							//토큰이 있지만 만료 시간이 없는 경우
+							logger.debug("Token exists but expiration time is null for adapter group: {}", adapterGroupName);
+							return accessToken;
 						}
-					} else {
-						//토큰이 있지만 만료 시간이 없는 경우
-						logger.debug("Token exists but expiration time is null for adapter group: {}", adapterGroupName);
-					}
+					    }
+					    
+					});
+
 
 					logger.debug("Token issuance completed for adapter group: {}", adapterGroupName);
 				} catch (Exception e) {
@@ -282,19 +287,24 @@ public class AccessTokenManagerByDB implements Lifecycle {
 		}
 	}
 
-	private void issueToken(OutboundOAuthCredentialVo outboundOAuthCredentialVo, boolean isTokenExpiredWithinInterval) throws Exception {
-		String adapterGroupName = outboundOAuthCredentialVo.getAdapterGroupName();
-		boolean isExpired = true;
+	private AccessTokenVO issueToken(OutboundOAuthCredentialVo outboundOAuthCredentialVo) {
+	    String adapterGroupName = outboundOAuthCredentialVo.getAdapterGroupName();
+	    AccessTokenVO accessToken = null;
+	    try {
+		
+//		boolean isExpired = true;
+		
+//		if (tokens.containsKey(adapterGroupName)) {
+//			AccessTokenVO accessToken = tokens.get(adapterGroupName);
+//			isExpired = accessToken.isExpired();
+//		}
+//		logger.debug("Token status for adapter group: {}, expired: {}, isTokenExpiredWithinInterval: {}", adapterGroupName, isExpired, isTokenExpiredWithinInterval);
 
-		if (tokens.containsKey(adapterGroupName)) {
-			AccessTokenVO accessToken = tokens.get(adapterGroupName);
-			isExpired = accessToken.isExpired();
-		}
-		logger.debug("Token status for adapter group: {}, expired: {}, isTokenExpiredWithinInterval: {}", adapterGroupName, isExpired, isTokenExpiredWithinInterval);
-
-		if (isExpired || isTokenExpiredWithinInterval) {
+//		if (isExpired || isTokenExpiredWithinInterval) {
+		
+		
 			logger.info("Issuing new token for adapter group: {}", adapterGroupName);
-			tokens.remove(adapterGroupName);
+//			tokens.remove(adapterGroupName);
 
 			AdapterGroupVO gvo = AdapterManager.getInstance().getAdapterGroupVO(adapterGroupName);
 
@@ -306,16 +316,23 @@ public class AccessTokenManagerByDB implements Lifecycle {
 				HttpClientAccessTokenServiceByDB service = HttpClientAccessTokenServiceFactoryByDB.createFactory(type);
 				if(service != null) {
 					logger.debug("Executing token service of type: {} for adapter group: {}", type, adapterGroupName);
-					AccessTokenVO accessToken = (AccessTokenVO) service.execute(adapterGroupName, properties, outboundOAuthCredentialVo);
-					this.tokens.put(adapterGroupName, accessToken);
+					accessToken = (AccessTokenVO) service.execute(adapterGroupName, properties, outboundOAuthCredentialVo);
 					logger.info("New token issued successfully for adapter group: {}", adapterGroupName);
+					return accessToken;
+					
 				} else {
 					logger.warn("Token service not found for type: {} and adapter group: {}", type, adapterGroupName);
 				}
 			} else {
 				logger.warn("No valid adapter configuration found for adapter group: {}", adapterGroupName);
 			}
-		}
+		
+	    }catch (Exception e) {
+		logger.error("Task execution failed for adapter group: {}", adapterGroupName, e);
+	    } 
+	    
+	    return accessToken;
+		
 	}
 
 	public void stopToken(String adapterGroupName) {
@@ -324,7 +341,7 @@ public class AccessTokenManagerByDB implements Lifecycle {
 			task.cancel(true);
 			logger.warn("Token task stopped for adapter group: {}", adapterGroupName);
 		}
-		tokens.remove(adapterGroupName);
+		SessionManager.getInstance().removeOutboundAccessToken(adapterGroupName);
 		logger.debug("Token removed for adapter group: {}", adapterGroupName);
 	}
 
@@ -382,15 +399,28 @@ public class AccessTokenManagerByDB implements Lifecycle {
     * @return   Access 토큰 정보
     **/
     public AccessTokenVO getAccessTokenVO(String adapterGroupName) {
-    	AccessTokenVO accessToken = null;
-    	
-    	try {
-    		accessToken = tokens.get(adapterGroupName);  
-    	} catch(Exception e) {
-    		if (logger.isError()) logger.error("토큰을 찾을 수 없습니다. ["+adapterGroupName+"] ", e);
-    	}
+	AccessTokenVO accessToken = null;
 
-    	return accessToken;
+	try {
+	    accessToken = SessionManager.getInstance().getOutboundAccessToken(adapterGroupName,
+		    new Function<AccessTokenVO, AccessTokenVO>() {
+
+			@Override
+			public AccessTokenVO apply(AccessTokenVO t) {
+
+			    OutboundOAuthCredentialVo outboundOAuthCredentialVo = outboundOAuthCredentialVos
+				    .get(adapterGroupName);
+
+			    return issueToken(outboundOAuthCredentialVo);
+			}
+		    });
+
+	} catch (Exception e) {
+	    if (logger.isError())
+		logger.error("토큰을 찾을 수 없습니다. [" + adapterGroupName + "] ", e);
+	}
+
+	return accessToken;
     }
     
     /** 
@@ -403,9 +433,9 @@ public class AccessTokenManagerByDB implements Lifecycle {
     **/
     public String getAccessToken(String adapterGroupName) {
     	String accessToken = null;
-    	    	
+	
     	try {
-    		accessToken = tokens.get(adapterGroupName).getAccessToken();   
+    		accessToken = getAccessTokenVO(adapterGroupName).getAccessToken();   
     	} catch(Exception e) {
     		if (logger.isError()) logger.error("토큰을 찾을 수 없습니다. ["+adapterGroupName+"] ", e);
     	}
@@ -435,27 +465,29 @@ public class AccessTokenManagerByDB implements Lifecycle {
     * 3. 주의사항 
     *
     **/
-    public synchronized AccessTokenVO retryAccessTokenVO(String adapterGroupName, Properties properties, String oldToken) throws Exception {
-	    
-    	AccessTokenVO accessToken = getAccessTokenVO(adapterGroupName);
+	public synchronized AccessTokenVO retryAccessTokenVO(String adapterGroupName, Properties properties,
+		String oldToken) throws Exception {
 
-    	// 동시 요청이 발생할 경우 synchronized 처리를 했기때문에 토큰을 다시 한번 체크한다.
-    	if (accessToken == null || accessToken.isExpired()
-    			|| StringUtils.equals(accessToken.getAccessToken(), oldToken)) {
+	    AccessTokenVO accessToken = getAccessTokenVO(adapterGroupName);
+
+	    // 동시 요청이 발생할 경우 synchronized 처리를 했기때문에 토큰을 다시 한번 체크한다.
+	    if (accessToken == null || accessToken.isExpired()
+		    || StringUtils.equals(accessToken.getAccessToken(), oldToken)) {
+
+		if (isOAuthCredentialRegistered(adapterGroupName) == false) {
+		    throw new Exception(
+			    "There is no OAuthCredentialRegistered information, or whether to use it is 'N'.");
+		}
+		String type = properties.getProperty("ADAPTER_TOKEN_ISSUING_CLIENT_TYPE");
+
+		HttpClientAccessTokenServiceByDB service = HttpClientAccessTokenServiceFactoryByDB.createFactory(type);
+		OutboundOAuthCredentialVo outboundOAuthCredentialVo = outboundOAuthCredentialVos.get(adapterGroupName);
+		if (service != null) {
+		    accessToken = (AccessTokenVO) service.execute(adapterGroupName, properties,
+			    outboundOAuthCredentialVo);
+		}
+	    }
 
-			if(isOAuthCredentialRegistered(adapterGroupName) == false){
-				throw new Exception("There is no OAuthCredentialRegistered information, or whether to use it is 'N'.");
-			}
-	    	String type = properties.getProperty("ADAPTER_TOKEN_ISSUING_CLIENT_TYPE");
-	    	
-	    	HttpClientAccessTokenServiceByDB service = HttpClientAccessTokenServiceFactoryByDB.createFactory(type);
-			OutboundOAuthCredentialVo outboundOAuthCredentialVo = outboundOAuthCredentialVos.get(adapterGroupName);
-	    	if(service != null) {
-	    		accessToken = (AccessTokenVO) service.execute(adapterGroupName, properties, outboundOAuthCredentialVo);
-	    	}
-	    	tokens.put(adapterGroupName, accessToken);
-    	}
-    	
 	    return accessToken;
-    }
+	}
 } 

src/main/java/com/eactive/eai/common/circuitBreaker/type/TypedCircuitBreakerManager.java

@@ -336,7 +336,7 @@ public class TypedCircuitBreakerManager implements Lifecycle {
 			switch (event.getEventType()) {
 				case ERROR :
 					TypedCircuitBreakerManager.logger
-							.error("CirbuitBreaker ERROR event occurred. CircuitBreakerEvent={}" + event);
+							.error("CircuitBreaker ERROR event occurred. CircuitBreakerEvent={}" + event);
 					break;
 				case STATE_TRANSITION :
 					if (event instanceof CircuitBreakerOnStateTransitionEvent) {
@@ -345,7 +345,7 @@ public class TypedCircuitBreakerManager implements Lifecycle {
 						CircuitBreaker.State toState = stateTransition.getToState();
 						CircuitBreaker.State fromState = stateTransition.getFromState();
 						TypedCircuitBreakerManager.logger.error(
-								"CirbuitBreaker STATE_TRANSITION event occurred. {} : {} -> {}. CircuitBreakerEvent={}, UrlCircuitBreakerVO={}",
+								"CircuitBreaker STATE_TRANSITION event occurred. {} : {} -> {}. CircuitBreakerEvent={}, UrlCircuitBreakerVO={}",
 								new Object[]{event.getCircuitBreakerName(), fromState, toState, event, this.vo});
 //						if (!toState.equals(State.OPEN) && !toState.equals(State.HALF_OPEN)
 //								&& !toState.equals(State.CLOSED)) {
@@ -367,7 +367,7 @@ public class TypedCircuitBreakerManager implements Lifecycle {
 
 					} else {
 						TypedCircuitBreakerManager.logger.error(
-								"CirbuitBreaker STATE_TRANSITION event occurred. CircuitBreakerEvent={}, UrlCircuitBreakerVO={}",
+								"CircuitBreaker STATE_TRANSITION event occurred. CircuitBreakerEvent={}, UrlCircuitBreakerVO={}",
 								new Object[]{event, this.vo});
 					}
 					break;

src/main/java/com/eactive/eai/common/session/SessionManager.java

@@ -1,5 +1,10 @@
 package com.eactive.eai.common.session; 
 
+import java.util.function.Function;
+import java.util.function.Supplier;
+
+import org.apache.ignite.IgniteCache;
+
 import com.eactive.eai.authserver.service.BearerTokenInfo;
 import com.eactive.eai.common.lifecycle.Lifecycle;
 import com.eactive.eai.common.lifecycle.LifecycleException;
@@ -11,6 +16,7 @@ import com.eactive.eai.common.server.EAIServerManager;
 import com.eactive.eai.common.server.EAIServerVO;
 import com.eactive.eai.common.sessioninfo.TerminalInfoVO;
 import com.eactive.eai.common.util.Logger;
+import com.openbanking.eai.common.token.AccessTokenVO;
 
 /** 
  * 1. 기능 : 
@@ -60,6 +66,7 @@ public abstract class SessionManager implements Lifecycle {
 	public static final String WEBSOCKER_CAHCE_NAME = "webSocketTimeout";
 	public static final String TERMINAL_CAHCE_NAME = "terminalSession";
 	public static final String CAGATEWAY_TOKEN_CACHE_NAME = "CAGatewayToken";
+	public static final String OUTBOUND_ACCESS_TOKEN_CACHE_NAME = "OutBoundAccessToken";
 	
 	public static final String SESSION_MANAGER_GROUPNAME = "RMIInfo";
 	public static final String SESSION_MANAGER_CACHETYPE = "cacheType";
@@ -204,6 +211,13 @@ public abstract class SessionManager implements Lifecycle {
 
 	public abstract void removeCAToken(String key);
 	
+	//Outbound Access Token Cache
+	public abstract AccessTokenVO getOutboundAccessToken(String key, Function<AccessTokenVO, AccessTokenVO> getNewToken);
+
+	public abstract void removeOutboundAccessToken(String key);
+	
+	public abstract void clearOutboundAccessToken();
+	
 
 	// HTTP Cache
 	public abstract SessionVO getHttpLogin(String key);
@@ -245,4 +259,5 @@ public abstract class SessionManager implements Lifecycle {
 	public abstract void closeManager();
 	
 	public abstract String getCacheStatus();
+
 }

src/main/java/com/eactive/eai/common/session/SessionManagerForEhcache.java

@@ -2,6 +2,8 @@ package com.eactive.eai.common.session;
 
 import java.util.Properties;
 import java.util.concurrent.TimeUnit;
+import java.util.function.Function;
+import java.util.function.Supplier;
 
 import com.eactive.eai.authserver.service.BearerTokenInfo;
 import com.eactive.eai.common.ehcache.CustomRMICacheReplicatorFactory;
@@ -14,6 +16,7 @@ import com.eactive.eai.common.sessioninfo.TerminalInfoDAO;
 import com.eactive.eai.common.sessioninfo.TerminalInfoVO;
 import com.eactive.eai.common.util.ApplicationContextProvider;
 import com.eactive.eai.util.HealthCheckManager;
+import com.openbanking.eai.common.token.AccessTokenVO;
 
 import net.sf.ehcache.Cache;
 import net.sf.ehcache.CacheException;
@@ -937,4 +940,19 @@ public class SessionManagerForEhcache extends SessionManager {
 	public void removeCAToken(String key) {
 		throw new UnsupportedOperationException();
 	}
+
+	@Override
+	public AccessTokenVO getOutboundAccessToken(String key, Function<AccessTokenVO, AccessTokenVO> getNewToken) {
+	    throw new UnsupportedOperationException();
+	}
+
+	@Override
+	public void removeOutboundAccessToken(String key) {
+	    throw new UnsupportedOperationException();
+	}
+	
+	@Override
+	public void clearOutboundAccessToken() {
+	    throw new UnsupportedOperationException();
+	}
 } 

src/main/java/com/eactive/eai/common/session/SessionManagerForIgnite.java

@@ -4,6 +4,10 @@ import java.util.ArrayList;
 import java.util.List;
 import java.util.Properties;
 import java.util.concurrent.TimeUnit;
+import java.util.concurrent.locks.Lock;
+import java.util.function.BiConsumer;
+import java.util.function.Function;
+import java.util.function.Supplier;
 
 import javax.cache.Cache;
 import javax.cache.configuration.Factory;
@@ -54,6 +58,7 @@ import com.eactive.eai.common.util.ApplicationContextProvider;
 import com.eactive.eai.common.worker.Future;
 import com.eactive.eai.common.worker.ResponseMap;
 import com.eactive.eai.util.HealthCheckManager;
+import com.openbanking.eai.common.token.AccessTokenVO;
 
 import ch.qos.logback.classic.Level;
 
@@ -66,6 +71,8 @@ import ch.qos.logback.classic.Level;
   //------------------------------------------------------------------------------------
 
 public class SessionManagerForIgnite extends SessionManager {
+    
+    	private static final String DISTRIBUTED_TOKEN_LOCK = "DISTRIBUTED_TOKEN_LOCK";
 	// evictMaster Instance - single socket 관련
 	private static IgniteCache<String, String> evictMasterCache = null;
 	// Socket Session cache 정보
@@ -76,8 +83,11 @@ public class SessionManagerForIgnite extends SessionManager {
 	private static IgniteCache<String, CacheStoreObject> cacheStore = null;
 	// CA Gateway Token 관리용
 	private static IgniteCache<String, BearerTokenInfo> cacheCAToken = null;
+	// OutboundAccessToekn 관리용
+	private static IgniteCache<String, AccessTokenVO> cacheOutBoundAccessToken = null;
 	// webSocket Login cache 정보
 	private static IgniteCache<String, SessionVO> cacheLogin = null; // key = loginId
+	
 	private static IgniteCache<String, String> cacheConvertUserId = null; // 단말ID 를 userID로 변경
 	// HTTP Polling 에 대한 timeout 관리용
 	private static IgniteCache<String, SessionVO> httpLogin = null; // key == uuid
@@ -392,6 +402,7 @@ public class SessionManagerForIgnite extends SessionManager {
 		caches.add(initCache(config, sessionTimeout, bootstrapAsynchronously, USERID_CAHCE_NAME, 20000, false));
 		caches.add(initCache(config, webSocketTimeout, bootstrapAsynchronously, WEBSOCKER_CAHCE_NAME, 20000, false));
 		caches.add(initCache(config, sessionTimeout, bootstrapAsynchronously, TERMINAL_CAHCE_NAME, 20000, false));
+		caches.add(initCache(config, 0, bootstrapAsynchronously, OUTBOUND_ACCESS_TOKEN_CACHE_NAME, 1000, false, true)); // transactionMode true
 		caches.add(initCache(config, 0, bootstrapAsynchronously, CAGATEWAY_TOKEN_CACHE_NAME, 1000, false));
 		
 		config.setCacheConfiguration(caches.stream().toArray(CacheConfiguration[]::new));
@@ -421,6 +432,7 @@ public class SessionManagerForIgnite extends SessionManager {
 		cacheTopic = manager.cache(TOPIC_CAHCE_NAME);
 		cacheStore = manager.cache(STORE_CAHCE_NAME);
 		cacheCAToken = manager.cache(CAGATEWAY_TOKEN_CACHE_NAME);
+		cacheOutBoundAccessToken = manager.cache(OUTBOUND_ACCESS_TOKEN_CACHE_NAME);
 		
 		cacheLogin = manager.cache(LOGIN_CAHCE_NAME);
 		httpLogin = manager.cache(HTTP_CAHCE_NAME);
@@ -428,49 +440,56 @@ public class SessionManagerForIgnite extends SessionManager {
 		cacheWebSocketTimeout = manager.cache(WEBSOCKER_CAHCE_NAME);
 		cacheTerminal = manager.cache(TERMINAL_CAHCE_NAME);		
 	}
+	
+	private CacheConfiguration initCache(IgniteConfiguration config, int expiryDurationSecs,
+		String bootstrapAsynchronously, String name, int maxsize, boolean useCacheWriteModeAsync,
+		boolean transactionMode) {
+	    if (logger.isDebug()) {
+		logger.debug(logPrefix + " create " + name + " cache expiryDurationSecs=" + expiryDurationSecs);
+	    }
+	    // near-cache
+	    NearCacheConfiguration nearConfiguration = new NearCacheConfiguration();
+	    LruEvictionPolicy nearEvictionPolicy = new LruEvictionPolicy();
+	    nearEvictionPolicy.setMaxSize(maxsize);
+	    nearConfiguration.setNearEvictionPolicy(nearEvictionPolicy);
+
+	    CacheConfiguration cacheConfig = new CacheConfiguration(name);
+
+	    cacheConfig.setCacheMode(CacheMode.PARTITIONED);
+
+	    // ATOMIC,TRANSACTIONAL
+	    if (transactionMode) {
+		cacheConfig.setAtomicityMode(CacheAtomicityMode.TRANSACTIONAL);
+	    } else {
+		cacheConfig.setAtomicityMode(CacheAtomicityMode.ATOMIC);
+	    }
+
+	    // Set the number of backups (replicas) for each partition : default(0)
+	    cacheConfig.setBackups(1);
+	    // Enable reading from backups to improve read consistency : default(true)
+	    cacheConfig.setReadFromBackup(true);
+
+	    // FULL_SYNC/FULL_ASYNC/PRIMARY_SYNC(default)
+	    if (useCacheWriteModeAsync) {
+		cacheConfig.setWriteSynchronizationMode(CacheWriteSynchronizationMode.FULL_ASYNC);
+	    } else {
+//		cacheConfig.setWriteSynchronizationMode(CacheWriteSynchronizationMode.FULL_SYNC);
+		cacheConfig.setWriteSynchronizationMode(CacheWriteSynchronizationMode.PRIMARY_SYNC);
+	    }
+
+	    if (expiryDurationSecs > 0) {
+		cacheConfig.setExpiryPolicyFactory(
+			ModifiedExpiryPolicy.factoryOf(new Duration(TimeUnit.SECONDS, expiryDurationSecs)));
+	    } else {
+		cacheConfig.setExpiryPolicyFactory(ModifiedExpiryPolicy.factoryOf(Duration.ETERNAL));
+	    }
+	    cacheConfig.setNearConfiguration(nearConfiguration);
+	    return cacheConfig;
+	}
 
 	private CacheConfiguration initCache(IgniteConfiguration config, int expiryDurationSecs, String bootstrapAsynchronously,
 			String name, int maxsize, boolean useCacheWriteModeAsync) {
-		if (logger.isDebug()) {
-			logger.debug(logPrefix + " create " + name + " cache expiryDurationSecs=" + expiryDurationSecs);
-		}
-		// near-cache
-		NearCacheConfiguration nearConfiguration = new NearCacheConfiguration();
-		LruEvictionPolicy nearEvictionPolicy = new LruEvictionPolicy();
-		nearEvictionPolicy.setMaxSize(maxsize);
-		nearConfiguration.setNearEvictionPolicy(nearEvictionPolicy);
-		
-		CacheConfiguration cacheConfig = new CacheConfiguration(name);
-		// REPLICATED,PARTITIONED(default)
-//		cacheConfig.setCacheMode(CacheMode.REPLICATED);
-		cacheConfig.setCacheMode(CacheMode.PARTITIONED);
-		
-		// ATOMIC,TRANSACTIONAL
-		cacheConfig.setAtomicityMode(CacheAtomicityMode.ATOMIC);
-
-		// Set the number of backups (replicas) for each partition : default(0)
-		cacheConfig.setBackups(1);
-		// Enable reading from backups to improve read consistency : default(true)
-		cacheConfig.setReadFromBackup(true);
-		
-		// FULL_SYNC/FULL_ASYNC/PRIMARY_SYNC(default)
-		if (useCacheWriteModeAsync) {
-			cacheConfig.setWriteSynchronizationMode(CacheWriteSynchronizationMode.FULL_ASYNC);
-		} else {
-//			cacheConfig.setWriteSynchronizationMode(CacheWriteSynchronizationMode.FULL_SYNC);
-			cacheConfig.setWriteSynchronizationMode(CacheWriteSynchronizationMode.PRIMARY_SYNC);
-		}
-		
-		if(expiryDurationSecs > 0) {
-			cacheConfig
-					.setExpiryPolicyFactory(ModifiedExpiryPolicy.factoryOf(new Duration(TimeUnit.SECONDS, expiryDurationSecs)));
-		}
-		else {
-			cacheConfig
-			.setExpiryPolicyFactory( ModifiedExpiryPolicy.factoryOf(Duration.ETERNAL) );
-		}
-		cacheConfig.setNearConfiguration(nearConfiguration);
-		return cacheConfig;
+	    return initCache(config, expiryDurationSecs, bootstrapAsynchronously, name, maxsize, useCacheWriteModeAsync, false);
 	}
 
 	// WebSocket Login 관련
@@ -868,5 +887,114 @@ public class SessionManagerForIgnite extends SessionManager {
 		cacheCAToken.remove(key);
 		
 	}
+	
+	
+	private void sleepQuietly(long millis) {
+	    try {
+	        Thread.sleep(millis);
+	    } catch (InterruptedException e) {
+	        // 인터럽트 상태 복구 (중요)
+	        Thread.currentThread().interrupt();
+	    }
+	}
+	
+	public AccessTokenVO getOutboundAccessToken(String key, Function<AccessTokenVO, AccessTokenVO> tokenSupplier) {
+	 // 1. 먼저 캐시에서 조회 (락 없이 빠르게)
+	    AccessTokenVO token = cacheOutBoundAccessToken.get(key);
+
+	    // 2. 만료되었거나 없다면 락 획득 시도
+	    if (token == null || token.isExpired()) {
+		 Lock lock = cacheOutBoundAccessToken.lock(DISTRIBUTED_TOKEN_LOCK); // Ignite 분산 락
+		        
+		 boolean acquired = false;
+	        
+	        try {
+	            logger.debug("calling func getOutboundAccessToken = distributed ignite trylock");
+	            acquired = lock.tryLock(60, TimeUnit.SECONDS);
+	            
+	            if ( acquired ) {
+	        	logger.debug("calling func getOutboundAccessToken = distributed ignite trylock success=>"+acquired);
+			// 3. 락 획득 후 다시 확인 (그 사이 다른 인스턴스가 갱신했을 수 있음)
+			token = cacheOutBoundAccessToken.get(key);
+
+			logger.debug(String.format("getting token in ignite=%s", token));
+
+			if (token == null || token.isExpired()) {
+			    // 4. 실제로 비어있을 때만 외부 API 호출 (I/O 발생)
+			    token = tokenSupplier.apply(token);
+
+			    logger.debug(String.format("getting token is null or expired borrow new token =%s", token));
+
+			    cacheOutBoundAccessToken.put(key, token);
+			}
+	            }
+	            else 
+	            {
+	            	logger.debug("calling func getOutboundAccessToken = distributed ignite trylock fail=>"+acquired);
+	            }
+	        }catch(Throwable e) {
+	        	logger.error("occuring exception in getOutboundAccessToken", e);
+	        }finally {
+	            
+	            try {
+	        	if( acquired ) {
+		        	lock.unlock();
+		        	logger.debug("calling func getOutboundAccessToken = distributed ignite unlock");
+		            }
+	            }catch(Throwable e) {
+	            	logger.error("occuring exception in getOutboundAccessToken unlock fail.", e);
+	            }
+	        }
+	    }
+	    return token;
+	}
+
+
+	@Override
+	public void removeOutboundAccessToken(String key) {
+
+	    Lock lock = cacheOutBoundAccessToken.lock(DISTRIBUTED_TOKEN_LOCK); // Ignite 분산 락
+
+	    boolean acquired = false;
+	    try {
+		
+		logger.debug("calling func removeOutboundAccessToken = distributed ignite trylock");
+		acquired = lock.tryLock(60, TimeUnit.SECONDS);
+		
+		if( acquired ) {
+		    if (logger.isDebug()) {
+
+			logger.debug("calling func getOutboundAccessToken = distributed ignite trylock success=>"
+				+ acquired);
+
+			logger.debug("calling func removeOutboundAccessToken Remove OutBoundAccessToken key - " + key);
+		    }
+		    cacheOutBoundAccessToken.remove(key);
+		}else {
+		    logger.debug("calling func getOutboundAccessToken = distributed ignite trylock fail=>"+acquired);
+		}
+		    
+
+	    } catch (Throwable e) {
+	    	logger.error("occuring exception in removeOutboundAccessToken", e);
+	    } finally {
+
+		try {
+		    if (acquired) {
+			lock.unlock();
+			logger.debug("calling func removeOutboundAccessToken = distributed ignite unlock");
+		    }
+		} catch (Throwable e) {
+		    logger.error("occuring exception in removeOutboundAccessToken unlock fail.", e);
+		}
+	    }
+
+	}
+	
+	@Override
+	public void clearOutboundAccessToken() {
+	    
+
+	}
 
 }

src/main/java/com/eactive/eai/common/util/HttpAdapterExtraLogUtil.java

@@ -72,6 +72,9 @@ public class HttpAdapterExtraLogUtil {
 			}
             httpAdapterExtraLogVo.setHeaderList(headerVoList);
             httpAdapterExtraLogVo.setHttpStatus(httpStatus);
+            
+            logger.debug("[{}] Insert HTTP Log. - {}", guid, httpAdapterExtraLogVo);
+            
             if(ElinkConfig.isUseAsyncLogging()) {
                 AsyncHttpLoggingPoolManager.getInstance().publish(httpAdapterExtraLogVo);
             } else {

src/main/java/com/eactive/eai/common/util/MaskingUtils.java

@@ -0,0 +1,440 @@
+package com.eactive.eai.common.util;
+
+import java.util.Arrays;
+
+/**
+ * 보안아키텍처 마스킹 정책 구현 유틸리티
+ *
+ * <pre>
+ * [고유식별정보]
+ *   주민등록번호  123456-1234567  →  123456-1******
+ *   운전면허번호  제주-22-300001-50  →  제주-22-3*****-**
+ *   여권번호     M12345678  →  M1234****
+ *   외국인등록번호 123456-5234567  →  123456-5******
+ *
+ * [금융식별정보]
+ *   계좌번호     99-912345-1  →  99-9*-*****1
+ *   카드번호     4518-4212-3456-1234  →  4518-42**-****-1234
+ *   유효기간     12/25  →  **&#47;**
+ *   CVV         123  →  ***
+ *
+ * [인증정보]
+ *   비밀번호     password  →  ********
+ *
+ * [신상정보]
+ *   전화번호     064-1234-5678  →  064-12**-56**
+ *   이메일       aajjbacc@shinhan.com  →  **jjba**@shinhan.com
+ *   한글 성명    홍길동  →  홍*동
+ *   영문 성명    GILDONG HONG  →  ******* HONG
+ *   지번주소     제주특별자치도 제주시 연동 123번지, 101동 202호  →  제주특별자치도 제주시 연동 ***번지, **** ****
+ *   도로명주소   제주특별자치도 제주시 은남2길 5, 101동 202호  →  제주특별자치도 제주시 은남**길 ***, **** ****
+ *
+ * [온라인 정보]
+ *   IPv4        100.200.123.45  →  100.200.***.45
+ *   IPv6        21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A  →  21DA:00D3:0000:2F3B:02AA:00FF:FE28:****
+ * </pre>
+ */
+public final class MaskingUtils {
+
+    private static final char MASK = '*';
+
+    private MaskingUtils() {}
+
+    // =========================================================================
+    // 고유식별정보
+    // =========================================================================
+
+    /**
+     * 주민등록번호 마스킹: 뒷 6자리 마스킹
+     * <pre>123456-1234567 → 123456-1******</pre>
+     */
+    public static String maskResidentNumber(String value) {
+        if (value == null || value.isEmpty()) return value;
+        int idx = value.indexOf('-');
+        if (idx < 0) {
+            return maskTailChars(value, 6);
+        }
+        // 하이픈 + 성별 1자리까지 노출, 이후 6자리 마스킹
+        String front = value.substring(0, Math.min(idx + 2, value.length()));
+        return front + stars(6);
+    }
+
+    /**
+     * 운전면허번호 마스킹: 뒤에서부터 숫자 7자리 마스킹
+     * <pre>제주-22-300001-50 → 제주-22-3*****-**</pre>
+     */
+    public static String maskDriverLicense(String value) {
+        if (value == null || value.isEmpty()) return value;
+        char[] chars = value.toCharArray();
+        int digitCount = 0;
+        for (int i = chars.length - 1; i >= 0 && digitCount < 7; i--) {
+            if (Character.isDigit(chars[i])) {
+                chars[i] = MASK;
+                digitCount++;
+            }
+        }
+        return new String(chars);
+    }
+
+    /**
+     * 여권번호 마스킹: 뒤에서부터 4자리 마스킹
+     * <pre>M12345678 → M1234****</pre>
+     */
+    public static String maskPassport(String value) {
+        if (value == null || value.isEmpty()) return value;
+        return maskTailChars(value, 4);
+    }
+
+    /**
+     * 외국인등록번호 마스킹: 뒷 6자리 마스킹 (주민등록번호와 동일)
+     * <pre>123456-5234567 → 123456-5******</pre>
+     */
+    public static String maskForeignerNumber(String value) {
+        return maskResidentNumber(value);
+    }
+
+    // =========================================================================
+    // 금융식별정보
+    // =========================================================================
+
+    /**
+     * 계좌번호 마스킹: 첫 3자리, 마지막 1자리만 노출
+     * <pre>99-912345-1 → 99-9*-*****1</pre>
+     */
+    public static String maskAccountNumber(String value) {
+        if (value == null || value.isEmpty()) return value;
+        String digitsOnly = value.replaceAll("[^0-9]", "");
+        int totalDigits = digitsOnly.length();
+        if (totalDigits <= 4) return value;
+
+        char[] chars = value.toCharArray();
+        int digitIdx = 0;
+        for (int i = 0; i < chars.length; i++) {
+            if (Character.isDigit(chars[i])) {
+                digitIdx++;
+                // 4번째 자리부터 마지막 자리 직전까지 마스킹
+                if (digitIdx > 3 && digitIdx < totalDigits) {
+                    chars[i] = MASK;
+                }
+            }
+        }
+        return new String(chars);
+    }
+
+    /**
+     * 카드번호 마스킹: PCI-DSS 기준 7~12번째 숫자 자리 마스킹
+     * <pre>4518-4212-3456-1234 → 4518-42**-****-1234</pre>
+     */
+    public static String maskCardNumber(String value) {
+        if (value == null || value.isEmpty()) return value;
+        char[] chars = value.toCharArray();
+        int digitIdx = 0;
+        for (int i = 0; i < chars.length; i++) {
+            if (Character.isDigit(chars[i])) {
+                digitIdx++;
+                if (digitIdx >= 7 && digitIdx <= 12) {
+                    chars[i] = MASK;
+                }
+            }
+        }
+        return new String(chars);
+    }
+
+    /**
+     * 카드 유효기간 마스킹: 월/년 모두 마스킹
+     * <pre>12/25 → **&#47;**</pre>
+     */
+    public static String maskCardExpiry(String value) {
+        if (value == null || value.isEmpty()) return value;
+        return value.replaceAll("[0-9]", String.valueOf(MASK));
+    }
+
+    /**
+     * CVV 마스킹: 3자리 전체 마스킹
+     * <pre>123 → ***</pre>
+     */
+    public static String maskCvv(String value) {
+        if (value == null || value.isEmpty()) return value;
+        return stars(value.length());
+    }
+
+    // =========================================================================
+    // 인증정보
+    // =========================================================================
+
+    /**
+     * 비밀번호 마스킹: 전체 자리 마스킹
+     * <pre>password1234 → ************</pre>
+     */
+    public static String maskPassword(String value) {
+        if (value == null || value.isEmpty()) return value;
+        return stars(value.length());
+    }
+
+    // =========================================================================
+    // 신상정보
+    // =========================================================================
+
+    /**
+     * 전화번호/FAX 마스킹: 가운데 뒷 2자리, 뒷자리 뒷 2자리 마스킹
+     * 하이픈 없는 형식은 자릿수·접두사 기반으로 세그먼트를 분리한 뒤 마스킹하고 하이픈 없이 반환
+     * <pre>
+     *   064-1234-5678  → 064-12**-56**
+     *   06412345678    → 0641234**56**
+     *   01012345678    → 01012**56**
+     * </pre>
+     */
+    public static String maskPhoneNumber(String value) {
+        if (value == null || value.isEmpty()) return value;
+        boolean hasHyphen = value.contains("-");
+        String normalized = hasHyphen ? value : normalizePhoneNumber(value);
+        String[] parts = normalized.split("-");
+        if (parts.length == 3) {
+            String m0 = parts[0];
+            String m1 = maskSegmentTail(parts[1], 2);
+            String m2 = maskSegmentTail(parts[2], 2);
+            return hasHyphen ? m0 + "-" + m1 + "-" + m2 : m0 + m1 + m2;
+        }
+        return value;
+    }
+
+    /**
+     * 한국 전화번호(숫자만) → XXX-XXXX-XXXX 형식으로 정규화
+     * <pre>
+     *   02 + 7자리  → 02-XXX-XXXX
+     *   02 + 8자리  → 02-XXXX-XXXX
+     *   0XX + 7자리 → 0XX-XXX-XXXX
+     *   0XX + 8자리 → 0XX-XXXX-XXXX
+     * </pre>
+     */
+    private static String normalizePhoneNumber(String digits) {
+        int len = digits.length();
+        if (digits.startsWith("02")) {
+            if (len == 9)  return digits.substring(0, 2) + "-" + digits.substring(2, 5) + "-" + digits.substring(5);
+            if (len == 10) return digits.substring(0, 2) + "-" + digits.substring(2, 6) + "-" + digits.substring(6);
+        } else if (digits.startsWith("0")) {
+            if (len == 10) return digits.substring(0, 3) + "-" + digits.substring(3, 6) + "-" + digits.substring(6);
+            if (len == 11) return digits.substring(0, 3) + "-" + digits.substring(3, 7) + "-" + digits.substring(7);
+        }
+        return digits;
+    }
+
+    /**
+     * 휴대폰 번호 마스킹: 가운데 뒷 2자리, 뒷자리 뒷 2자리 마스킹
+     * <pre>010-1234-5678 → 010-12**-56**</pre>
+     */
+    public static String maskMobileNumber(String value) {
+        return maskPhoneNumber(value);
+    }
+
+    /**
+     * 이메일 마스킹: 앞 2자리와 @ 앞 2자리 마스킹
+     * <pre>aajjbacc@shinhan.com → **jjba**@shinhan.com</pre>
+     */
+    public static String maskEmail(String value) {
+        if (value == null || value.isEmpty() || !value.contains("@")) return value;
+        int atIdx = value.indexOf('@');
+        String local = value.substring(0, atIdx);
+        String domain = value.substring(atIdx);
+        if (local.length() <= 4) {
+            return stars(local.length()) + domain;
+        }
+        return stars(2) + local.substring(2, local.length() - 2) + stars(2) + domain;
+    }
+
+    /**
+     * 한글/한자 성명 마스킹
+     * <pre>
+     *   2자: 뒤 1자리 마스킹   홍동 → 홍*
+     *   3자: 가운데 1자리 마스킹  홍길동 → 홍*동
+     *   4자 이상: 앞뒤 1자 제외한 가운데 전체 마스킹  홍길순동 → 홍**동
+     * </pre>
+     */
+    public static String maskKoreanName(String value) {
+        if (value == null || value.isEmpty()) return value;
+        int len = value.length();
+        if (len == 1) return value;
+        if (len == 2) {
+            return String.valueOf(value.charAt(0)) + MASK;
+        }
+        if (len == 3) {
+            return String.valueOf(value.charAt(0)) + MASK + value.charAt(2);
+        }
+        // 4자 이상: 첫 자 + 가운데 전체 마스킹 + 마지막 자
+        return String.valueOf(value.charAt(0)) + stars(len - 2) + value.charAt(len - 1);
+    }
+
+    /**
+     * 영문 성명 마스킹: 성(last name)만 노출, 이름(first name)은 마스킹
+     * <pre>GILDONG HONG → ******* HONG</pre>
+     * (마지막 공백 구분 토큰이 성(last name)으로 간주)
+     */
+    public static String maskEnglishName(String value) {
+        if (value == null || value.isEmpty()) return value;
+        String[] parts = value.trim().split("\\s+");
+        if (parts.length == 1) return value;
+        StringBuilder sb = new StringBuilder();
+        for (int i = 0; i < parts.length - 1; i++) {
+            if (i > 0) sb.append(' ');
+            sb.append(stars(parts[i].length()));
+        }
+        sb.append(' ').append(parts[parts.length - 1]);
+        return sb.toString();
+    }
+
+    /**
+     * 지번주소 마스킹: 번지 이하 주소 마스킹 (String.length() 보존)
+     * <pre>
+     *   제주특별자치도 제주시 연동 123번지, 101동 202호  →  제주특별자치도 제주시 연동 ***번지, **** ****
+     * </pre>
+     */
+    public static String maskJibunAddress(String value) {
+        if (value == null || value.isEmpty()) return value;
+        // 번지 앞 숫자 자릿수 보존 마스킹
+        String result = maskDigitsBefore(value, "번지");
+        // 쉼표 이후 상세주소 마스킹 (공백 유지, 자릿수 보존)
+        int commaIdx = result.indexOf(',');
+        if (commaIdx >= 0) {
+            String after = result.substring(commaIdx + 1);
+            result = result.substring(0, commaIdx + 1) + after.replaceAll("[^\\s]", String.valueOf(MASK));
+        }
+        return result;
+    }
+
+    /**
+     * 도로명주소 마스킹: 도로명 번호 및 번지 이하 마스킹 (String.length() 보존)
+     * <pre>
+     *   제주특별자치도 제주시 은남2길 5, 101동 202호  →  제주특별자치도 제주시 은남*길 *, **** ****
+     * </pre>
+     */
+    public static String maskRoadAddress(String value) {
+        if (value == null || value.isEmpty()) return value;
+        // 도로명 번호 자릿수 보존 마스킹 (긴 suffix 먼저 처리)
+        String result = maskDigitsBefore(value, "대로");
+        result = maskDigitsBefore(result, "번길");
+        result = maskDigitsBefore(result, "길");
+        result = maskDigitsBefore(result, "로");
+        // 도로명 뒤 집 번호 자릿수 보존 마스킹
+        result = maskDigitsAfter(result, "대로");
+        result = maskDigitsAfter(result, "번길");
+        result = maskDigitsAfter(result, "길");
+        result = maskDigitsAfter(result, "로");
+        // 쉼표 이후 상세주소 마스킹 (공백 유지, 자릿수 보존)
+        int commaIdx = result.indexOf(',');
+        if (commaIdx >= 0) {
+            String after = result.substring(commaIdx + 1);
+            result = result.substring(0, commaIdx + 1) + after.replaceAll("[^\\s]", String.valueOf(MASK));
+        }
+        return result;
+    }
+
+    // =========================================================================
+    // 온라인 정보
+    // =========================================================================
+
+    /**
+     * IPv4 마스킹: 3번째 옥텟(17~24 비트) 마스킹
+     * <pre>100.200.123.45 → 100.200.***.45</pre>
+     */
+    public static String maskIpv4(String value) {
+        if (value == null || value.isEmpty()) return value;
+        String[] parts = value.split("\\.", -1);
+        if (parts.length != 4) return value;
+        return parts[0] + "." + parts[1] + "." + stars(3) + "." + parts[3];
+    }
+
+    /**
+     * IPv6 마스킹: 마지막 그룹(113~128 비트) 마스킹
+     * <pre>21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A → 21DA:00D3:0000:2F3B:02AA:00FF:FE28:****</pre>
+     */
+    public static String maskIpv6(String value) {
+        if (value == null || value.isEmpty()) return value;
+        int lastColon = value.lastIndexOf(':');
+        if (lastColon < 0) return value;
+        return value.substring(0, lastColon + 1) + stars(4);
+    }
+
+    /**
+     * IP 주소 마스킹: IPv4/IPv6 자동 판별, 쉼표 구분 다중 IP 지원
+     * <pre>
+     *   100.200.123.45  → 100.200.***.45
+     *   21DA:...FE28:9C5A  → 21DA:...FE28:****
+     *   192.168.1.1,10.0.0.1  → 192.168.***.1,10.0.***.1
+     * </pre>
+     */
+    public static String maskIpAddress(String value) {
+        if (value == null || value.isEmpty()) return value;
+        String[] ips = value.split(",");
+        StringBuilder sb = new StringBuilder();
+        for (int i = 0; i < ips.length; i++) {
+            if (i > 0) sb.append(',');
+            String ip = ips[i].trim();
+            if (ip.contains(":")) {
+                sb.append(maskIpv6(ip));
+            } else {
+                sb.append(maskIpv4(ip));
+            }
+        }
+        return sb.toString();
+    }
+
+    // =========================================================================
+    // private helpers
+    // =========================================================================
+
+    private static String stars(int count) {
+        if (count <= 0) return "";
+        char[] arr = new char[count];
+        Arrays.fill(arr, MASK);
+        return new String(arr);
+    }
+
+    private static String maskTailChars(String value, int count) {
+        if (value.length() <= count) return stars(value.length());
+        return value.substring(0, value.length() - count) + stars(count);
+    }
+
+    private static String maskSegmentTail(String segment, int count) {
+        if (segment.length() <= count) return stars(segment.length());
+        return segment.substring(0, segment.length() - count) + stars(count);
+    }
+
+    /** keyword 바로 앞에 연속된 숫자를 동일 자릿수의 '*'로 마스킹 */
+    private static String maskDigitsBefore(String value, String keyword) {
+        StringBuilder sb = new StringBuilder(value);
+        int from = 0;
+        while (true) {
+            int kIdx = sb.indexOf(keyword, from);
+            if (kIdx < 0) break;
+            int end = kIdx;
+            int start = end;
+            while (start > 0 && Character.isDigit(sb.charAt(start - 1))) {
+                start--;
+            }
+            for (int i = start; i < end; i++) {
+                sb.setCharAt(i, MASK);
+            }
+            from = kIdx + keyword.length();
+        }
+        return sb.toString();
+    }
+
+    /** keyword 바로 뒤 공백 이후의 연속된 숫자를 동일 자릿수의 '*'로 마스킹 */
+    private static String maskDigitsAfter(String value, String keyword) {
+        StringBuilder sb = new StringBuilder(value);
+        int from = 0;
+        while (true) {
+            int kIdx = sb.indexOf(keyword, from);
+            if (kIdx < 0) break;
+            int pos = kIdx + keyword.length();
+            while (pos < sb.length() && sb.charAt(pos) == ' ') pos++;
+            int start = pos;
+            while (pos < sb.length() && Character.isDigit(sb.charAt(pos))) pos++;
+            for (int i = start; i < pos; i++) {
+                sb.setCharAt(i, MASK);
+            }
+            from = kIdx + keyword.length();
+        }
+        return sb.toString();
+    }
+}

src/main/java/com/eactive/eai/common/util/TxFileLogger.java

@@ -0,0 +1,15 @@
+package com.eactive.eai.common.util;
+
+import java.util.Properties;
+
+public class TxFileLogger {
+
+	public static void logTxFile(Properties transactionProp, String message, String prefix) {
+		Logger siftLogger = Logger.getLogger(Logger.LOGGER_SIFT);
+		if (siftLogger.isInfoEnabled()) {
+			siftLogger.info(prefix + message);
+			if (siftLogger.isDebugEnabled())
+				siftLogger.debug(CommonLib.getDumpMessage(message));
+		}
+	}
+}

src/main/java/com/eactive/eai/inbound/processor/RequestProcessor.java

@@ -129,8 +129,8 @@ public class RequestProcessor extends RequestProcessorSupport {
 		String testMasterYn = adptGrpVO.getTestMasterYn();
 
 		// UUID 생성 : UUID에서 - 없는 32자리
-		String uuid = "";
-		uuid = UUIDGenerator.getUUID().toString().replaceAll("-", "");
+		String uuid = prop.getProperty(TransactionContextKeys.TRANSACTION_UUID);
+		uuid = uuid == null ? UUIDGenerator.getUUID().toString().replaceAll("-", "") : uuid;
 		// UUID 생성 : UUID = server구분4자리 + UUID
 		/*
 		String uuid = "";

src/main/java/com/eactive/eai/outbound/DefaultProcess.java

@@ -682,11 +682,10 @@ public abstract class DefaultProcess extends Process {
 			AdapterVO inboundAdapterVO = AdapterManager.getInstance().getAdapterVO(inboudnAdapterGroupName, inboudnAdapterName);
 			String errorResponseHandlerClass = AdapterPropManager.getInstance().getProperty(inboundAdapterVO.getPropGroupName(), "ERR_MSG_HANDLER");
 			if(StringUtils.isBlank(errorResponseHandlerClass)) {
-				this.resEaiMsg.setRspErrCd("RECEAIINA001", false);
 				String errorCode = mapper.getErrorCode(resStandardMessage);
 				String errorMsg = StringUtils.trim(mapper.getErrorMsg(resStandardMessage));
-				String errorDesc = StringUtils.trim(resStandardMessage.findItemValue("Message.Msg_Body.OUTPUT_MSG_DESC"));
-				this.resEaiMsg.setRspErrMsg(String.format("[%s] %s (%s)", errorCode, errorMsg, errorDesc));
+				String errorDesc = StringUtils.trim(resStandardMessage.findItemValue("MSG.MAIN_MSG.outp_msg_desc"));
+				this.resEaiMsg.setRspErr("RECEAIINA001", String.format("[%s] %s (%s)", errorCode, errorMsg, errorDesc));
 				return;
 			}
 			
@@ -698,6 +697,8 @@ public abstract class DefaultProcess extends Process {
 			if(responseObj != null) {
 				resStandardMessage.setBizData(responseObj, inboundAdapterGroupVO.getMessageEncode());
 			}
+			
+			this.resEaiMsg.setRspErrCd(EAIMessageKeys.BWK_FAILMSG_CODE, false);
 		}
 	}
 

src/main/java/com/eactive/eai/outbound/HTTPProcess.java

@@ -4,11 +4,17 @@ import java.net.SocketTimeoutException;
 import java.util.Properties;
 
 import com.eactive.eai.common.TransactionContextKeys;
+import com.eactive.eai.common.circuitBreaker.CircuitBreakerManager;
+import com.eactive.eai.common.circuitBreaker.type.TypedCircuitBreakerManager;
 import com.eactive.eai.util.PropertiesUtil;
 import com.fasterxml.jackson.annotation.JsonInclude;
 import com.fasterxml.jackson.core.JsonProcessingException;
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+
+import io.github.resilience4j.circuitbreaker.CircuitBreaker;
+
 import org.apache.commons.lang3.StringUtils;
 
 import com.eactive.eai.adapter.AdapterGroupVO;
@@ -99,7 +105,32 @@ public class HTTPProcess extends DefaultProcess {
 		this.timeout = iTimeoutValue * 1000;
 		this.tempProp.put(INTERFACE_TIME_OUT, "" + this.timeout);
 		try {
-			this.resObject = HttpSender.callService(this.adapterGroupName, this.outboundProp, this.reqObject, this.tempProp);
+			// API별 이용
+			String apiId = reqEaiMsg.getEAISvcCd();
+			CircuitBreaker circuitBreaker = TypedCircuitBreakerManager.getInstance().getCircuitBreaker(apiId);
+			
+			// 디폴트 이용
+			if(circuitBreaker == null) {
+				String circuitBreakerUseYn = PropManager.getInstance().getProperty("CircuitBreaker", "useYn");
+				if ("Y".equals(circuitBreakerUseYn))
+					circuitBreaker = CircuitBreakerManager.getInstance().getCircuitBreaker(apiId);
+			}
+			
+			if (circuitBreaker != null) {
+				// ObjectMapper 인스턴스 생성
+				ObjectMapper objectMapper = new ObjectMapper();
+	
+				// 서킷 브레이커의 메트릭 정보와 상태 정보를 직접 Node로 변환
+				ObjectNode combinedNode = objectMapper.createObjectNode();
+				combinedNode.put("state", circuitBreaker.getState().toString());
+				combinedNode.set("metrics", objectMapper.valueToTree(circuitBreaker.getMetrics()));
+	
+				logger.info("CircuitBreaker state " + combinedNode.toString());
+				this.resObject = circuitBreaker.executeCallable(() -> HttpSender
+					.callService(this.adapterGroupName, this.outboundProp, this.reqObject, this.tempProp));
+			} else {
+				this.resObject = HttpSender.callService(this.adapterGroupName, this.outboundProp, this.reqObject, this.tempProp);
+			}
 			// 응답코드에 대한 처리
 			this.resEaiMsg = setResponseForOutbound(this.resEaiMsg);
 			if (!com.eactive.eai.adapter.Keys.IF_STANDARD.equals(this.adptrMsgPtrnCd)) {

src/main/java/com/eactive/eai/util/JsonPathUtil.java

@@ -10,34 +10,55 @@ import com.fasterxml.jackson.databind.node.ObjectNode;
 // 해당 필드에 대한 get/set 을 수행
 public class JsonPathUtil {
 	private JsonPathUtil() {
-		
+
 	}
-	
+
 	private static final ObjectMapper objectMapper = new ObjectMapper();
 
+    // ---------------------------------------------------------------
+    // JsonNode 기반 단일 파싱 API — 연속 get/set 시 파싱 횟수 절감
+    // ---------------------------------------------------------------
+
+    /** JSON 문자열을 JsonNode 트리로 파싱. */
+    public static JsonNode toTree(String json) throws Exception {
+        return objectMapper.readTree(json);
+    }
+
+    /** 이미 파싱된 트리에서 경로의 값을 추출. */
+    public static String getAt(JsonNode root, String path) {
+        JsonNode node = getNodeAtPath(root, path);
+        return node != null ? node.asText() : null;
+    }
+
+    /** 이미 파싱된 트리의 경로에 값을 설정 (in-place). */
+    public static void setAt(JsonNode root, String path, String value) {
+        JsonNode parent = getParentNode(root, getParentPath(path));
+        if (parent == null) return;
+        String key = getFieldName(path);
+        if (parent.isArray()) {
+            ((ArrayNode) parent).set(Integer.parseInt(key), objectMapper.convertValue(value, JsonNode.class));
+        } else if (parent.isObject()) {
+            ((ObjectNode) parent).put(key, value);
+        }
+    }
+
+    /** JsonNode 트리를 JSON 문자열로 직렬화. */
+    public static String fromTree(JsonNode root) throws Exception {
+        return objectMapper.writeValueAsString(root);
+    }
+
+    // ---------------------------------------------------------------
+    // 문자열 기반 API (내부적으로 위 메서드에 위임)
+    // ---------------------------------------------------------------
+
     // 특정 경로의 값을 설정하는 함수
     public static String setValueAtPath(String jsonString, String path, String newValue, boolean isPretty) {
         try {
-            // JSON 문자열을 JsonNode 객체로 파싱
             JsonNode rootNode = objectMapper.readTree(jsonString);
-
-            // 경로에 해당하는 부모 노드를 가져옴
-            JsonNode parentNode = getParentNode(rootNode, getParentPath(path));
-
-            // 경로의 마지막 노드 이름 또는 배열 인덱스 추출
-            String fieldNameOrIndex = getFieldName(path);
-
-            // 배열 또는 객체에서 값을 설정
-            if (parentNode.isArray()) {
-                ((ArrayNode) parentNode).set(Integer.parseInt(fieldNameOrIndex), objectMapper.convertValue(newValue, JsonNode.class));
-            } else if (parentNode.isObject()) {
-                ((ObjectNode) parentNode).put(fieldNameOrIndex, newValue);
-            }
-
-            // 수정된 JSON 문자열 반환
+            setAt(rootNode, path, newValue);
             if(isPretty)
             	return objectMapper.writerWithDefaultPrettyPrinter().writeValueAsString(rootNode);
-            else 
+            else
             	return objectMapper.writeValueAsString(rootNode);
         } catch (Exception e) {
             e.printStackTrace();
@@ -48,13 +69,7 @@ public class JsonPathUtil {
     // 특정 경로의 값을 가져오는 함수
     public static String getValueAtPath(String jsonString, String path) {
         try {
-            // JSON 문자열을 JsonNode 객체로 파싱
-            JsonNode rootNode = objectMapper.readTree(jsonString);
-
-            // 경로에 해당하는 노드의 값을 반환
-            JsonNode resultNode = getNodeAtPath(rootNode, path);
-            return resultNode != null ? resultNode.asText() : null;
-
+            return getAt(objectMapper.readTree(jsonString), path);
         } catch (Exception e) {
             e.printStackTrace();
             return null;
@@ -101,6 +116,71 @@ public class JsonPathUtil {
         return currentNode;
     }
 
+    /**
+     * 이미 파싱된 bodyNode에서 removeFromPath 필드를 제거하고 mergeJson을 병합.
+     * body의 재파싱 없이 호출 가능하여 파싱 횟수를 1회 절감.
+     *
+     * body와 mergeJson이 모두 JSON 객체인 경우에만 병합을 수행한다.
+     * 어느 한쪽이 JSON 객체가 아니면 mergeJson을 그대로 반환한다 (전체 교체 fallback).
+     *
+     * @param bodyNode       이미 파싱된 원본 JsonNode
+     * @param removeFromPath 제거할 필드의 경로 (예: /encryptedData)
+     * @param mergeJson      병합할 JSON 문자열
+     * @return 병합된 JSON 문자열, 병합 불가 시 mergeJson 그대로 반환
+     */
+    public static String mergeAtRoot(JsonNode bodyNode, String removeFromPath, String mergeJson) {
+        try {
+            JsonNode mergeNode = objectMapper.readTree(mergeJson);
+
+            if (!bodyNode.isObject() || !mergeNode.isObject()) {
+                return mergeJson;
+            }
+
+            ObjectNode result = (ObjectNode) bodyNode.deepCopy();
+
+            // removeFromPath 필드 제거
+            int lastSlash = removeFromPath.lastIndexOf('/');
+            String fieldName = removeFromPath.substring(lastSlash + 1);
+            if (lastSlash == 0) {
+                result.remove(fieldName);
+            } else {
+                JsonNode parent = getNodeAtPath(result, removeFromPath.substring(0, lastSlash));
+                if (parent instanceof ObjectNode) {
+                    ((ObjectNode) parent).remove(fieldName);
+                }
+            }
+
+            // mergeJson 필드를 body에 병합 (기존 필드 덮어쓰기)
+            result.setAll((ObjectNode) mergeNode);
+            return objectMapper.writeValueAsString(result);
+        } catch (Exception e) {
+            return mergeJson;
+        }
+    }
+
+    /**
+     * body에서 removeFromPath 필드를 제거한 뒤, mergeJson의 필드를 body에 병합하여 반환한다.
+     * (문자열 기반 overload — 내부적으로 body를 1회 파싱하여 위 메서드에 위임)
+     *
+     * 사용 예 (toPath="/" 복호화):
+     *   body        = {"encryptedData":"...","requestId":"REQ001"}
+     *   removeFrom  = /encryptedData
+     *   mergeJson   = {"userId":"U001","name":"test"}
+     *   결과        = {"requestId":"REQ001","userId":"U001","name":"test"}
+     *
+     * @param body           원본 JSON 문자열
+     * @param removeFromPath 제거할 필드의 경로 (예: /encryptedData)
+     * @param mergeJson      병합할 JSON 문자열
+     * @return 병합된 JSON 문자열, 병합 불가 시 mergeJson 그대로 반환
+     */
+    public static String mergeAtRoot(String body, String removeFromPath, String mergeJson) {
+        try {
+            return mergeAtRoot(objectMapper.readTree(body), removeFromPath, mergeJson);
+        } catch (Exception e) {
+            return mergeJson;
+        }
+    }
+
     public static void main(String[] args) {
         String jsonString = "{ \"person\": { \"name\": \"John\", \"age\": 30, \"groups\": [ { \"id\": 1, \"name\": \"Group A\" }, { \"id\": 2, \"name\": \"Group B\" }, { \"id\": 3, \"name\": \"Group C\" } ] } }";
 

src/test/java/com/eactive/eai/adapter/http/client/impl/filter/OutCryptoFilterTest.java

@@ -0,0 +1,268 @@
+package com.eactive.eai.adapter.http.client.impl.filter;
+
+import static org.junit.jupiter.api.Assertions.*;
+import static org.mockito.ArgumentMatchers.*;
+import static org.mockito.Mockito.*;
+
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+import java.util.Properties;
+
+import org.junit.jupiter.api.AfterAll;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.MethodOrderer;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.TestMethodOrder;
+import org.springframework.beans.factory.support.BeanDefinitionBuilder;
+import org.springframework.context.support.GenericApplicationContext;
+
+import com.eactive.eai.adapter.http.filter.AbstractCryptoFilter;
+import com.eactive.eai.common.security.CryptoModuleService;
+import com.eactive.eai.common.util.ApplicationContextProvider;
+
+/**
+ * OutCryptoFilter 단위 테스트.
+ *
+ * doPreFilter  = 외부로 보내는 요청 암호화 (InCryptoFilter와 반대 방향)
+ * doPostFilter = 외부에서 받은 응답 복호화
+ */
+@TestMethodOrder(MethodOrderer.DisplayName.class)
+class OutCryptoFilterTest {
+
+    private static final String MODULE     = "TEST_MODULE";
+    private static final String PLAIN_STR  = "plain-request-body";
+    private static final byte[] PLAIN      = PLAIN_STR.getBytes(StandardCharsets.UTF_8);
+    private static final byte[] CIPHER     = new byte[]{0x10, 0x20, 0x30, 0x40, 0x50, 0x60};
+    private static final String CIPHER_B64 = Base64.getEncoder().encodeToString(CIPHER);
+
+    private static GenericApplicationContext ctx;
+    private static CryptoModuleService       mockService;
+    private static OutCryptoFilter           filter;
+
+    private Properties tempProp;
+
+    @BeforeAll
+    static void setUpClass() throws Exception {
+        mockService = mock(CryptoModuleService.class);
+
+        ctx = new GenericApplicationContext();
+        ctx.getBeanFactory().registerSingleton("cryptoModuleService", mockService);
+        ctx.registerBeanDefinition("applicationContextProvider",
+                BeanDefinitionBuilder.genericBeanDefinition(ApplicationContextProvider.class)
+                        .getBeanDefinition());
+        ctx.refresh();
+
+        filter = new OutCryptoFilter();
+    }
+
+    @AfterAll
+    static void tearDownClass() {
+        if (ctx != null) ctx.close();
+    }
+
+    @BeforeEach
+    void setUp() throws Exception {
+        reset(mockService);
+        tempProp = new Properties();
+
+        when(mockService.decrypt(anyString(), anyMap(), any(), any(byte[].class))).thenReturn(PLAIN);
+        when(mockService.encrypt(anyString(), anyMap(), any(), any(byte[].class))).thenReturn(CIPHER);
+    }
+
+    // =========================================================================
+    // 1. buildAad
+    // =========================================================================
+
+    @Test
+    @DisplayName("1-1. buildAad — CRYPTO_AAD_PROP 미설정 → null")
+    void testBuildAad_noProp_returnsNull() {
+        assertNull(filter.buildAad(new Properties(), tempProp));
+    }
+
+    @Test
+    @DisplayName("1-2. buildAad — CRYPTO_AAD_PROP 설정, tempProp에 값 없음 → null")
+    void testBuildAad_propSet_noTempValue_returnsNull() {
+        Properties prop = new Properties();
+        prop.setProperty(OutCryptoFilter.PROP_AAD_PROP, "aadKey");
+
+        assertNull(filter.buildAad(prop, tempProp));
+    }
+
+    @Test
+    @DisplayName("1-3. buildAad — CRYPTO_AAD_PROP 설정, tempProp에 값 있음 → UTF-8 바이트 반환")
+    void testBuildAad_propSet_tempValuePresent_returnsByte() {
+        String aadVal = "aad-value-xyz";
+        Properties prop = new Properties();
+        prop.setProperty(OutCryptoFilter.PROP_AAD_PROP, "aadKey");
+        tempProp.setProperty("aadKey", aadVal);
+
+        assertArrayEquals(aadVal.getBytes(StandardCharsets.UTF_8), filter.buildAad(prop, tempProp));
+    }
+
+    // =========================================================================
+    // 2. doPreFilter — 암호화 (요청을 외부로 보내기 전)
+    // =========================================================================
+
+    @Test
+    @DisplayName("2-1. BODY scope — 평문 암호화 → Base64 반환")
+    void testPreFilter_body_encrypt() throws Exception {
+        Object result = filter.doPreFilter("g", "a", bodyEncryptProps(), PLAIN_STR, tempProp);
+
+        assertEquals(CIPHER_B64, result);
+        verify(mockService).encrypt(eq(MODULE), anyMap(), isNull(), eq(PLAIN));
+    }
+
+    @Test
+    @DisplayName("2-2. FIELD scope, fromPath='/' — body 전체 암호화 → toPath 필드명으로 래핑")
+    void testPreFilter_field_encryptFromRoot() throws Exception {
+        String body = "{\"userId\":\"U001\"}";
+        Properties prop = fieldEncryptProps("/", "/encryptedData");
+
+        Object result = filter.doPreFilter("g", "a", prop, body, tempProp);
+
+        assertEquals("{\"encryptedData\":\"" + CIPHER_B64 + "\"}", result);
+    }
+
+    @Test
+    @DisplayName("2-3. FIELD scope — fromPath 평문 암호화 → toPath Base64 반영")
+    void testPreFilter_field_encryptSpecificPath() throws Exception {
+        String body = "{\"data\":\"secret\",\"enc\":\"\"}";
+        Properties prop = fieldEncryptProps("/data", "/enc");
+
+        Object result = filter.doPreFilter("g", "a", prop, body, tempProp);
+
+        assertTrue(result.toString().contains("\"enc\":\"" + CIPHER_B64 + "\""),
+                "toPath에 Base64 암호문이 반영되어야 한다");
+    }
+
+    @Test
+    @DisplayName("2-4. FIELD scope — fromPath 값 없음 → body 그대로 반환")
+    void testPreFilter_field_missingFromPath_passThrough() throws Exception {
+        String body = "{\"other\":\"value\"}";
+        Properties prop = fieldEncryptProps("/data", "/enc");
+
+        Object result = filter.doPreFilter("g", "a", prop, body, tempProp);
+
+        assertEquals(body, result);
+        verifyNoInteractions(mockService);
+    }
+
+    @Test
+    @DisplayName("2-5. CRYPTO_MODULE_NAME 누락 — IllegalArgumentException")
+    void testPreFilter_missingModuleName_throwsException() {
+        Properties prop = new Properties();
+        prop.setProperty(AbstractCryptoFilter.PROP_SCOPE, "BODY");
+
+        assertThrows(IllegalArgumentException.class,
+                () -> filter.doPreFilter("g", "a", prop, PLAIN_STR, tempProp));
+    }
+
+    // =========================================================================
+    // 3. doPostFilter — 복호화 (외부로부터 응답 받은 후)
+    // =========================================================================
+
+    @Test
+    @DisplayName("3-1. BODY scope — Base64 암호문 복호화 → 평문 반환")
+    void testPostFilter_body_decrypt() throws Exception {
+        Object result = filter.doPostFilter("g", "a", bodyDecryptProps(), CIPHER_B64, tempProp);
+
+        assertEquals(PLAIN_STR, result);
+        verify(mockService).decrypt(eq(MODULE), anyMap(), isNull(), eq(CIPHER));
+    }
+
+    @Test
+    @DisplayName("3-2. FIELD scope — fromPath 복호화 → toPath 반영")
+    void testPostFilter_field_decryptToPath() throws Exception {
+        String body = "{\"enc\":\"" + CIPHER_B64 + "\",\"result\":\"\"}";
+        Properties prop = fieldDecryptProps("/enc", "/result");
+
+        Object result = filter.doPostFilter("g", "a", prop, body, tempProp);
+
+        assertTrue(result.toString().contains("\"result\":\"" + PLAIN_STR + "\""),
+                "toPath에 복호화된 값이 반영되어야 한다");
+    }
+
+    @Test
+    @DisplayName("3-3. FIELD scope, toPath='/' — 복호화된 텍스트로 body 전체 교체")
+    void testPostFilter_field_decryptToRoot() throws Exception {
+        String body = "{\"enc\":\"" + CIPHER_B64 + "\"}";
+        Properties prop = fieldDecryptProps("/enc", "/");
+
+        Object result = filter.doPostFilter("g", "a", prop, body, tempProp);
+
+        assertEquals(PLAIN_STR, result);
+    }
+
+    @Test
+    @DisplayName("3-4. FIELD scope — fromPath 값 없음 → body 그대로 반환")
+    void testPostFilter_field_missingFromPath_passThrough() throws Exception {
+        String body = "{\"other\":\"value\"}";
+        Properties prop = fieldDecryptProps("/enc", "/result");
+
+        Object result = filter.doPostFilter("g", "a", prop, body, tempProp);
+
+        assertEquals(body, result);
+        verifyNoInteractions(mockService);
+    }
+
+    // =========================================================================
+    // 4. AAD (tempProp 경유)
+    // =========================================================================
+
+    @Test
+    @DisplayName("4-1. doPreFilter BODY — CRYPTO_AAD_PROP 설정 시 tempProp 값을 AAD로 전달")
+    void testPreFilter_body_aadFromTempProp() throws Exception {
+        String aadVal = "out-aad-value";
+        Properties prop = bodyEncryptProps();
+        prop.setProperty(OutCryptoFilter.PROP_AAD_PROP, "myAadKey");
+        tempProp.setProperty("myAadKey", aadVal);
+
+        filter.doPreFilter("g", "a", prop, PLAIN_STR, tempProp);
+
+        verify(mockService).encrypt(eq(MODULE), anyMap(),
+                eq(aadVal.getBytes(StandardCharsets.UTF_8)), any(byte[].class));
+    }
+
+    @Test
+    @DisplayName("4-2. doPostFilter BODY — CRYPTO_AAD_PROP 미설정 시 aad=null로 전달")
+    void testPostFilter_body_noAadProp_nullAad() throws Exception {
+        filter.doPostFilter("g", "a", bodyDecryptProps(), CIPHER_B64, tempProp);
+
+        verify(mockService).decrypt(eq(MODULE), anyMap(), isNull(), any(byte[].class));
+    }
+
+    // =========================================================================
+    // 헬퍼
+    // =========================================================================
+
+    private Properties bodyEncryptProps() {
+        Properties p = new Properties();
+        p.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MODULE);
+        p.setProperty(AbstractCryptoFilter.PROP_SCOPE, "BODY");
+        return p;
+    }
+
+    private Properties bodyDecryptProps() {
+        return bodyEncryptProps();
+    }
+
+    private Properties fieldEncryptProps(String fromPath, String toPath) {
+        Properties p = new Properties();
+        p.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MODULE);
+        p.setProperty(AbstractCryptoFilter.PROP_SCOPE, "FIELD");
+        p.setProperty(AbstractCryptoFilter.PROP_ENC_FROM_PATH, fromPath);
+        p.setProperty(AbstractCryptoFilter.PROP_ENC_TO_PATH, toPath);
+        return p;
+    }
+
+    private Properties fieldDecryptProps(String fromPath, String toPath) {
+        Properties p = new Properties();
+        p.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MODULE);
+        p.setProperty(AbstractCryptoFilter.PROP_SCOPE, "FIELD");
+        p.setProperty(AbstractCryptoFilter.PROP_DEC_FROM_PATH, fromPath);
+        p.setProperty(AbstractCryptoFilter.PROP_DEC_TO_PATH, toPath);
+        return p;
+    }
+}

src/test/java/com/eactive/eai/adapter/http/dynamic/filter/CryptoFilterHsmIntegrationTest.java

@@ -34,6 +34,8 @@ import org.junit.jupiter.api.TestMethodOrder;
 import org.springframework.beans.factory.support.BeanDefinitionBuilder;
 import org.springframework.context.support.GenericApplicationContext;
 
+import com.eactive.eai.adapter.http.dynamic.filter.InCryptoFilter;
+import com.eactive.eai.adapter.http.filter.AbstractCryptoFilter;
 import com.eactive.eai.common.hsm.HsmCryptoService;
 import com.eactive.eai.common.hsm.HsmManager;
 import com.eactive.eai.common.property.PropManager;
@@ -51,14 +53,14 @@ import com.eactive.eai.data.entity.onl.security.CryptoModuleConfig;
  * CryptoFilter HSM 연동 통합 테스트 (SoftHSM2 / SunPKCS11)
  *
  * SoftHSM2에서 MASTER_KEY를 조회하여 키를 도출한 뒤
- * BaseCryptoFilter / CryptoFilter 의 암복호화 전체 흐름을 검증한다.
+ * InCryptoFilter 의 암복호화 전체 흐름을 검증한다.
  *
  * 사전 조건:
  *   C:\SoftHSM2 에 SoftHSM2 설치 (미설치 시 자동 건너뜀)
  *   MASTER_KEY alias는 없으면 자동 생성됨
  *
  * 검증 전략:
- *   HSM → 키 도출 → CryptoModuleExtension → CryptoFilter doPostFilter(암호화) → doPreFilter(복호화) → 원문 일치
+ *   HSM → 키 도출 → CryptoModuleExtension → InCryptoFilter doPostFilter(암호화) → doPreFilter(복호화) → 원문 일치
  */
 @TestMethodOrder(MethodOrderer.DisplayName.class)
 public class CryptoFilterHsmIntegrationTest {
@@ -94,7 +96,7 @@ public class CryptoFilterHsmIntegrationTest {
     // 내부 클래스: runtimeContext를 고정값으로 반환하는 필터
     // -------------------------------------------------------------------------
 
-    static class ContextAwareCryptoFilter extends CryptoFilter {
+    static class ContextAwareCryptoFilter extends InCryptoFilter {
         private final String key;
         private final String value;
 
@@ -206,17 +208,17 @@ public class CryptoFilterHsmIntegrationTest {
     }
 
     // =========================================================================
-    // 1. HsmKeyDerivationStrategy — HSM 마스터키 직접 사용 (BaseCryptoFilter)
+    // 1. HsmKeyDerivationStrategy — HSM 마스터키 직접 사용 (InCryptoFilter)
     // =========================================================================
 
     @Test
     @DisplayName("1-1. FIELD/GCM HsmKey — doPostFilter 암호화 → doPreFilter 복호화 라운드트립")
     void testHsmGcm_field_roundTrip() throws Exception {
-        BaseCryptoFilter filter   = new BaseCryptoFilter();
+        InCryptoFilter filter   = new InCryptoFilter();
         String           original = "{\"acno\":\"1234567890\",\"amount\":\"100000\"}";
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
         // SCOPE 기본값 FIELD, 경로 기본값 사용
 
         // 암호화: body 전체 → /encrypted_data 필드
@@ -233,12 +235,12 @@ public class CryptoFilterHsmIntegrationTest {
     @Test
     @DisplayName("1-2. BODY/GCM HsmKey — doPostFilter 암호화 → doPreFilter 복호화 라운드트립")
     void testHsmGcm_body_roundTrip() throws Exception {
-        BaseCryptoFilter filter   = new BaseCryptoFilter();
+        InCryptoFilter filter   = new InCryptoFilter();
         String           original = "{\"acno\":\"1234567890\",\"amount\":\"100000\"}";
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
-        prop.setProperty(CryptoFilter.PROP_SCOPE, "BODY");
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_SCOPE, "BODY");
 
         // 암호화: body 전체 → Base64 암호문
         String encrypted = (String) filter.doPostFilter("G", "A", original, prop, mockReq, mockRes);
@@ -254,15 +256,15 @@ public class CryptoFilterHsmIntegrationTest {
     @Test
     @DisplayName("1-3. FIELD/GCM HsmKey + AAD 헤더 — 동일 요청 ID로 암복호화 성공")
     void testHsmGcm_field_withAad_success() throws Exception {
-        BaseCryptoFilter filter    = new BaseCryptoFilter();
+        InCryptoFilter filter    = new InCryptoFilter();
         String           original  = "{\"amount\":\"500000\"}";
         String           requestId = "REQ-20240101-001";
 
         when(mockReq.getHeader("X-Request-Id")).thenReturn(requestId);
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
-        prop.setProperty(CryptoFilter.PROP_AAD_HEADER,  "X-Request-Id");
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_AAD_HEADER,  "X-Request-Id");
 
         String encrypted = (String) filter.doPostFilter("G", "A", original, prop, mockReq, mockRes);
         String decrypted = (String) filter.doPreFilter( "G", "A", encrypted, prop, mockReq, mockRes);
@@ -273,7 +275,7 @@ public class CryptoFilterHsmIntegrationTest {
     @Test
     @DisplayName("1-4. FIELD/GCM HsmKey + AAD 헤더 — 다른 요청 ID로 복호화 시 GCM 인증 실패")
     void testHsmGcm_field_withAad_wrongAad_fails() throws Exception {
-        BaseCryptoFilter filter    = new BaseCryptoFilter();
+        InCryptoFilter filter    = new InCryptoFilter();
         String           original  = "{\"amount\":\"500000\"}";
 
         // 암호화 시 요청 ID
@@ -285,8 +287,8 @@ public class CryptoFilterHsmIntegrationTest {
         when(decReq.getHeader("X-Request-Id")).thenReturn("REQ-WRONG");
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
-        prop.setProperty(CryptoFilter.PROP_AAD_HEADER,  "X-Request-Id");
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_HSM_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_AAD_HEADER,  "X-Request-Id");
 
         String encrypted = (String) filter.doPostFilter("G", "A", original, prop, encReq, mockRes);
 
@@ -303,11 +305,11 @@ public class CryptoFilterHsmIntegrationTest {
     @Test
     @DisplayName("2-1. FIELD/GCM ContextSha256 — 동일 컨텍스트로 암복호화 라운드트립")
     void testCtxSha256Gcm_field_roundTrip() throws Exception {
-        CryptoFilter filter   = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_A);
+        InCryptoFilter filter   = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_A);
         String       original = "{\"accNo\":\"0011234567890\",\"amount\":\"50000\"}";
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_CTX_SHA_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_CTX_SHA_GCM);
 
         String encrypted = (String) filter.doPostFilter("G", "A", original, prop, mockReq, mockRes);
         System.out.println("[2-1] encrypted: " + encrypted);
@@ -321,12 +323,12 @@ public class CryptoFilterHsmIntegrationTest {
     @Test
     @DisplayName("2-2. FIELD/GCM ContextSha256 — 암호화와 다른 컨텍스트로 복호화 시 GCM 인증 실패")
     void testCtxSha256Gcm_differentContext_throwsException() throws Exception {
-        CryptoFilter encFilter = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_A);
-        CryptoFilter decFilter = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_B);
+        InCryptoFilter encFilter = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_A);
+        InCryptoFilter decFilter = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_B);
         String       original  = "{\"data\":\"sensitive\"}";
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_CTX_SHA_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_CTX_SHA_GCM);
 
         String encrypted = (String) encFilter.doPostFilter("G", "A", original, prop, mockReq, mockRes);
 
@@ -339,13 +341,13 @@ public class CryptoFilterHsmIntegrationTest {
     @Test
     @DisplayName("2-3. FIELD/GCM ContextSha256 — 컨텍스트별 독립 암복호화 (GROUP-A, GROUP-B 각각 성공)")
     void testCtxSha256Gcm_perGroupRoundTrip() throws Exception {
-        CryptoFilter filterA  = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_A);
-        CryptoFilter filterB  = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_B);
+        InCryptoFilter filterA  = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_A);
+        InCryptoFilter filterB  = new ContextAwareCryptoFilter(CTX_KEY, CTX_VAL_B);
         String       plainA   = "{\"group\":\"A\",\"amount\":\"1000\"}";
         String       plainB   = "{\"group\":\"B\",\"amount\":\"2000\"}";
 
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_MODULE_NAME, MOD_CTX_SHA_GCM);
+        prop.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MOD_CTX_SHA_GCM);
 
         String encA = (String) filterA.doPostFilter("G", "A", plainA, prop, mockReq, mockRes);
         String encB = (String) filterB.doPostFilter("G", "B", plainB, prop, mockReq, mockRes);

src/test/java/com/eactive/eai/adapter/http/dynamic/filter/InCryptoFilterTest.java

@@ -22,15 +22,16 @@ import org.junit.jupiter.api.TestMethodOrder;
 import org.springframework.beans.factory.support.BeanDefinitionBuilder;
 import org.springframework.context.support.GenericApplicationContext;
 
+import com.eactive.eai.adapter.http.filter.AbstractCryptoFilter;
 import com.eactive.eai.common.security.CryptoModuleService;
 import com.eactive.eai.common.util.ApplicationContextProvider;
 
 /**
- * BaseCryptoFilter / CryptoFilter 단위 테스트.
+ * InCryptoFilter / AbstractCryptoFilter 단위 테스트.
  * CryptoModuleService는 Mock으로 대체하여 필터 로직(Base64, JSON 경로, 프로퍼티 파싱)만 검증한다.
  */
 @TestMethodOrder(MethodOrderer.DisplayName.class)
-class BaseCryptoFilterTest {
+class InCryptoFilterTest {
 
     private static final String MODULE     = "TEST_MODULE";
     private static final String PLAIN_STR  = "decrypted-plain-text";
@@ -40,7 +41,7 @@ class BaseCryptoFilterTest {
 
     private static GenericApplicationContext ctx;
     private static CryptoModuleService       mockService;
-    private static BaseCryptoFilter          filter;
+    private static InCryptoFilter            filter;
 
     private HttpServletRequest  mockRequest;
     private HttpServletResponse mockResponse;
@@ -56,7 +57,7 @@ class BaseCryptoFilterTest {
                         .getBeanDefinition());
         ctx.refresh();
 
-        filter = new BaseCryptoFilter();
+        filter = new InCryptoFilter();
     }
 
     @AfterAll
@@ -81,7 +82,7 @@ class BaseCryptoFilterTest {
     @Test
     @DisplayName("1-1. buildRuntimeContext — 항상 빈 Map 반환")
     void testBuildRuntimeContext_returnsEmptyMap() {
-    	Map<String, String> result = filter.buildRuntimeContext(new Properties(), mockRequest);
+        Map<String, String> result = filter.buildRuntimeContext(new Properties(), mockRequest);
 
         assertNotNull(result);
         assertTrue(result.isEmpty());
@@ -101,7 +102,7 @@ class BaseCryptoFilterTest {
     @DisplayName("2-2. buildAad — 헤더명 설정, 헤더값 없음 → null")
     void testBuildAad_headerNameSet_noValue_returnsNull() {
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_AAD_HEADER, "X-Api-Request-Id");
+        prop.setProperty(AbstractCryptoFilter.PROP_AAD_HEADER, "X-Api-Request-Id");
         when(mockRequest.getHeader("X-Api-Request-Id")).thenReturn(null);
 
         assertNull(filter.buildAad(prop, mockRequest));
@@ -112,7 +113,7 @@ class BaseCryptoFilterTest {
     void testBuildAad_headerNameSet_valuePresent_returnsByte() {
         String headerVal = "req-id-abc123";
         Properties prop  = new Properties();
-        prop.setProperty(CryptoFilter.PROP_AAD_HEADER, "X-Api-Request-Id");
+        prop.setProperty(AbstractCryptoFilter.PROP_AAD_HEADER, "X-Api-Request-Id");
         when(mockRequest.getHeader("X-Api-Request-Id")).thenReturn(headerVal);
 
         assertArrayEquals(headerVal.getBytes(StandardCharsets.UTF_8), filter.buildAad(prop, mockRequest));
@@ -132,17 +133,17 @@ class BaseCryptoFilterTest {
     }
 
     @Test
-    @DisplayName("3-3. CRYPTO_MODULE_NAME 누락 — IllegalArgumentException")
+    @DisplayName("3-2. CRYPTO_MODULE_NAME 누락 — IllegalArgumentException")
     void testPreFilter_missingModuleName_throwsException() {
         Properties prop = new Properties();
-        prop.setProperty(CryptoFilter.PROP_SCOPE, "BODY");
+        prop.setProperty(AbstractCryptoFilter.PROP_SCOPE, "BODY");
 
         assertThrows(IllegalArgumentException.class,
                 () -> filter.doPreFilter("g", "a", CIPHER_B64, prop, mockRequest, mockResponse));
     }
 
     @Test
-    @DisplayName("3-4. message가 byte[] — UTF-8 디코딩 후 처리")
+    @DisplayName("3-3. message가 byte[] — UTF-8 디코딩 후 처리")
     void testPreFilter_body_byteArrayMessage() throws Exception {
         Object result = filter.doPreFilter("g", "a", CIPHER_B64.getBytes(StandardCharsets.UTF_8),
                 bodyDecryptProps(), mockRequest, mockResponse);
@@ -168,14 +169,33 @@ class BaseCryptoFilterTest {
     }
 
     @Test
-    @DisplayName("4-2. FIELD scope, toPath='/' — 복호화된 텍스트로 body 전체 교체")
-    void testPreFilter_field_decryptToRoot() throws Exception {
+    @DisplayName("4-2. FIELD scope, toPath='/' — 복호화 결과가 비-JSON이면 텍스트 그대로 반환 (fallback)")
+    void testPreFilter_field_decryptToRoot_nonJsonFallback() throws Exception {
         String body = "{\"enc\":\"" + CIPHER_B64 + "\"}";
         Properties prop = fieldDecryptProps("/enc", "/");
 
         Object result = filter.doPreFilter("g", "a", body, prop, mockRequest, mockResponse);
 
-        assertEquals(PLAIN_STR, result, "toPath='/'이면 body 전체가 복호화된 텍스트로 교체되어야 한다");
+        assertEquals(PLAIN_STR, result, "복호화 결과가 JSON 객체가 아니면 텍스트 그대로 반환");
+    }
+
+    @Test
+    @DisplayName("4-4. FIELD scope, toPath='/' — 복호화된 JSON을 body에 병합 (fromPath 필드 제거)")
+    void testPreFilter_field_decryptToRoot_mergesJson() throws Exception {
+        String decryptedJson = "{\"userId\":\"U001\",\"name\":\"test\"}";
+        when(mockService.decrypt(anyString(), anyMap(), any(), any(byte[].class)))
+                .thenReturn(decryptedJson.getBytes(StandardCharsets.UTF_8));
+
+        String body = "{\"encryptedData\":\"" + CIPHER_B64 + "\",\"requestId\":\"REQ001\"}";
+        Properties prop = fieldDecryptProps("/encryptedData", "/");
+
+        Object result = filter.doPreFilter("g", "a", body, prop, mockRequest, mockResponse);
+
+        String r = result.toString();
+        assertFalse(r.contains("encryptedData"), "암호화 필드(encryptedData)는 제거되어야 한다");
+        assertTrue(r.contains("\"requestId\":\"REQ001\""), "원본 body의 다른 필드는 유지되어야 한다");
+        assertTrue(r.contains("\"userId\":\"U001\""), "복호화된 JSON 필드가 병합되어야 한다");
+        assertTrue(r.contains("\"name\":\"test\""), "복호화된 JSON 필드가 병합되어야 한다");
     }
 
     @Test
@@ -195,7 +215,7 @@ class BaseCryptoFilterTest {
     // =========================================================================
 
     @Test
-    @DisplayName("5-1. BODY scope, CRYPTO_ENC_ENABLED=Y — 평문 암호화 → Base64 반환")
+    @DisplayName("5-1. BODY scope — 평문 암호화 → Base64 반환")
     void testPostFilter_body_encrypt() throws Exception {
         String body = "plain-response-body";
         Object result = filter.doPostFilter("g", "a", body, bodyEncryptProps(), mockRequest, mockResponse);
@@ -252,7 +272,7 @@ class BaseCryptoFilterTest {
     void testPreFilter_body_aadFromHeader_passedToService() throws Exception {
         String aadVal = "request-id-xyz";
         Properties prop = bodyDecryptProps();
-        prop.setProperty(CryptoFilter.PROP_AAD_HEADER, "X-Api-Request-Id");
+        prop.setProperty(AbstractCryptoFilter.PROP_AAD_HEADER, "X-Api-Request-Id");
         when(mockRequest.getHeader("X-Api-Request-Id")).thenReturn(aadVal);
 
         filter.doPreFilter("g", "a", CIPHER_B64, prop, mockRequest, mockResponse);
@@ -275,7 +295,7 @@ class BaseCryptoFilterTest {
         String aadVal = "field-aad-value";
         String body   = "{\"enc\":\"" + CIPHER_B64 + "\",\"result\":\"\"}";
         Properties prop = fieldDecryptProps("/enc", "/result");
-        prop.setProperty(CryptoFilter.PROP_AAD_HEADER, "X-Api-Aad");
+        prop.setProperty(AbstractCryptoFilter.PROP_AAD_HEADER, "X-Api-Aad");
         when(mockRequest.getHeader("X-Api-Aad")).thenReturn(aadVal);
 
         filter.doPreFilter("g", "a", body, prop, mockRequest, mockResponse);
@@ -290,8 +310,8 @@ class BaseCryptoFilterTest {
 
     private Properties bodyDecryptProps() {
         Properties p = new Properties();
-        p.setProperty(CryptoFilter.PROP_MODULE_NAME, MODULE);
-        p.setProperty(CryptoFilter.PROP_SCOPE, "BODY");
+        p.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MODULE);
+        p.setProperty(AbstractCryptoFilter.PROP_SCOPE, "BODY");
         return p;
     }
 
@@ -301,19 +321,19 @@ class BaseCryptoFilterTest {
 
     private Properties fieldDecryptProps(String fromPath, String toPath) {
         Properties p = new Properties();
-        p.setProperty(CryptoFilter.PROP_MODULE_NAME, MODULE);
-        p.setProperty(CryptoFilter.PROP_SCOPE, "FIELD");
-        p.setProperty(CryptoFilter.PROP_DEC_FROM_PATH, fromPath);
-        p.setProperty(CryptoFilter.PROP_DEC_TO_PATH, toPath);
+        p.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MODULE);
+        p.setProperty(AbstractCryptoFilter.PROP_SCOPE, "FIELD");
+        p.setProperty(AbstractCryptoFilter.PROP_DEC_FROM_PATH, fromPath);
+        p.setProperty(AbstractCryptoFilter.PROP_DEC_TO_PATH, toPath);
         return p;
     }
 
     private Properties fieldEncryptProps(String fromPath, String toPath) {
         Properties p = new Properties();
-        p.setProperty(CryptoFilter.PROP_MODULE_NAME, MODULE);
-        p.setProperty(CryptoFilter.PROP_SCOPE, "FIELD");
-        p.setProperty(CryptoFilter.PROP_ENC_FROM_PATH, fromPath);
-        p.setProperty(CryptoFilter.PROP_ENC_TO_PATH, toPath);
+        p.setProperty(AbstractCryptoFilter.PROP_MODULE_NAME, MODULE);
+        p.setProperty(AbstractCryptoFilter.PROP_SCOPE, "FIELD");
+        p.setProperty(AbstractCryptoFilter.PROP_ENC_FROM_PATH, fromPath);
+        p.setProperty(AbstractCryptoFilter.PROP_ENC_TO_PATH, toPath);
         return p;
     }
 }

src/test/java/com/eactive/eai/common/security/CryptoModuleServiceTest.java

@@ -143,11 +143,20 @@ class CryptoModuleServiceTest {
         Map<String, String> runtimeCtx = new HashMap<>();
         runtimeCtx.put("X-Api-Enc-Key", "clientKey0000001");
 
-        byte[] plain = "DYNAMIC 키 서비스 테스트".getBytes(StandardCharsets.UTF_8);
+        byte[] plain = "{\"test\": \"DYNAMIC AES/CBC 테스트\"}".getBytes(StandardCharsets.UTF_8);
 
         byte[] encrypted = service.encrypt("DYN_SVC", runtimeCtx, plain);
         byte[] decrypted = service.decrypt("DYN_SVC", runtimeCtx, encrypted);
-
+        
+        String encBase64 = Base64.getEncoder().encodeToString(encrypted);
+        String decBase64 = Base64.getEncoder().encodeToString(decrypted);
+        System.out.println("DYNAMIC AES/CBC");
+        
+        System.out.println("plain:"+new String(plain));
+        System.out.println("encBase64:"+encBase64);
+        System.out.println("decBase64:"+decBase64);
+        System.out.println("plain:"+new String(decrypted));
+        
         assertArrayEquals(plain, decrypted);
     }
 

src/test/java/com/eactive/eai/common/util/MaskingUtilsTest.java

@@ -0,0 +1,581 @@
+package com.eactive.eai.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.MethodOrderer;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.TestMethodOrder;
+
+@TestMethodOrder(MethodOrderer.DisplayName.class)
+class MaskingUtilsTest {
+
+    // =========================================================================
+    // 1. 고유식별정보
+    // =========================================================================
+
+    // --- 1-1. 주민등록번호 ---
+
+    @Test
+    @DisplayName("1-1-1. 주민등록번호 — 하이픈 포함 정상 형식")
+    void testResidentNumber_withHyphen() {
+        String input  = "123456-1234567";
+        String result = MaskingUtils.maskResidentNumber(input);
+        assertEquals("123456-1******", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("1-1-2. 주민등록번호 — 하이픈 없는 형식 (뒤 6자리 마스킹)")
+    void testResidentNumber_withoutHyphen() {
+        String input  = "0701011234567";
+        String result = MaskingUtils.maskResidentNumber(input);
+        assertEquals("0701011******", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("1-1-3. 주민등록번호 — null/빈 문자열 방어")
+    void testResidentNumber_nullAndEmpty() {
+        assertNull(MaskingUtils.maskResidentNumber(null));
+        assertEquals("", MaskingUtils.maskResidentNumber(""));
+    }
+
+    // --- 1-2. 운전면허번호 ---
+
+    @Test
+    @DisplayName("1-2-1. 운전면허번호 — 숫자 7자리 역방향 마스킹")
+    void testDriverLicense_normal() {
+        String input  = "제주-22-300001-50";
+        String result = MaskingUtils.maskDriverLicense(input);
+        assertEquals("제주-22-3*****-**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("1-2-2. 운전면허번호 — null/빈 문자열 방어")
+    void testDriverLicense_nullAndEmpty() {
+        assertNull(MaskingUtils.maskDriverLicense(null));
+        assertEquals("", MaskingUtils.maskDriverLicense(""));
+    }
+
+    // --- 1-3. 여권번호 ---
+
+    @Test
+    @DisplayName("1-3-1. 여권번호 — 구여권 형식")
+    void testPassport_old() {
+        String input  = "M12345678";
+        String result = MaskingUtils.maskPassport(input);
+        assertEquals("M1234****", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("1-3-2. 여권번호 — 신여권 형식 (영문+숫자 혼합)")
+    void testPassport_new() {
+        String input  = "M123A5678";
+        String result = MaskingUtils.maskPassport(input);
+        assertEquals("M123A****", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("1-3-3. 여권번호 — null/빈 문자열 방어")
+    void testPassport_nullAndEmpty() {
+        assertNull(MaskingUtils.maskPassport(null));
+        assertEquals("", MaskingUtils.maskPassport(""));
+    }
+
+    // --- 1-4. 외국인등록번호 ---
+
+    @Test
+    @DisplayName("1-4-1. 외국인등록번호 — 주민등록번호와 동일 방식")
+    void testForeignerNumber_normal() {
+        String input  = "123456-5234567";
+        String result = MaskingUtils.maskForeignerNumber(input);
+        assertEquals("123456-5******", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    // =========================================================================
+    // 2. 금융식별정보
+    // =========================================================================
+
+    // --- 2-1. 계좌번호 ---
+
+    @Test
+    @DisplayName("2-1-1. 계좌번호 — 명세 예시 형식 (XX-XX-XXXXXX)")
+    void testAccountNumber_specExample() {
+        String input  = "99-94-123451";
+        String result = MaskingUtils.maskAccountNumber(input);
+        assertEquals("99-9*-*****1", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-1-2. 계좌번호 — 일반 형식 (XX-XXXXXX-X): 하이픈 원위치 유지")
+    void testAccountNumber_commonFormat() {
+        String input  = "99-912345-1";
+        String result = MaskingUtils.maskAccountNumber(input);
+        assertEquals("99-9*****-1", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-1-3. 계좌번호 — 하이픈 없는 형식")
+    void testAccountNumber_noHyphen() {
+        String input  = "123456789";
+        String result = MaskingUtils.maskAccountNumber(input);
+        assertEquals("123*****9", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-1-4. 계좌번호 — 4자리 이하는 마스킹 안 함")
+    void testAccountNumber_tooShort() {
+        assertEquals("1234", MaskingUtils.maskAccountNumber("1234"));
+    }
+
+    @Test
+    @DisplayName("2-1-5. 계좌번호 — null/빈 문자열 방어")
+    void testAccountNumber_nullAndEmpty() {
+        assertNull(MaskingUtils.maskAccountNumber(null));
+        assertEquals("", MaskingUtils.maskAccountNumber(""));
+    }
+
+    // --- 2-2. 카드번호 ---
+
+    @Test
+    @DisplayName("2-2-1. 카드번호 — PCI-DSS 7~12번째 자리 마스킹")
+    void testCardNumber_normal() {
+        String input  = "4518-4212-3456-1234";
+        String result = MaskingUtils.maskCardNumber(input);
+        assertEquals("4518-42**-****-1234", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-2-2. 카드번호 — 하이픈 없는 16자리 형식")
+    void testCardNumber_noHyphen() {
+        String input  = "4518421234561234";
+        String result = MaskingUtils.maskCardNumber(input);
+        assertEquals("451842******1234", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-2-3. 카드번호 — null/빈 문자열 방어")
+    void testCardNumber_nullAndEmpty() {
+        assertNull(MaskingUtils.maskCardNumber(null));
+        assertEquals("", MaskingUtils.maskCardNumber(""));
+    }
+
+    // --- 2-3. 카드 유효기간 ---
+
+    @Test
+    @DisplayName("2-3-1. 카드 유효기간 — 월/년 전체 마스킹")
+    void testCardExpiry_normal() {
+        String input  = "12/25";
+        String result = MaskingUtils.maskCardExpiry(input);
+        assertEquals("**/**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-3-2. 카드 유효기간 — 구분자 없는 형식")
+    void testCardExpiry_noDelimiter() {
+        String input  = "1225";
+        String result = MaskingUtils.maskCardExpiry(input);
+        assertEquals("****", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    // --- 2-4. CVV ---
+
+    @Test
+    @DisplayName("2-4-1. CVV — 전체 마스킹")
+    void testCvv_normal() {
+        String input  = "123";
+        String result = MaskingUtils.maskCvv(input);
+        assertEquals("***", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("2-4-2. CVV — null/빈 문자열 방어")
+    void testCvv_nullAndEmpty() {
+        assertNull(MaskingUtils.maskCvv(null));
+        assertEquals("", MaskingUtils.maskCvv(""));
+    }
+
+    // =========================================================================
+    // 3. 인증정보
+    // =========================================================================
+
+    // --- 3-1. 비밀번호 ---
+
+    @Test
+    @DisplayName("3-1-1. 비밀번호 — 전체 자리 마스킹")
+    void testPassword_normal() {
+        String input  = "password";
+        String result = MaskingUtils.maskPassword(input);
+        assertEquals("********", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("3-1-2. 비밀번호 — 숫자/특수문자 혼합")
+    void testPassword_mixed() {
+        String input  = "Pass1234!@";
+        String result = MaskingUtils.maskPassword(input);
+        assertEquals("**********", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("3-1-3. 비밀번호 — null/빈 문자열 방어")
+    void testPassword_nullAndEmpty() {
+        assertNull(MaskingUtils.maskPassword(null));
+        assertEquals("", MaskingUtils.maskPassword(""));
+    }
+
+    // =========================================================================
+    // 4. 신상정보
+    // =========================================================================
+
+    // --- 4-1. 전화번호/휴대폰 ---
+
+    @Test
+    @DisplayName("4-1-1. 전화번호 — 가운데·뒷자리 각 2자리 마스킹 (지역)")
+    void testPhoneNumber_local() {
+        String input  = "064-1234-5678";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("064-12**-56**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-2. 전화번호 — 서울 02 형식")
+    void testPhoneNumber_seoul() {
+        String input  = "02-1234-5678";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("02-12**-56**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-3. 전화번호 — 010 형식 (하이픈 있음)")
+    void testMobileNumber_normal() {
+        String input  = "010-1234-5678";
+        String result = MaskingUtils.maskMobileNumber(input);
+        assertEquals("010-12**-56**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-4. 전화번호 — 하이픈 없는 11자리 휴대폰")
+    void testPhoneNumber_noHyphen_mobile() {
+        String input  = "01012345678";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("01012**56**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-5. 전화번호 — 하이픈 없는 10자리 서울(02)")
+    void testPhoneNumber_noHyphen_seoul10() {
+        String input  = "0212345678";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("0212**56**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-6. 전화번호 — 하이픈 없는 9자리 서울(02)")
+    void testPhoneNumber_noHyphen_seoul9() {
+        String input  = "021234567";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("021**45**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-7. 전화번호 — 하이픈 없는 10자리 지역(0XX-XXX-XXXX)")
+    void testPhoneNumber_noHyphen_local10() {
+        String input  = "0641234567";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("0641**45**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-8. 전화번호 — 하이픈 없는 11자리 지역(0XX-XXXX-XXXX)")
+    void testPhoneNumber_noHyphen_local11() {
+        String input  = "06412345678";
+        String result = MaskingUtils.maskPhoneNumber(input);
+        assertEquals("06412**56**", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-1-9. 전화번호 — 인식 불가 형식은 원본 반환")
+    void testPhoneNumber_invalidFormat() {
+        assertEquals("0641234", MaskingUtils.maskPhoneNumber("0641234"));
+    }
+
+    @Test
+    @DisplayName("4-1-10. 전화번호 — null/빈 문자열 방어")
+    void testPhoneNumber_nullAndEmpty() {
+        assertNull(MaskingUtils.maskPhoneNumber(null));
+        assertEquals("", MaskingUtils.maskPhoneNumber(""));
+    }
+
+    // --- 4-2. 이메일 ---
+
+    @Test
+    @DisplayName("4-2-1. 이메일 — 앞 2자리·@ 앞 2자리 마스킹")
+    void testEmail_normal() {
+        String input  = "aajjbacc@shinhan.com";
+        String result = MaskingUtils.maskEmail(input);
+        assertEquals("**jjba**@shinhan.com", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-2-2. 이메일 — 로컬 파트 4자 이하는 전체 마스킹")
+    void testEmail_shortLocal() {
+        String input  = "abc@test.com";
+        String result = MaskingUtils.maskEmail(input);
+        assertEquals("***@test.com", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-2-3. 이메일 — @ 없는 경우 원본 반환")
+    void testEmail_noAtSign() {
+        assertEquals("notanemail", MaskingUtils.maskEmail("notanemail"));
+    }
+
+    @Test
+    @DisplayName("4-2-4. 이메일 — null/빈 문자열 방어")
+    void testEmail_nullAndEmpty() {
+        assertNull(MaskingUtils.maskEmail(null));
+        assertEquals("", MaskingUtils.maskEmail(""));
+    }
+
+    // --- 4-3. 한글 성명 ---
+
+    @Test
+    @DisplayName("4-3-1. 한글 성명 — 2자: 뒤 1자리 마스킹")
+    void testKoreanName_2chars() {
+        String input  = "홍동";
+        String result = MaskingUtils.maskKoreanName(input);
+        assertEquals("홍*", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-3-2. 한글 성명 — 3자: 가운데 1자리 마스킹")
+    void testKoreanName_3chars() {
+        String input  = "홍길동";
+        String result = MaskingUtils.maskKoreanName(input);
+        assertEquals("홍*동", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-3-3. 한글 성명 — 4자: 앞뒤 1자 제외 가운데 전체 마스킹")
+    void testKoreanName_4chars() {
+        String input  = "홍길순동";
+        String result = MaskingUtils.maskKoreanName(input);
+        assertEquals("홍**동", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-3-4. 한글 성명 — 한자 2자 성명")
+    void testKoreanName_hanja() {
+        String input  = "田中";
+        String result = MaskingUtils.maskKoreanName(input);
+        assertEquals("田*", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-3-5. 한글 성명 — 1자는 마스킹 없이 반환")
+    void testKoreanName_1char() {
+        String input  = "홍";
+        String result = MaskingUtils.maskKoreanName(input);
+        assertEquals("홍", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-3-6. 한글 성명 — null/빈 문자열 방어")
+    void testKoreanName_nullAndEmpty() {
+        assertNull(MaskingUtils.maskKoreanName(null));
+        assertEquals("", MaskingUtils.maskKoreanName(""));
+    }
+
+    // --- 4-4. 영문 성명 ---
+
+    @Test
+    @DisplayName("4-4-1. 영문 성명 — 이름(first name) 마스킹·성(last name) 노출")
+    void testEnglishName_normal() {
+        String input  = "GILDONG HONG";
+        String result = MaskingUtils.maskEnglishName(input);
+        assertEquals("******* HONG", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-4-2. 영문 성명 — 이름이 2개인 경우")
+    void testEnglishName_multipleFirstNames() {
+        String input  = "MARY GRACE HONG";
+        String result = MaskingUtils.maskEnglishName(input);
+        assertEquals("**** ***** HONG", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-4-3. 영문 성명 — 단일 토큰은 마스킹 없이 반환")
+    void testEnglishName_singleToken() {
+        assertEquals("HONG", MaskingUtils.maskEnglishName("HONG"));
+    }
+
+    @Test
+    @DisplayName("4-4-4. 영문 성명 — null/빈 문자열 방어")
+    void testEnglishName_nullAndEmpty() {
+        assertNull(MaskingUtils.maskEnglishName(null));
+        assertEquals("", MaskingUtils.maskEnglishName(""));
+    }
+
+    // --- 4-5. 지번주소 ---
+
+    @Test
+    @DisplayName("4-5-1. 지번주소 — 번지 마스킹 및 상세주소 전체 마스킹")
+    void testJibunAddress_normal() {
+        String input  = "제주특별자치도 제주시 연동 123번지, 101동 202호";
+        String result = MaskingUtils.maskJibunAddress(input);
+        assertEquals("제주특별자치도 제주시 연동 ***번지, **** ****", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-5-2. 지번주소 — 상세주소(쉼표 이후) 없는 경우")
+    void testJibunAddress_noDetail() {
+        String input  = "제주특별자치도 제주시 연동 123번지";
+        String result = MaskingUtils.maskJibunAddress(input);
+        assertEquals("제주특별자치도 제주시 연동 ***번지", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    // --- 4-6. 도로명주소 ---
+
+    @Test
+    @DisplayName("4-6-1. 도로명주소 — 도로명 번호 및 번지·상세주소 마스킹 (자릿수 보존)")
+    void testRoadAddress_normal() {
+        String input  = "제주특별자치도 제주시 은남2길 5, 101동 202호";
+        String result = MaskingUtils.maskRoadAddress(input);
+        assertEquals("제주특별자치도 제주시 은남*길 *, **** ****", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    @Test
+    @DisplayName("4-6-2. 도로명주소 — 상세주소(쉼표 이후) 없는 경우")
+    void testRoadAddress_noDetail() {
+        String input  = "제주특별자치도 제주시 은남2길 5";
+        String result = MaskingUtils.maskRoadAddress(input);
+        assertEquals("제주특별자치도 제주시 은남*길 *", result);
+        assertEquals(input.length(), result.length());
+    }
+
+    // =========================================================================
+    // 5. 온라인 정보 (IP는 고정 길이 마스킹 — String.length() 보존 단언 없음)
+    // =========================================================================
+
+    // --- 5-1. IPv4 ---
+
+    @Test
+    @DisplayName("5-1-1. IPv4 — 3번째 옥텟 고정 마스킹 (***)")
+    void testIpv4_normal() {
+        assertEquals("100.200.***.45", MaskingUtils.maskIpv4("100.200.123.45"));
+    }
+
+    @Test
+    @DisplayName("5-1-2. IPv4 — 3rd octet 2자리: *** 고정으로 길이 증가 (의도된 동작)")
+    void testIpv4_twoDigitOctet() {
+        String input  = "10.0.10.5";
+        String result = MaskingUtils.maskIpv4(input);
+        assertEquals("10.0.***.5", result);
+        // 2자리(10) → 3자리(***): length 9 → 10
+        assertEquals(input.length() + 1, result.length());
+    }
+
+    @Test
+    @DisplayName("5-1-3. IPv4 — 3rd octet 1자리: *** 고정으로 길이 증가 (의도된 동작)")
+    void testIpv4_oneDigitOctet() {
+        String input  = "10.0.1.5";
+        String result = MaskingUtils.maskIpv4(input);
+        assertEquals("10.0.***.5", result);
+        // 1자리(1) → 3자리(***): length 8 → 10
+        assertEquals(input.length() + 2, result.length());
+    }
+
+    @Test
+    @DisplayName("5-1-4. IPv4 — 형식이 아닌 경우 원본 반환")
+    void testIpv4_invalidFormat() {
+        assertEquals("100.200.123", MaskingUtils.maskIpv4("100.200.123"));
+    }
+
+    @Test
+    @DisplayName("5-1-5. IPv4 — null/빈 문자열 방어")
+    void testIpv4_nullAndEmpty() {
+        assertNull(MaskingUtils.maskIpv4(null));
+        assertEquals("", MaskingUtils.maskIpv4(""));
+    }
+
+    // --- 5-2. IPv6 ---
+
+    @Test
+    @DisplayName("5-2-1. IPv6 — 마지막 그룹(113~128 비트) 고정 마스킹 (****)")
+    void testIpv6_normal() {
+        assertEquals(
+            "21DA:00D3:0000:2F3B:02AA:00FF:FE28:****",
+            MaskingUtils.maskIpv6("21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A")
+        );
+    }
+
+    @Test
+    @DisplayName("5-2-2. IPv6 — null/빈 문자열 방어")
+    void testIpv6_nullAndEmpty() {
+        assertNull(MaskingUtils.maskIpv6(null));
+        assertEquals("", MaskingUtils.maskIpv6(""));
+    }
+
+    // --- 5-3. IP 자동 판별 ---
+
+    @Test
+    @DisplayName("5-3-1. IP 자동 판별 — IPv4")
+    void testIpAddress_detectIpv4() {
+        assertEquals("192.168.***.1", MaskingUtils.maskIpAddress("192.168.100.1"));
+    }
+
+    @Test
+    @DisplayName("5-3-2. IP 자동 판별 — IPv6")
+    void testIpAddress_detectIpv6() {
+        assertEquals(
+            "21DA:00D3:0000:2F3B:02AA:00FF:FE28:****",
+            MaskingUtils.maskIpAddress("21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A")
+        );
+    }
+
+    @Test
+    @DisplayName("5-3-3. IP 자동 판별 — 쉼표 구분 다중 IPv4 (3자리/1자리 혼합)")
+    void testIpAddress_multipleIpv4() {
+        // 192.168.100.1: 3rd octet 3자리 → 길이 유지
+        // 10.0.0.2: 3rd octet 1자리(0) → *** 고정으로 길이 증가
+        assertEquals("192.168.***.1,10.0.***.2", MaskingUtils.maskIpAddress("192.168.100.1,10.0.0.2"));
+    }
+}