goodk
asked on
store procedure to save secure information like dob, ssnumber, etc..
Is there a way to store some important information so when I send the password parameter it returns the stored character string?
I am using
Microsoft SQL Server Management Studio 10.0.2531.0
ms sql express 8
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks, guys -
So is it not possible to create an encrytion key and corresponding encryptic text? I wanted to save incription key in column and encrypted text in the other column. Is this not possible? if yes, how?
thanks
So is it not possible to create an encrytion key and corresponding encryptic text? I wanted to save incription key in column and encrypted text in the other column. Is this not possible? if yes, how?
thanks
Sure, it's possible to do this, but why encrypt it at all if you're just going to store the key along with the data? Anybody who compromises the data will have access to the key as well, so it defeats the purpose.
ryan have a point there.
you should use the hash or encryption feature made available by the database.
you should use the hash or encryption feature made available by the database.
ASKER
thanks,
you are absolutely right that if someone gets hold of the data they have all the information.
ok, correct me on what I am thinking, if it is right?
I was going to use the password with the encrytion key as an added key.
I already know how to write a stored procedure to secure and verify the password. I, however, do not know how to encrypt some thing and the get the original back. That is what I am asking. thanks
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks
There not any option by passing password, you got that information on specific column.
What you can do is,
1. You can create one database user to control specific table.
Only that user having access to table.
2. you can use encryption for hiding specific column value.
If you need more info on any one, let me know.
- Bhavesh