OraFAQ Forum: Security » Transparent Data Encryption in Oracle 10g

Home » RDBMS Server » Security » Transparent Data Encryption in Oracle 10g (Oracle 10g , Solaris 10)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Transparent Data Encryption in Oracle 10g [message #430187]

Mon, 09 November 2009 07:00

gaganzk
Messages: 36
Registered: May 2008

Member

Hi All,

Need your input regarding one scenario while using TDE .

We require encryption on column level but only for selected values like the value contains certain character only* e.g starts with A or ends with F*.

Let me know if its possible using any standard procedure.

Regards,
Gagan Deep kaushal

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430189 is a reply to message #430187]

Mon, 09 November 2009 07:04

Michel Cadot
Messages: 68712
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Search for FGAC (Fine-Grained Access Control) or VPD (Virtual Private Database or RLS (Row Level Security) (all are synonymous).

You actually don't need the data are encrypted but they cannot be seen.
TDE is made against physical thefts not against SQL accesses.

Regards
Michel

[Updated on: Mon, 09 November 2009 07:05]

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430194 is a reply to message #430187]

Mon, 09 November 2009 07:14

gaganzk
Messages: 36
Registered: May 2008

Member

Hi Michel,

Thanks for your reply. I am able to understand your logic.

But i have this type of scenario :

1) Have only one database user that will interact with application.
2) Need to encrypt data on column level but not all data .

Full encryption is working fine with TDE .Just give an idea if its possible using some function/procedure aside TDE is also mandatory .

Regards,
Gagan Deep Kauhsal

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430197 is a reply to message #430194]

Mon, 09 November 2009 07:45

Michel Cadot
Messages: 68712
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Do you need to encrypt the data inside the file or do you need that anyone but allowed user can read the data from SQL or something else?
Without a clear need impossible to answer.

TDE encrypts all the values of a column. It is a column property.

Regards
Michel

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430201 is a reply to message #430197]

Mon, 09 November 2009 07:52

gaganzk
Messages: 36
Registered: May 2008

Member

Hi Michel,

I have only one db user and i want to encrypt particular column's data, but with exception i.e. i dont want to encrypt column data which will start with "B" or contain "has".

I know using TDE its not possible to encrypt half column data.

But still want to know is there any way to do this using TDE only?

Thanks for your quick response.

Regards,
Gagan Deep Kaushal

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430204 is a reply to message #430201]

Mon, 09 November 2009 08:21

Michel Cadot
Messages: 68712
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Quote:

and i want to encrypt particular column's data

Why? why? why? This is my question.

Regards
Michel

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430206 is a reply to message #430204]

Mon, 09 November 2009 08:27

gaganzk
Messages: 36
Registered: May 2008

Member

Hi Michel,

My scenario is like this :

Have one application user that is talking with oracle and number of users accessing application .So using application all users can display data.SO i want to hide/encrypt some critical item name, rest item name need not to be encrypt as need to read for processing.

That is all i am looking for.

Regards,
Gagan Deep Kaushal

Report message to a moderator

Re: Transparent Data Encryption in Oracle 10g [message #430209 is a reply to message #430206]

Mon, 09 November 2009 08:31

Michel Cadot
Messages: 68712
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Quote:

So using application all users can display data

TDE does nothing about this.

Quote:

SO i want to hide/encrypt some critical item name

You want to hide not to encrypt.
In this case (one account shared by many users and shown data is different for each) VDP/FGAC is the way to do it.

Regards
Michel

Report message to a moderator