Re: Securing fields

I would advise not storing credit card numbers in your database at all, that
way it's impossible for any one to hack in and get them. After the credit
card number is processed, throw it away.
If you MUST keep it, definitely encrypt it. SQL Server 2005 has built in
encryption functions you can use.

Otherwise you might choose to use some .NET 1.x encryption techniques, such
as these:
http://www.aspnetpro.com/NewsletterArticle/2003/10/asp200310kd_l/asp200310kd_l.asp
http://www.fawcette.com/vsm/2003_01/magazine/columns/gettingstarted/

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://SteveOrr.net



"David Lozzi" <dlozzi@xxxxxxxxxxxxx> wrote in message
news:%23Z0Hz9qiGHA.3780@xxxxxxxxxxxxxxxxxxxxxxx
Howdy,

I'm planning on storing credit card numbers in my SQL database for online
ecommerce. Whats the best scenario to secure the data in SQL? Can I
encrypt the field so if browsing table data it won't appear? Of course i'm
using SSL for capturing the data from the website, sending it SQL. the SQL
database has limited logins and access but I want to protect this
information as best as I can.

Thanks,

--
D a v i d L o z z i
Data & Web Technology Specialist
Delphi Technology Solutions, Inc.
Wilmington, MA
dlozzi@(remove this)delphi-ts.com - www.delphi-ts.com



.

Relevant Pages

  • Re: SQL Server 2000 / 2005 Encryption
    ... You require 3rd-party tools even when using the native SQL 2005 encryption ... to encrypt your SSL connections will be different. ... But you mentioned Excel cannot decrypt this information. ... Requests to the web services would connect to the database and invoke ...
    (microsoft.public.sqlserver.security)
  • RE: Encrypt data - SQL Server 2000
    ... > I suppose I've missed the intent of encryption within a SQL db. ... > would you want to encrypt data inside a database?. ... Does the server admin necessarily need to ...
    (Focus-Microsoft)
  • Re: Ecrypting a database
    ... I am not sure why you want to encrypt the folder. ... to block the user from listing or viewing your database files. ... Books Online for SQL Server SP3 at ...
    (microsoft.public.sqlserver.security)
  • Re: Encryption
    ... He wants solid docs saying that SQL Server can't encrypt a database? ...
    (microsoft.public.sqlserver.security)
  • RE: Encrypt data - SQL Server 2000
    ... but my SQL guys are my ASP programmers. ... Encrypt data - SQL Server 2000 ... You need to educate your progammers on how to encrypt it, ... Encrypting data on a database is tricky. ...
    (Focus-Microsoft)