Re: Looking for a method to encrypt data within an Oracle database, hosted on a public net, and accessed by thousands

jacob.marley_at_plaintalk.bellevue.wa.us writes: >
> Opps, sorry. I left out two important points: first, the
> data is *shared* by those thousands of clients and
> second, only some of the columns are encrypted, others
> are not (so I can select off of them).
>
> Some problems with PGP include:
> 1) All clients will have to know the private key in
> addition to the public key. This seems fundamentally
> orthogonal to the public key philosophy.
> 2) I have a big-time, uncentralized, and course grain key
> management problem.
> 3) I want the clients to be authenticated outside of
> Oracle, since I cannot trust the security of their logon
> identifiers and passwords stored within the Oracle database.

Everybody who is authorized to get to the database would need a copy of the database public and private keys. If each has their own key, they could use it to sign the data when they change it, and you'd know who did what. Received on Mon Mar 17 1997 - 00:00:00 CST