Link to home
Start Free TrialLog in
Avatar of goodk
goodkFlag for United States of America

asked on

store procedure to save secure information like dob, ssnumber, etc..


Is there a way to store some important information so when I send the password parameter it returns the stored character string?

I am using
Microsoft SQL Server Management Studio                                    10.0.2531.0
ms sql express 8
Avatar of Bhavesh Shah
Bhavesh Shah
Flag of India image

Hi,

There not any option by passing password, you got that information on specific column.

What you can do is,

1. You can create one database user to control specific table.
   Only that user having access to table.

2. you can use encryption for hiding specific column value.

If you need more info on any one, let me know.


- Bhavesh
SOLUTION
Avatar of Ryan McCauley
Ryan McCauley
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of goodk

ASKER

thanks, guys -

So is it not possible to create an encrytion key and corresponding encryptic text?  I wanted to save incription key in column and encrypted text in the other column.  Is this not possible? if yes, how?

thanks
Sure, it's possible to do this, but why encrypt it at all if you're just going to store the key along with the data? Anybody who compromises the data will have access to the key as well, so it defeats the purpose.
ryan have a point there.
you should use the hash or encryption feature made available by the database.
Avatar of goodk

ASKER


thanks,

you are absolutely right that if someone gets hold of the data they have all the information.

ok, correct me on what I am thinking, if it is right?

I was going to use the password with the encrytion key as an added key.

I already know how to write a stored procedure to secure and verify the password.  I, however, do not know how to encrypt some thing and the get the original back.  That is what I am asking. thanks

SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of goodk

ASKER

thanks