Home » SQL & PL/SQL » SQL & PL/SQL » Calling java function from remote unix server (oracle 10g)
Calling java function from remote unix server [message #407844] Thu, 11 June 2009 21:03 Go to next message
summoner
Messages: 44
Registered: March 2009
Member
Dear all,


There are two servers for handling our project. One unix server is on our Vendor side (front end) and the other one is on our local side (back end).
The front-end server will handle all enquiries from outside and then store the information into our database. There is a table column that stores sensitive data in encrypted format. The front-end server will encrpyt the data before insert it into our back-end database

We have got a problem that we need to retrieve this data and insert the records into our database. Our vendor provide a java API that provides functions to decrypt sensitive data by inputting encrypted value in their unix server

We do not have any experience on handling java API in Oracle and we need help on solving this problem. Can we do it? We are considering either call the function from remote server and retrieve the function and call it in our local server (If it can be done)

We have considered the following

Call function from remote server

  1. Receive plain text during receiving data, resulting in security issue
  2. Too much connections when calling the function


Call function from local server

  1. Vendor update the API without any notice


Thanks a lot!

[Updated on: Thu, 11 June 2009 21:09]

Report message to a moderator

Re: Calling java function from remote unix server [message #407845 is a reply to message #407844] Thu, 11 June 2009 21:10 Go to previous messageGo to next message
BlackSwan
Messages: 25039
Registered: January 2009
Location: SoCal
Senior Member
You need to help us by following the Posting Guidelines as stated below.
http://www.orafaq.com/forum/t/88153/0/
Go to the URL above click the link "Posting Guidelines"
Go to the section labeled "Practice" & do as directed.

>There are two servers for handling our project.
>One unix server is on our Vendor side (front end) and the other one is on our local side (back end).
>The front-end server will handle all enquiries from outside and then store the information into our database.
>There is a table column that stores sensitive data in encrypted format.
>The front-end server will encrypt the data before insert it into our back-end database

Everything above makes sense & sounds reasonable.
I do not see any problem & a solid design & solution

>We have got a problem that we need to retrieve this data and insert the records into our database.

The statement above leaves me confused.
It seems to contradict the last sentence in top paragraph.

>Our vendor provide a java API that provides functions to decrypt sensitive data by inputting encrypted value in their unix server

If the vendor want to protect the data by encrypting it,
why is decryption being discussed?

[Updated on: Thu, 11 June 2009 22:25]

Report message to a moderator

Re: Calling java function from remote unix server [message #407851 is a reply to message #407845] Thu, 11 June 2009 22:44 Go to previous message
summoner
Messages: 44
Registered: March 2009
Member
BlackSwan wrote on Thu, 11 June 2009 21:10

>We have got a problem that we need to retrieve this data and insert the records into our database.

The statement above leaves me confused.
It seems to contradict the last sentence in top paragraph.


The raw data is in numeric format with around 30 digits. User need to have a field that show last 4-digits in our report. However, it is encrypted and so we need to find ways to decrypt it and then show the last 4 digits.


BlackSwan wrote on Thu, 11 June 2009 21:10

>Our vendor provide a java API that provides functions to decrypt sensitive data by inputting encrypted value in their unix server

If the vendor want to protect the data by encrypting it,
why is decryption being discussed?


Vendor protect it to prevent any data leakage during transmission. However, we need the last 4-digits in our report.

Thanks for your help
Previous Topic: Procedure missing to execute
Next Topic: ORA-01410: invalid ROWID
Goto Forum:
  


Current Time: Mon Dec 05 21:28:01 CST 2016

Total time taken to generate the page: 0.10280 seconds