>Why can't you simply have a method in your VFP data access that will return the decrypt key back to the WebService method. You would simply call that VFP method from the WebService method and get the decrypt key and then call the VFP app again once you've decrypted the info.

That is an approach I should consider. Thanks