Hiding/Encrpting Data from DBA/Developers

Hi,

We have been asked to implement the company wide annual review system and are faced with a situation where the data needs to be hidden from the DBA as well as the developers.

Any ideas or pointers to the right direction would be of immense help.

Thanks
Ron

you cant hide data from dba's - you can only encrypt it

Quote:

---

Originally Posted by davey23uk

you cant hide data from dba's - you can only encrypt it

---

If the DBA is encrypting the data he can see it if he wants to as he would be knowing how to decrypt it. Please correct me if I am wrong as I never had to implement encryption n the past.

-Ron

Quote:

---

Originally Posted by ronnie

If the DBA is encrypting the data he can see it if he wants to as he would be knowing how to decrypt it. Please correct me if I am wrong as I never had to implement encryption n the past.

-Ron

---

We can also put it this way:
One who insert's the data can encrypt the data which may not be seen even by the DBA's. Needs Oracle advanced security incorporating Kerberos and other security protocols(if i am right).

Once a banking client came to me asking to decrypt the invisible data which was encrypted by the security manager(who quit!!)

Remember when you encrypt data with oracle, you have a way to preserve the encryption key. If you lose your key you lose your access.

Big Bucks !!!

Sam

Hire a trustworthy DBA?

Quote:

---

Originally Posted by ronnie

Hi,

We have been asked to implement the company wide annual review system and are faced with a situation where the data needs to be hidden from the DBA as well as the developers.

Any ideas or pointers to the right direction would be of immense help.

Thanks
Ron

---

How do you encrypt paper doc?

Tamil

Quote:

---

Originally Posted by tamilselvan

How do you encrypt paper doc?
l

---

They probably don't. But it is trivial to deny access to the confidential paper docs to anyone who is not authorized to see them, no?

They can't deny access to the confidential data in the database from DBAs, so the only option is to make those confidential data "readable" for the authorized database users only. And data encription is the way to go in such situation. Only the authorized users will have the access to the encription keys, regardless of wether they are DBAs or not.

Pardon me from being silly here bit isnt it the DBA who will encrypt the data in the first place and would also know how to decrypt it.

Quote:

---

Originally Posted by jmodic

They probably don't. But it is trivial to deny access to the confidential paper docs to anyone who is not authorized to see them, no?

They can't deny access to the confidential data in the database from DBAs, so the only option is to make those confidential data "readable" for the authorized database users only. And data encription is the way to go in such situation. Only the authorized users will have the access to the encription keys, regardless of wether they are DBAs or not.

---

doesnt have to - can be the application

Quote:

---

Originally Posted by ronnie

Pardon me from being silly here bit isnt it the DBA who will encrypt the data in the first place and would also know how to decrypt it.

---

Quote:

---

Originally Posted by davey23uk

doesnt have to - can be the application

---

Still you can hide data from a DBA.

The process of encryption is have to be a chain reaction as long as there is a key involved. Mostly the encription is carred out at the application level. But again if the application code is again not encrypted, then that has to be encrypted. As you can see a chain of operation has to be carried out to save things.

Thanx,
Sam