Subject Re: [firebird-support] Field level encryption with UDF?
Author Nick Upson
why not write a view the exposes the non-secure parts of the table
only, then use that instead of the base table within crystal

2009/5/5 Myles Wakeham <myles@...>:
> I have a Firebird 1.5 database that has a table for storing credit card
> numbers.  In accordance with PCI compliance on credit card handling
> regulations, I need to restrict access to this information on a
> 'business need to know' basis.  I can do most of that with user level
> security, etc.
>
> However I have a specific need to offer key users the ability to produce
> reports using Crystal Reports or other 3rd party reporting tools
> directly against the database tables.  The data that is needed to be
> secured is (unfortunately) a part of a table that needs to be exposed
> for the reporting requirements.  So I was thinking of storing the data
> in an encrypted form, so that it is only visible when run through a
> decrypter in my application.
>
> Has anyone used an UDFs to do field level string encryption like this?
> I don't need anything incredibly sophisticated, but rather than
> attempting to build my own, I was wondering if there are any out there
> that others have used that I could adopt for this application?
>
> This is for a database that is running on CentOS Linux.
>
> Thanks in advance for any pointers.
>
> Myles
> --
> =======================
> Myles Wakeham
> Director of Engineering
> Tech Solutions USA, Inc.
> Scottsdale, Arizona  USA
> http://www.techsolusa.com
> Phone +1-480-451-7440
>
>
>
> ------------------------------------
>
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
>
> Visit http://www.firebirdsql.org and click the Resources item
> on the main (top) menu.  Try Knowledgebase and FAQ links !
>
> Also search the knowledgebases at http://www.ibphoenix.com
>
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> Yahoo! Groups Links
>
>
>
>