encrypting cc in db

From: Patrick (ptully_at_avatartechnology.com)
Date: 11/30/04


Date: 30 Nov 2004 09:37:20 -0800

Hey, I was wondering if someone out there could provide some
suggestions. Here is the situation. I have a client that wants to
store CC numbers in the database and mannually process it themselves
on the CC terminal. We have php/mysql available to us. Here are a
couple suggestions I have come up with so far, but am not pleased with
any of them:

1) encrypt CC in database with key from the code when user checksout.
Then retrieve it later from key in code or having admin mannually type
in pw.

Problem: if the code is comprimised so is the database. Not good.

2) create a separate php file that contains the key using zend
encoder. Then call this key from the php code when encrypting and
decrypting db.

Seems resonable - but then we're relying on 3rd party solution.

3) Any others???????

-Pat-



Relevant Pages

  • Re: Database encryption.
    ... > I am writing application that encrypt paradox type database with IDEA ... which is used to mark end of string. ...
    (sci.crypt)
  • Re: 2 Keys decrypts same message
    ... > I don't want to encrypt each row twice (with a admin password ... Keeping the database secret. ... lots of disk storage and high speed LAN (Local Area ...
    (sci.crypt)
  • Re: SSN encryption
    ... >> We want to encrypt social security numbers in a database. ... address and SSN are always excluded. ... exposed if there were a breakdown in the other security precautions. ...
    (sci.crypt)
  • Re: Secure data in SQL Server 2005 Mobile Edition
    ... What is the difference between encryption with and without the> encrypt ... >> thing to try is not checking the encrypt option - the database still>> gets ... >>> I am trying to encrypt a database on SQL Server 2005 on a desktop ...
    (microsoft.public.sqlserver.ce)
  • Re: Secure data in SQL Server 2005 Mobile Edition
    ... We have decided to go ahead with encrypted the entire database for now, ... replicate this database on SQL Server Mobile Edition on a mobile device. ... for my database connection string and checked the encrypt option. ...
    (microsoft.public.sqlserver.ce)