Home » RDBMS Server » Security » Transparent Data Encryption in Oracle 10g (Oracle 10g , Solaris 10)
Transparent Data Encryption in Oracle 10g [message #430187] Mon, 09 November 2009 07:00 Go to next message
gaganzk
Messages: 36
Registered: May 2008
Member
Hi All,

Need your input regarding one scenario while using TDE .

We require encryption on column level but only for selected values like the value contains certain character only* e.g starts with A or ends with F*.

Let me know if its possible using any standard procedure.

Regards,
Gagan Deep kaushal
Re: Transparent Data Encryption in Oracle 10g [message #430189 is a reply to message #430187] Mon, 09 November 2009 07:04 Go to previous messageGo to next message
Michel Cadot
Messages: 59427
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Search for FGAC (Fine-Grained Access Control) or VPD (Virtual Private Database or RLS (Row Level Security) (all are synonymous).

You actually don't need the data are encrypted but they cannot be seen.
TDE is made against physical thefts not against SQL accesses.

Regards
Michel

[Updated on: Mon, 09 November 2009 07:05]

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430194 is a reply to message #430187] Mon, 09 November 2009 07:14 Go to previous messageGo to next message
gaganzk
Messages: 36
Registered: May 2008
Member
Hi Michel,

Thanks for your reply. I am able to understand your logic.

But i have this type of scenario :

1) Have only one database user that will interact with application.
2) Need to encrypt data on column level but not all data .

Full encryption is working fine with TDE .Just give an idea if its possible using some function/procedure aside TDE is also mandatory .

Regards,
Gagan Deep Kauhsal
Re: Transparent Data Encryption in Oracle 10g [message #430197 is a reply to message #430194] Mon, 09 November 2009 07:45 Go to previous messageGo to next message
Michel Cadot
Messages: 59427
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Do you need to encrypt the data inside the file or do you need that anyone but allowed user can read the data from SQL or something else?
Without a clear need impossible to answer.

TDE encrypts all the values of a column. It is a column property.

Regards
Michel
Re: Transparent Data Encryption in Oracle 10g [message #430201 is a reply to message #430197] Mon, 09 November 2009 07:52 Go to previous messageGo to next message
gaganzk
Messages: 36
Registered: May 2008
Member
Hi Michel,

I have only one db user and i want to encrypt particular column's data, but with exception i.e. i dont want to encrypt column data which will start with "B" or contain "has".

I know using TDE its not possible to encrypt half column data.

But still want to know is there any way to do this using TDE only?

Thanks for your quick response.

Regards,
Gagan Deep Kaushal
Re: Transparent Data Encryption in Oracle 10g [message #430204 is a reply to message #430201] Mon, 09 November 2009 08:21 Go to previous messageGo to next message
Michel Cadot
Messages: 59427
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
and i want to encrypt particular column's data

Why? why? why? This is my question.

Regards
Michel
icon7.gif  Re: Transparent Data Encryption in Oracle 10g [message #430206 is a reply to message #430204] Mon, 09 November 2009 08:27 Go to previous messageGo to next message
gaganzk
Messages: 36
Registered: May 2008
Member
Hi Michel,

My scenario is like this :

Have one application user that is talking with oracle and number of users accessing application .So using application all users can display data.SO i want to hide/encrypt some critical item name, rest item name need not to be encrypt as need to read for processing.

That is all i am looking for.


Regards,
Gagan Deep Kaushal
Re: Transparent Data Encryption in Oracle 10g [message #430209 is a reply to message #430206] Mon, 09 November 2009 08:31 Go to previous messageGo to next message
Michel Cadot
Messages: 59427
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
So using application all users can display data

TDE does nothing about this.

Quote:
SO i want to hide/encrypt some critical item name

You want to hide not to encrypt.
In this case (one account shared by many users and shown data is different for each) VDP/FGAC is the way to do it.

Regards
Michel
Re: Transparent Data Encryption in Oracle 10g [message #430211 is a reply to message #430209] Mon, 09 November 2009 08:38 Go to previous messageGo to next message
gaganzk
Messages: 36
Registered: May 2008
Member
Hi Michel,

Thanks a lot for your input , will definitely look into this .

Regards,
Gagan
Re: Transparent Data Encryption in Oracle 10g [message #430224 is a reply to message #430211] Mon, 09 November 2009 10:29 Go to previous message
Michel Cadot
Messages: 59427
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
I think maybe (most likely) you can do it with views.

Regards
Michel
Previous Topic: user searching
Next Topic: Problem with oracle 10g (merged)
Goto Forum:
  


Current Time: Sat Oct 25 15:10:08 CDT 2014

Total time taken to generate the page: 0.04938 seconds