Encryption and SSL Question

I am running MS 2003 Server with SQL Server 2000 including SP4 which I
installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent to
my question...
I am designing a web-page which sits behind an SSL...how do I encrypt my
data...i am accepting credit card and banking account information on this
page and then want to have a secure email sent to my outlook....so really
two questions here..
1. how do I encrypt data?
2. how do I send secure and/or encrypted email?
thanks
Doesn't sound like it's a SQL Server issue here.
With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems to
be a popular one) to encrypt data inside the database. SQL Server 2005 will
have encryption capabilities built in.
Network packet encryption is a "turn on/off" switch from the network
configuration utility.
Encrypting emails and SSL are not really tied to the database.
Did I misunderstand your question?
joe.
"SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
>I am running MS 2003 Server with SQL Server 2000 including SP4 which I
> installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
> SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent
> to
> my question...
> I am designing a web-page which sits behind an SSL...how do I encrypt my
> data...i am accepting credit card and banking account information on this
> page and then want to have a secure email sent to my outlook....so really
> two questions here..
> 1. how do I encrypt data?
> 2. how do I send secure and/or encrypted email?
> thanks
|||Joe,
Thanks for your response...
I was told from a developer that I can build a SQL database and the contents
inside could be encrypted. I am looking for the 'easiest, cheapest, safest'
way to store banking information from my web-page into the db.
I should have made the email portion separate also. On that note, I would
like to write a stored procedure or use SQL-NS to tell me that a a'payment'
has been made and then an email (secure using TLS, or TSL?) could be sent
out. does that make sense?
thanks for your help
"Joe Yong" wrote:

> Doesn't sound like it's a SQL Server issue here.
> With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems to
> be a popular one) to encrypt data inside the database. SQL Server 2005 will
> have encryption capabilities built in.
> Network packet encryption is a "turn on/off" switch from the network
> configuration utility.
> Encrypting emails and SSL are not really tied to the database.
> Did I misunderstand your question?
>
> joe.
>
> "SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
> news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
>
>
|||Hi
SQL Server 2000 will not encrypt it. You would have to do it in code.
SQL Server 2005 (in Beta) supports column level encryption.
Regards
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
news:512AED76-DB94-45EB-AC6A-C1BD46A40642@.microsoft.com...[vbcol=seagreen]
> Joe,
> Thanks for your response...
> I was told from a developer that I can build a SQL database and the
> contents
> inside could be encrypted. I am looking for the 'easiest, cheapest,
> safest'
> way to store banking information from my web-page into the db.
> I should have made the email portion separate also. On that note, I would
> like to write a stored procedure or use SQL-NS to tell me that a
> a'payment'
> has been made and then an email (secure using TLS, or TSL?) could be sent
> out. does that make sense?
> thanks for your help
> "Joe Yong" wrote:
|||You could use the encryption native to Windows to encrypt the FILE on disk
but it won't stop anyone from viewing the data if they get access to your
database. It only comes in handy if someone gets hold of the file. You will
need to encrypt the file using the account that runs SQL Server.
"SQL Brad" wrote:
[vbcol=seagreen]
> Joe,
> Thanks for your response...
> I was told from a developer that I can build a SQL database and the contents
> inside could be encrypted. I am looking for the 'easiest, cheapest, safest'
> way to store banking information from my web-page into the db.
> I should have made the email portion separate also. On that note, I would
> like to write a stored procedure or use SQL-NS to tell me that a a'payment'
> has been made and then an email (secure using TLS, or TSL?) could be sent
> out. does that make sense?
> thanks for your help
> "Joe Yong" wrote:
sql

Encryption and SSL Question

I am running MS 2003 Server with SQL Server 2000 including SP4 which I
installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent to
my question...
I am designing a web-page which sits behind an SSL...how do I encrypt my
data...i am accepting credit card and banking account information on this
page and then want to have a secure email sent to my outlook....so really
two questions here..
1. how do I encrypt data?
2. how do I send secure and/or encrypted email?
thanksDoesn't sound like it's a SQL Server issue here.
With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems to
be a popular one) to encrypt data inside the database. SQL Server 2005 will
have encryption capabilities built in.
Network packet encryption is a "turn on/off" switch from the network
configuration utility.
Encrypting emails and SSL are not really tied to the database.
Did I misunderstand your question?
joe.
"SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
>I am running MS 2003 Server with SQL Server 2000 including SP4 which I
> installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
> SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent
> to
> my question...
> I am designing a web-page which sits behind an SSL...how do I encrypt my
> data...i am accepting credit card and banking account information on this
> page and then want to have a secure email sent to my outlook....so really
> two questions here..
> 1. how do I encrypt data?
> 2. how do I send secure and/or encrypted email?
> thanks|||Joe,
Thanks for your response...
I was told from a developer that I can build a SQL database and the contents
inside could be encrypted. I am looking for the 'easiest, cheapest, safest'
way to store banking information from my web-page into the db.
I should have made the email portion separate also. On that note, I would
like to write a stored procedure or use SQL-NS to tell me that a a'payment'
has been made and then an email (secure using TLS, or TSL') could be sent
out. does that make sense?
thanks for your help
"Joe Yong" wrote:

> Doesn't sound like it's a SQL Server issue here.
> With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems t
o
> be a popular one) to encrypt data inside the database. SQL Server 2005 wil
l
> have encryption capabilities built in.
> Network packet encryption is a "turn on/off" switch from the network
> configuration utility.
> Encrypting emails and SSL are not really tied to the database.
> Did I misunderstand your question?
>
> joe.
>
> "SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
> news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
>
>|||Hi
SQL Server 2000 will not encrypt it. You would have to do it in code.
SQL Server 2005 (in Beta) supports column level encryption.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
news:512AED76-DB94-45EB-AC6A-C1BD46A40642@.microsoft.com...[vbcol=seagreen]
> Joe,
> Thanks for your response...
> I was told from a developer that I can build a SQL database and the
> contents
> inside could be encrypted. I am looking for the 'easiest, cheapest,
> safest'
> way to store banking information from my web-page into the db.
> I should have made the email portion separate also. On that note, I would
> like to write a stored procedure or use SQL-NS to tell me that a
> a'payment'
> has been made and then an email (secure using TLS, or TSL') could be sent
> out. does that make sense?
> thanks for your help
> "Joe Yong" wrote:
>|||You could use the encryption native to Windows to encrypt the FILE on disk
but it won't stop anyone from viewing the data if they get access to your
database. It only comes in handy if someone gets hold of the file. You will
need to encrypt the file using the account that runs SQL Server.
"SQL Brad" wrote:
[vbcol=seagreen]
> Joe,
> Thanks for your response...
> I was told from a developer that I can build a SQL database and the conten
ts
> inside could be encrypted. I am looking for the 'easiest, cheapest, safes
t'
> way to store banking information from my web-page into the db.
> I should have made the email portion separate also. On that note, I would
> like to write a stored procedure or use SQL-NS to tell me that a a'payment
'
> has been made and then an email (secure using TLS, or TSL') could be sent
> out. does that make sense?
> thanks for your help
> "Joe Yong" wrote:
>

Encryption and SSL Question

I am running MS 2003 Server with SQL Server 2000 including SP4 which I
installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent to
my question...
I am designing a web-page which sits behind an SSL...how do I encrypt my
data...i am accepting credit card and banking account information on this
page and then want to have a secure email sent to my outlook....so really
two questions here..
1. how do I encrypt data?
2. how do I send secure and/or encrypted email?
thanksDoesn't sound like it's a SQL Server issue here.
With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems to
be a popular one) to encrypt data inside the database. SQL Server 2005 will
have encryption capabilities built in.
Network packet encryption is a "turn on/off" switch from the network
configuration utility.
Encrypting emails and SSL are not really tied to the database.
Did I misunderstand your question?
joe.
"SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
>I am running MS 2003 Server with SQL Server 2000 including SP4 which I
> installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
> SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent
> to
> my question...
> I am designing a web-page which sits behind an SSL...how do I encrypt my
> data...i am accepting credit card and banking account information on this
> page and then want to have a secure email sent to my outlook....so really
> two questions here..
> 1. how do I encrypt data?
> 2. how do I send secure and/or encrypted email?
> thanks|||Joe,
Thanks for your response...
I was told from a developer that I can build a SQL database and the contents
inside could be encrypted. I am looking for the 'easiest, cheapest, safest'
way to store banking information from my web-page into the db.
I should have made the email portion separate also. On that note, I would
like to write a stored procedure or use SQL-NS to tell me that a a'payment'
has been made and then an email (secure using TLS, or TSL') could be sent
out. does that make sense?
thanks for your help
"Joe Yong" wrote:
> Doesn't sound like it's a SQL Server issue here.
> With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems to
> be a popular one) to encrypt data inside the database. SQL Server 2005 will
> have encryption capabilities built in.
> Network packet encryption is a "turn on/off" switch from the network
> configuration utility.
> Encrypting emails and SSL are not really tied to the database.
> Did I misunderstand your question?
>
> joe.
>
> "SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
> news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
> >I am running MS 2003 Server with SQL Server 2000 including SP4 which I
> > installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
> > SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent
> > to
> > my question...
> >
> > I am designing a web-page which sits behind an SSL...how do I encrypt my
> > data...i am accepting credit card and banking account information on this
> > page and then want to have a secure email sent to my outlook....so really
> > two questions here..
> >
> > 1. how do I encrypt data?
> > 2. how do I send secure and/or encrypted email?
> >
> > thanks
>
>|||Hi
SQL Server 2000 will not encrypt it. You would have to do it in code.
SQL Server 2005 (in Beta) supports column level encryption.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
news:512AED76-DB94-45EB-AC6A-C1BD46A40642@.microsoft.com...
> Joe,
> Thanks for your response...
> I was told from a developer that I can build a SQL database and the
> contents
> inside could be encrypted. I am looking for the 'easiest, cheapest,
> safest'
> way to store banking information from my web-page into the db.
> I should have made the email portion separate also. On that note, I would
> like to write a stored procedure or use SQL-NS to tell me that a
> a'payment'
> has been made and then an email (secure using TLS, or TSL') could be sent
> out. does that make sense?
> thanks for your help
> "Joe Yong" wrote:
>> Doesn't sound like it's a SQL Server issue here.
>> With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems
>> to
>> be a popular one) to encrypt data inside the database. SQL Server 2005
>> will
>> have encryption capabilities built in.
>> Network packet encryption is a "turn on/off" switch from the network
>> configuration utility.
>> Encrypting emails and SSL are not really tied to the database.
>> Did I misunderstand your question?
>>
>> joe.
>>
>> "SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
>> news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
>> >I am running MS 2003 Server with SQL Server 2000 including SP4 which I
>> > installed yesterday. In addition, I have also installed SOAP Toolkit
>> > 3.0,
>> > SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is
>> > relavent
>> > to
>> > my question...
>> >
>> > I am designing a web-page which sits behind an SSL...how do I encrypt
>> > my
>> > data...i am accepting credit card and banking account information on
>> > this
>> > page and then want to have a secure email sent to my outlook....so
>> > really
>> > two questions here..
>> >
>> > 1. how do I encrypt data?
>> > 2. how do I send secure and/or encrypted email?
>> >
>> > thanks
>>|||You could use the encryption native to Windows to encrypt the FILE on disk
but it won't stop anyone from viewing the data if they get access to your
database. It only comes in handy if someone gets hold of the file. You will
need to encrypt the file using the account that runs SQL Server.
"SQL Brad" wrote:
> Joe,
> Thanks for your response...
> I was told from a developer that I can build a SQL database and the contents
> inside could be encrypted. I am looking for the 'easiest, cheapest, safest'
> way to store banking information from my web-page into the db.
> I should have made the email portion separate also. On that note, I would
> like to write a stored procedure or use SQL-NS to tell me that a a'payment'
> has been made and then an email (secure using TLS, or TSL') could be sent
> out. does that make sense?
> thanks for your help
> "Joe Yong" wrote:
> > Doesn't sound like it's a SQL Server issue here.
> >
> > With SQL Server 2000, you'll need a 3rd party solution (Protegrity seems to
> > be a popular one) to encrypt data inside the database. SQL Server 2005 will
> > have encryption capabilities built in.
> >
> > Network packet encryption is a "turn on/off" switch from the network
> > configuration utility.
> >
> > Encrypting emails and SSL are not really tied to the database.
> >
> > Did I misunderstand your question?
> >
> >
> > joe.
> >
> >
> > "SQL Brad" <SQLBrad@.discussions.microsoft.com> wrote in message
> > news:F7988D30-6E33-4E8C-AEE5-A0031952AE43@.microsoft.com...
> > >I am running MS 2003 Server with SQL Server 2000 including SP4 which I
> > > installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
> > > SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent
> > > to
> > > my question...
> > >
> > > I am designing a web-page which sits behind an SSL...how do I encrypt my
> > > data...i am accepting credit card and banking account information on this
> > > page and then want to have a secure email sent to my outlook....so really
> > > two questions here..
> > >
> > > 1. how do I encrypt data?
> > > 2. how do I send secure and/or encrypted email?
> > >
> > > thanks
> >
> >
> >

Encryption and SSL and Email

I am running MS 2003 Server with SQL Server 2000 including SP4 which I
installed yesterday. In addition, I have also installed SOAP Toolkit 3.0,
SQLXML 3.0 SP3 and SQLNS 2.0 SP1...not sure how much of this is relavent to
my question...
I am designing a web-page which sits behind an SSL...how do I encrypt my
data...i am accepting credit card and banking account information on this
page and then want to have a secure email sent to my outlook....so really
two questions here..
1. how do I encrypt data?
2. how do I send secure and/or encrypted email?
thanksConsider posting this question to security newsgroups. There are no inbuilt
data encrytion routines in SQL Server, so if will have to roll out your own
functions. You can utilize the Cryptography APIs to come up with your own.
Regarding the emails, AFAIK xp_sendmail cannot send encrypted emails from
SQL Server.
Anith

Encrypting confidential data including foreign keys

Hi,
I am currently working on a project for a client. The project is to create
an intranet site to maintain confidential employee data. There is a master
employee table, containing name, date of birth etc. However, the table also
links to some look-up tables, such as grades, ethnicity, citizenship etc.
I was wondering what was the best solution for encrypting the data in SQL
Server 2000, so that someone with database access cannot read the
confidential data. Encrypting the free text data is fairly simple, but I am
not sure how to encrypt the foreign keys while preserving referential
integrity.
For example, if an employee has citizenship = 5, it is quite easy to workout
the citizenship from the look-up table. Even if 5 is encrypted to ABC, it is
quite easy to see the pattern on the table.
Also, the client wants to do some reporting on the tables, so run queries
with filters (such as Citizenship=UK) on encrypted data.
We looked at xpcrypt, but it appears to create automatically a view
containing the decrypted data for the duration of the SQL session, so I am
not sure how appropriate it is for a web application, maintaining pretty
much a constant connection/session to the DB.
Any advice welcome!
Thanks,
TomOn Fri, 28 Oct 2005 21:29:31 +0100, "Tom" <Tom@.nospam.com> wrote:

> but I am
>not sure how to encrypt the foreign keys while preserving referential
>integrity.
>
Hmm, I doubt you'll find any encryption product that can encrypt a
foreign key column.
Scott
http://www.OdeToCode.com/blogs/scott/|||Hi,
well try our software for SQL server side encryption for that , visit and
refer :
http://database-encryption.com/ it will serve your purpose
Regards
--
Andy Davis
Activecrypt Team
---SQL Server Encryption Software
http://www.activecrypt.com
"Tom" wrote:

> Hi,
> I am currently working on a project for a client. The project is to create
> an intranet site to maintain confidential employee data. There is a master
> employee table, containing name, date of birth etc. However, the table als
o
> links to some look-up tables, such as grades, ethnicity, citizenship etc.
> I was wondering what was the best solution for encrypting the data in SQL
> Server 2000, so that someone with database access cannot read the
> confidential data. Encrypting the free text data is fairly simple, but I a
m
> not sure how to encrypt the foreign keys while preserving referential
> integrity.
> For example, if an employee has citizenship = 5, it is quite easy to worko
ut
> the citizenship from the look-up table. Even if 5 is encrypted to ABC, it
is
> quite easy to see the pattern on the table.
> Also, the client wants to do some reporting on the tables, so run queries
> with filters (such as Citizenship=UK) on encrypted data.
> We looked at xpcrypt, but it appears to create automatically a view
> containing the decrypted data for the duration of the SQL session, so I am
> not sure how appropriate it is for a web application, maintaining pretty
> much a constant connection/session to the DB.
> Any advice welcome!
> Thanks,
> Tom
>
>|||http://www.sqlservercentral.com/col...oolkitpart1.asp
You can't really encrypt foreign key columns to any useful degree, since
they'll have to be encrypted on the referenced table as well and once again
you've got an easily visible link... What you can do is encrypt the
descripition data in the referenced table to make it unreadable. So instead
of storing "NATIVE AMERICAN" in plain text on the ethnicity table, you could
encrypt that description and store it.
"Tom" <Tom@.nospam.com> wrote in message
news:raydnZJ8BOyXF__eRVnyjw@.pipex.net...
> Hi,
> I am currently working on a project for a client. The project is to create
> an intranet site to maintain confidential employee data. There is a master
> employee table, containing name, date of birth etc. However, the table
> also links to some look-up tables, such as grades, ethnicity, citizenship
> etc.
> I was wondering what was the best solution for encrypting the data in SQL
> Server 2000, so that someone with database access cannot read the
> confidential data. Encrypting the free text data is fairly simple, but I
> am not sure how to encrypt the foreign keys while preserving referential
> integrity.
> For example, if an employee has citizenship = 5, it is quite easy to
> workout the citizenship from the look-up table. Even if 5 is encrypted to
> ABC, it is quite easy to see the pattern on the table.
> Also, the client wants to do some reporting on the tables, so run queries
> with filters (such as Citizenship=UK) on encrypted data.
> We looked at xpcrypt, but it appears to create automatically a view
> containing the decrypted data for the duration of the SQL session, so I am
> not sure how appropriate it is for a web application, maintaining pretty
> much a constant connection/session to the DB.
> Any advice welcome!
> Thanks,
> Tom
>|||you can use built in database security to accomplish your goal|||What SQL 2000 function is that?
"Alexander Kuznetsov" <AK_TIREDOFSPAM@.hotmail.COM> wrote in message
news:1147967032.280063.193550@.u72g2000cwu.googlegroups.com...
> you can use built in database security to accomplish your goal
>