| Transparent Data Encryption in Oracle 10g [message #430187] |
Mon, 09 November 2009 07:00  |
gaganzk Messages: 36 Registered: May 2008 |
Member |
|
|
Hi All,
Need your input regarding one scenario while using TDE .
We require encryption on column level but only for selected values like the value contains certain character only* e.g starts with A or ends with F*.
Let me know if its possible using any standard procedure.
Regards,
Gagan Deep kaushal
|
|
|
| Re: Transparent Data Encryption in Oracle 10g [message #430189 is a reply to message #430187] |
Mon, 09 November 2009 07:04   |
Michel Cadot Messages: 29425 Registered: March 2007 Location: Nanterre, France, http://... |
Senior Member |
|
|
Search for FGAC (Fine-Grained Access Control) or VPD (Virtual Private Database or RLS (Row Level Security) (all are synonymous).
You actually don't need the data are encrypted but they cannot be seen.
TDE is made against physical thefts not against SQL accesses.
Regards
Michel
[Updated on: Mon, 09 November 2009 07:05]
|
|
|
| Re: Transparent Data Encryption in Oracle 10g [message #430194 is a reply to message #430187] |
Mon, 09 November 2009 07:14   |
gaganzk Messages: 36 Registered: May 2008 |
Member |
|
|
Hi Michel,
Thanks for your reply. I am able to understand your logic.
But i have this type of scenario :
1) Have only one database user that will interact with application.
2) Need to encrypt data on column level but not all data .
Full encryption is working fine with TDE .Just give an idea if its possible using some function/procedure aside TDE is also mandatory .
Regards,
Gagan Deep Kauhsal
|
|
|
| Re: Transparent Data Encryption in Oracle 10g [message #430197 is a reply to message #430194] |
Mon, 09 November 2009 07:45   |
Michel Cadot Messages: 29425 Registered: March 2007 Location: Nanterre, France, http://... |
Senior Member |
|
|
Do you need to encrypt the data inside the file or do you need that anyone but allowed user can read the data from SQL or something else?
Without a clear need impossible to answer.
TDE encrypts all the values of a column. It is a column property.
Regards
Michel
|
|
|
| Re: Transparent Data Encryption in Oracle 10g [message #430201 is a reply to message #430197] |
Mon, 09 November 2009 07:52   |
gaganzk Messages: 36 Registered: May 2008 |
Member |
|
|
Hi Michel,
I have only one db user and i want to encrypt particular column's data, but with exception i.e. i dont want to encrypt column data which will start with "B" or contain "has".
I know using TDE its not possible to encrypt half column data.
But still want to know is there any way to do this using TDE only?
Thanks for your quick response.
Regards,
Gagan Deep Kaushal
|
|
|
|
|
| Re: Transparent Data Encryption in Oracle 10g [message #430209 is a reply to message #430206] |
Mon, 09 November 2009 08:31   |
Michel Cadot Messages: 29425 Registered: March 2007 Location: Nanterre, France, http://... |
Senior Member |
|
|
Quote:So using application all users can display data
TDE does nothing about this.
Quote:SO i want to hide/encrypt some critical item name
You want to hide not to encrypt.
In this case (one account shared by many users and shown data is different for each) VDP/FGAC is the way to do it.
Regards
Michel
|
|
|
|
|