Solved

Is this a safe way of storing and encrypting files?

Posted on 2012-04-04
3
272 Views
Last Modified: 2012-04-04
I have a requirement to upload medical files and encrypt them

I'm already encrypting some other columns and they're varbinary. So, I know varbinary can be encrypted.

Should I use this method :  (filestream)
http://weblogs.asp.net/aghausman/archive/2009/03/16/saving-and-retrieving-file-using-filestream-sql-server-2008.aspx

OR should I encrypt the file in the code, like this:
http://support.microsoft.com/kb/307010
0
Comment
Question by:Camillia
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 15

Accepted Solution

by:
Deepak Chauhan earned 500 total points
ID: 37808338
Application level encryption is much safer than file stream like

http://support.microsoft.com/kb/307010
0
 
LVL 23

Expert Comment

by:wdosanjos
ID: 37808373
You should consider using SQL Server encryption features.  I find it more flexible to maintain encrypted data that way.

How to: Encrypt a Column of Data
http://msdn.microsoft.com/en-us/library/ms179331%28v=sql.100%29.aspx

SQL Server Encryption
http://msdn.microsoft.com/en-us/library/bb510663%28v=sql.100%29.aspx

I hope this helps.
0
 
LVL 7

Author Comment

by:Camillia
ID: 37808472
>> Application level encryption is much safer than file stream like
why?
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Naughty Me. While I was changing the database name from DB1 to DB_PROD1 (yep it's not real database name ^v^), I changed the database name and notified my application fellows that I did it. They turn on the application, and everything is working. A …
Use this article to create a batch file to backup a Microsoft SQL Server database to a Windows folder.  The folder can be on the local hard drive or on a network share.  This batch file will query the SQL server to get the current date & time and wi…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question