Subject | Security with Firebird 1.5 |
---|---|
Author | Henry Franquet |
Post date | 2003-05-11T09:10:04Z |
Hi,
I'm involved building a CRM project in Delphi using IB Object and need a
lot of security with the database
the project use 2 functional mode : a server mode and a stand alone mode
in server mode, I need an administrator of the database but which is not
allowed to see some fields of the database and backup restore have to be
done with an encryption key. He should be able to restore user password to
a password calculated with a stand alone program.
and tpc-ip communication between server and client should be encrypted
(perhaps with ZeBeDe). No ODBC communication should be allowed
in stand alone mode, the application use a small database, extracted from
the main, with a timed encryption key, immune to system date modification.
The expiration delay is restored in client-server connection
I need not high security protection, but sufficient to protect data from
current user, even database administrator
What is the best technical solution ?
I plan to modify the way Firebird reads database's files to add the
encrypt-decrypt routine. Is this realistic ?
Tia
I'm involved building a CRM project in Delphi using IB Object and need a
lot of security with the database
the project use 2 functional mode : a server mode and a stand alone mode
in server mode, I need an administrator of the database but which is not
allowed to see some fields of the database and backup restore have to be
done with an encryption key. He should be able to restore user password to
a password calculated with a stand alone program.
and tpc-ip communication between server and client should be encrypted
(perhaps with ZeBeDe). No ODBC communication should be allowed
in stand alone mode, the application use a small database, extracted from
the main, with a timed encryption key, immune to system date modification.
The expiration delay is restored in client-server connection
I need not high security protection, but sufficient to protect data from
current user, even database administrator
What is the best technical solution ?
I plan to modify the way Firebird reads database's files to add the
encrypt-decrypt routine. Is this realistic ?
Tia