Data encryption

From: Brian Cidern (brian.cidern@noemail.please)
Date: 11/01/02 

From: "Brian Cidern" <brian.cidern@noemail.please>
Date: Fri, 1 Nov 2002 14:40:53 -0800

Hi Shamim.
I've done this. End users would provide credit card
information via HTTPS. On the server, the data would be
encrypted and stored in a DB. The site owners could then
pull the encrypted data across an HTTP connection and
decrypt the data locally inside their firewall.

But, in order to encrypt the data, I wrote a VB COM+
object, implementing the MS CryptoAPI's. Actually, I wrote
two. One DLL encrypted, the other decrypted. The
encrypting DLL sat on the web server, the decrypting DLL
sat in-house and was called by a local APP. The encrypted
data was plain text, so storing it in a VarChar() field
worked fine (CHAR is definitely no good for this method).
Since this was distributed to the client, it was
imperative to make sure the encryption key was identical
when compiled into both DLL's.

Hope this offers some insight.

Brian

>-----Original Message-----
>HI All,
> SQL 7.0 / 2000
>
>I want to know , what is the best way to store
information like Credit Card
>numbers in database.
>Is there any options to encrypt and store it.
>
>Thanks
>Shamim
>
>
>.
>

Relevant Pages

  • Re: Is In-Browser Encryption Safe?
    ... Obtaining a digital certificate for your web server will encrypt the online order form. ... A little bit difficult is to issue your customer a digital ID to encrypt email, maybe PGP will do the trick too. ... protect the credit card number. ...
    (Security-Basics)
  • Re: A cryptography solution for a client/server winforms app
    ... good idea if you want to learn crypto. ... you control both the client and server, you don't even need to use a ... code the client to ignore certificate trust errors. ... encrypt the memory stream. ...
    (microsoft.public.dotnet.security)
  • Re: A cryptography solution for a client/server winforms app
    ... You could use a self-signed cert deployed with the server ... code the client to ignore certificate trust errors. ... generate a hash value for the data in the memory stream. ... encrypt the memory stream. ...
    (microsoft.public.dotnet.security)
  • Re: Encrypted files do they work for backups?
    ... I'm going to test it out myself on my own test SBS Server. ... >>If I use the administrator account, and I encrypt it EFS on a External ... >>> format you need the private key to decrypt the files ... do you have the recovery agent Encrypting File ...
    (microsoft.public.windows.server.sbs)
  • Re: How can I encrypt files on a HTTPS file server?
    ... I know that the HTTPS session is clear text HTTP travelling over a secure ... I wrote encrypt files. ... The folders and files appear just like local ... I encrypted one folder on the server, but then I can't neither read nor ...
    (microsoft.public.windows.server.networking)