Re: DBMS security assisted with crypto h/w?

better to write the crypto at the "disk driver" level. Then "all" RDBMS programs would be able to "use" crypto, seamlessly, without rewrite.

B

Thierry Moreau wrote:
>
> Hi,
>
> I'm looking for DBMS security assisted with cryptographic hardware.
>
> More precisely, suppose an application uses secret cryptographic keys
> that are used to authenticate transactions from remote systems (e.g.
> with a triple-DES MAC computation, no public key cryptography involved).
> I would expect DBMS supplier to team up with cryptographic hardware
> suppliers to provide a seamless solution so that the remote systems keys
> are stored in encrypted form in the DBMS, and each and every
> cryptographic computation is made in the cryptographic hardware. Then no
> application programmer can use a remote system key on the server, and
> the service provider can claim that "insider fraud" is a *very* remote
> possibility.
>
> Any pointer to such offerings?
>
> Which DBMS vendor is most likely to have met this requirement?
>
> Am I dreaming of a level of e-commerce security which is beyond market
> expectations?
>
> Please e-mail any suggestion. Thanks in advance.
>
> - Thierry Moreau
> thierry.moreau_at_connotech.com
Received on Tue Sep 07 1999 - 12:57:34 CDT