RE: storing credit card numbers in a database

From: Jamadagni, Rajendra <Rajendra.Jamadagni_at_espn.com>
Date: Fri, 21 Feb 2003 12:32:01 -0800
Message-ID: <F001.005553F3.20030221123201@fatcity.com>

Jeff,

I'd split the key in n pieces and then merge them to create the final key or store the ASCII representation of the key and store it in pieces ... in the wrapped code, it will be tough to put it together. Also put this in a package, and revoke CREATE ANY PROCEDURE from those whom you don't want to see the package body.

You could store the key itself in a db table protected using FGAC ... of course this table contents should be obfuscated as well.

Raj

---

Rajendra dot Jamadagni at espn dot com
Any views expressed here are strictly personal. QOTD: Any clod can have facts, having an opinion is an art !!

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: Rajendra.Jamadagni_at_espn.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



text/plain attachment: ESPN_Disclaimer.txt

Received on Fri Feb 21 2003 - 14:32:01 CST