UtterAccess.com
X   Site Message
(Message will auto close in 2 seconds)

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Encryption    
 
   
jacmac
post May 18 2006, 12:47 PM
Post #1

UtterAccess Veteran
Posts: 394
From: Ohio U.S.A.



Hi
Let me start by explaining my setup
I have a sSQL2000 back-end and an Access front-end. There is going to be about 8 users using this program. There is 3 fields in one of the tables that only 3 of the users will be aloud to see. So I would like to have this data encrypted so if anyone else tries to view the data, either from Access or SQL they can't. And when they open the form the data will be decrypted.

Does anyone know how I would go about doing this?


Edited by: jacmac on Thu May 18 13:48:03 EDT 2006.

Edited by: jacmac on Thu May 18 13:49:16 EDT 2006.
Go to the top of the page
 
+
truittb
post May 18 2006, 01:03 PM
Post #2

Retired Moderator
Posts: 13,544
From: Texas (Is there anywhere else?)



You probably will be better served using SQL Servers's Security and restrict who can see the three fields from within SQL Server.
Go to the top of the page
 
+
fkegley
post May 18 2006, 01:15 PM
Post #3

UtterAccess VIP
Posts: 23,583
From: Mississippi



Put the sensitive data in its own table in a one-to-one relationship with the table it is currently in. Put security on this table.
Go to the top of the page
 
+
cfletch
post May 18 2006, 01:53 PM
Post #4

UtterAccess Veteran
Posts: 418
From: Waterbury, CT



I'd also recommend using user-level security in the database (or tables or views, like Frank said), though you could write a stored procedure to encrypt and decrypt data as it comes through.
Go to the top of the page
 
+
jacmac
post May 18 2006, 02:02 PM
Post #5

UtterAccess Veteran
Posts: 394
From: Ohio U.S.A.



One of my problems is I'm developing this db and I also can't have the ability to view the data.
Our MIS department is the dbo and they are not allowed to see this data. Only the users that enter the data can see it, and there is 3 of them each on their own pc.
Go to the top of the page
 
+
fkegley
post May 18 2006, 02:15 PM
Post #6

UtterAccess VIP
Posts: 23,583
From: Mississippi



Perhaps you could walk one of those who is allowed to see it thru the process of making a table out of the sensitive data and linking it to the other table.

Edited by: fkegley on Thu May 18 15:15:53 EDT 2006.
Go to the top of the page
 
+
Swatz
post May 19 2006, 10:31 AM
Post #7

UtterAccess VIP
Posts: 1,292
From: Manitowoc, WI



You could develop your own simple encryption method or look at the MS cryptogrpahy APIs (I am not familiar with these).

Simple encryption method would be to walk through each character change it to it's asccii value add 1 to the value then save this value into a new string and save that to the database. To decrypt would be the exact opposite.

I don't know what level of encryption you are trying to obtain.

I have my own encrytption routines which I developed, but they are written in vb.net.

Frank
Go to the top of the page
 
+

Thank you for your support! Reply to this topicStart new topic

Jump To Forum:
 



RSS Go to Top  ·  Lo-Fi Version Time is now: 19th June 2013 - 11:26 AM