Return-Path: Received: from ensim.rackshack.net (root@localhost) by orafaq.net (8.11.6/8.11.6) with ESMTP id h1M0RYB06201 for ; Fri, 21 Feb 2003 18:27:34 -0600 X-ClientAddr: 209.68.248.164 Received: from newsfeed.cts.com (newsfeed.cts.com [209.68.248.164]) by ensim.rackshack.net (8.11.6/8.11.6) with ESMTP id h1M0RYQ06196 for ; Fri, 21 Feb 2003 18:27:34 -0600 Received: from fatcity.UUCP (uucp@localhost) by newsfeed.cts.com (8.9.3/8.9.3) with UUCP id NAA36359; Fri, 21 Feb 2003 13:11:12 -0800 (PST) Received: by fatcity.com (26-Feb-2001/v1.0g-b72/bab) via UUCP id 005553F3; Fri, 21 Feb 2003 12:32:01 -0800 Message-ID: Date: Fri, 21 Feb 2003 12:32:01 -0800 To: Multiple recipients of list ORACLE-L X-Comment: Oracle RDBMS Community Forum X-Sender: "Jamadagni, Rajendra" Sender: root@fatcity.com Reply-To: ORACLE-L@fatcity.com Errors-To: ML-ERRORS@fatcity.com From: "Jamadagni, Rajendra" Subject: RE: storing credit card numbers in a database Organization: Fat City Network Services, San Diego, California X-ListServer: v1.0g, build 72; ListGuru (c) 1996-2001 Bruce A. Bergman Precedence: bulk Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPartTM-000-6ba8c436-5558-4070-bb3c-c03df8346bd6" ------=_NextPartTM-000-6ba8c436-5558-4070-bb3c-c03df8346bd6 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C2D9E8.16C22EE0" ------_=_NextPart_001_01C2D9E8.16C22EE0 Content-Type: text/plain; charset="iso-8859-1" Jeff, I'd split the key in n pieces and then merge them to create the final key or store the ASCII representation of the key and store it in pieces ... in the wrapped code, it will be tough to put it together. Also put this in a package, and revoke CREATE ANY PROCEDURE from those whom you don't want to see the package body. You could store the key itself in a db table protected using FGAC ... of course this table contents should be obfuscated as well. Raj ------------------------------------------------------------- Rajendra dot Jamadagni at espn dot com Any views expressed here are strictly personal. QOTD: Any clod can have facts, having an opinion is an art !! ------_=_NextPart_001_01C2D9E8.16C22EE0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: storing credit card numbers in a database

Jeff,

I'd split the key in n pieces and then merge them to = create the final key or store the ASCII representation of the key and = store it in pieces ... in the wrapped code, it will be tough to put it = together. Also put this in a package, and revoke CREATE ANY PROCEDURE = from those whom you don't want to see the package body.

You could store the key itself in a db table = protected using FGAC ... of course this table contents should be = obfuscated as well.

Raj
-------------------------------------------------------------
Rajendra dot Jamadagni at espn dot com
Any views expressed here are strictly = personal.
QOTD: Any clod can have facts, having an opinion is = an art !!

------_=_NextPart_001_01C2D9E8.16C22EE0-- ------=_NextPartTM-000-6ba8c436-5558-4070-bb3c-c03df8346bd6 Content-Type: text/plain; name="ESPN_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="ESPN_Disclaimer.txt" ********************************************************************This e-mail message is confidential, intended only for the named recipient(s) above and may contain information that is privileged, attorney work product or exempt from disclosure under applicable law. If you have received this message in error, or are not the named recipient(s), please immediately notify corporate MIS at (860) 766-2000 and delete this e-mail message from your computer, Thank you.*********************************************************************2 ------=_NextPartTM-000-6ba8c436-5558-4070-bb3c-c03df8346bd6-- -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jamadagni, Rajendra INET: Rajendra.Jamadagni@espn.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).