Oracle-L: Re: storing credit card numbers in a database

From: <dgoulet_at_vicr.com>
Date: Fri, 21 Feb 2003 19:08:46 -0800
Message-ID: <F001.00555906.20030221190846@fatcity.com>

DBMS_OBFUSCATION Dick Goulet

Chris Stephens <ChrisStephens_at_affina.com> wrote on 2/21/03 11:05 am:

I've been asked to find out a way to encrypt credit card numbers and store that encrypted string in the database. ...any oracle functions or functionality to do this? ....or would we have to encrypt the numbers in the application and then pass that string to the database?

We don't want anyone to be able to get to the numbers even if they have access to the table in which it is stored.

Thanks for any input
chris

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <META
NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>storing credit card numbers in a database</TITLE>
</HEAD>
<BODY>
 

I've been asked to find out a way to encrypt credit card numbers
and store that encrypted string in the database.  ...any oracle functions or functionality to do this? ....or would we have to encrypt the numbers in the application and then pass that string to the database?

We don't want anyone to be able to get to the numbers even if
they have access to the table in which it is stored.


Thanks for any input chris


</BODY>
</HTML>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: dgoulet_at_vicr.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Fri Feb 21 2003 - 21:08:46 CST