Re: Securing Data

From: Don Grover (dgrover_at_assoft.com.au)
Date: 01/28/05 

Date: Fri, 28 Jan 2005 13:46:59 +1100

Create a dll that can be used by asp, have the dll write a crc of your
sensitive data to a secondary table.
Or you can encrypt a copy of sensitive data by calling function in dll and
write that to secondary table.

In your asp just check for a match from table and dll, if you want to be
smart put the date as last 10 characters in crc'd or encrypted data and just
strip out.

Your asp app could then display a valid data gif along with date from
encrypted data

Regard
Don Grover

"Robert Cohen" <dont@want.spam.com> wrote in message
news:OhVL9JJBFHA.3596@TK2MSFTNGP12.phx.gbl...
> Hello All,
>
> Our organization is developing an electronic medical record for our
> organization using ASP and SQL. The issue we are stuck at is how to
> ensure the data hasn't been tampered. Obviously we can protect the data
> from our regular users. But how do you protect it from the network
> administrators? We want to be able to attest in court that the database
> hasn't been modified. So I am curious how others are handling this issue.
> I see all this stuff like digitial certificates and things like that, but
> am unsure what is best (ideally we don't want have to buy certificates for
> each entry into the database).
>
> Please help.
>
> --
> Robert Cohen
> A legend in his own mind
> --
>
>

Relevant Pages

  • Re: can i load my own dlls into services.exe, if how
    ... ISAPI extensions and ISAPI filters can be useful. ... > DLL via JScript 'new ActiveXObject' or the VBscript equivalent in your ASP ...
    (microsoft.public.windowsce.app.development)
  • ASP / ASP.NET
    ... Ich habe folgendes Vorgehen mit ASP erfolgreich getestet: ... Eine Active-X DLL übernimmt die Abfrage der ... (hat nichts mit dem Request aus ASP zu tun). ... es ist effizient und recht schnell weil die Abfrage der Datenbank ...
    (microsoft.public.de.german.entwickler.dotnet.asp)
  • Re: Registering a .NET assembly for COM interop access from an ASP page
    ... If I put my DLL in ... problems with ASP pages calling a strongly named assembly, ... Pointer to a null-terminated string that specifies the full path to ... So the IIS process or dllhost will check the lpCurrentDirectory in their ...
    (microsoft.public.dotnet.framework.interop)
  • Re: returning multiple recordsets from VB to ASP
    ... stored procedure and into an intermediate VB DLL: ... more awkward to do in SQL than in VB and the stored procedure is getting ... The ASP page anways puts the data into arrays, ...
    (microsoft.public.data.ado)
  • Re: if I encrypt key data why do I want or need SSL?
    ... I could encrypt the ... name DLL responsible for all security aspects, ... Its trivial to decompile ANY .net ... For someone to send your web service they have to know the key? ...
    (microsoft.public.dotnet.security)