Approach on the data masking

Hello

My database is Oracle 10.2.0.4 on Solaris 8. I have a very sensitive area in my database which should be hidden. I mean - field - credit card number - should be stored hidden as same s/n can not see directly from the database by select < nom_de_colonne > in the table. The real value are replaced with hard to understand the type of value. The field is defined as VARCHAR2 (11) right now - as of now, it is stored in plain text, I need to change.

Can help on what would be the right approach. I am for this task, not to worry about data etc. - Transparent encryption encryption at the level os - the scope of my task ETC is to ensure that no one can see the actual data from sqlplus. -do not even DBA. and application can show to everyone - I'm not you worry too much about it. But the data stored in db must be little hidden.

What would be a good approach to this topic? I've read about dbms_crypto but the column that stores the encrypted data is the RAW data type. It seems that involving a lot of overhead in maintenance. Can one come up with own masking system and that would be good or is there a best practice on what can help?

Thank you

Published by: orausern on June 14, 2011 11:52

Published by: orausern on June 14, 2011 11:53

Published by: orausern on June 14, 2011 11:55

Yes, it restricts access to the data. But as I said earlier, this is what it looks like you really want to do. You want to allow only one type of session to view data (sessions created by your application). You want to prevent other types of sessions to see the data (sessions created by developers using SQL * more). You can encode any restriction you would like in your policy VPD.

Justin

Tags: Database

Similar Questions

  • Simple function/procedure in the data mask

    Hello
    Y at - it a simple method to hide the data.

    I have data stored in the tables of my base. I need to create a flatfile and send these data to the other Dept. But there are some important data like credit card, first name and last name must be masked when sending outbound flat file.

    What I use dbms_crypto for this or other simple methods are there for a time hiding?
    If I use dbms_crypto and if I have a column x varchar2 (100), will I get similarly data length varchar2 (100) after masking?

    Thank you
    Manoi.

    Well, you could do something like this:

    SQL> select t.first_name
      2  ,      t.last_name
      3  ,      lpad('*', length(t.first_name), '*') masked_first_name
      4  ,      lpad('*', length(t.last_name), '*') masked_last_name
      5  from   hr.employees t
      6   where  rownum <=5;
    
    FIRST_NAME           LAST_NAME                 MASKED_FIRST_NAME         MASKED_LAST_NAME
    -------------------- ------------------------- ------------------------- -------------------------
    Ellen                Abel                      *****                     ****
    Sundar               Ande                      ******                    ****
    Mozhe                Atkinson                  *****                     ********
    David                Austin                    *****                     ******
    Hermann              Baer                      *******                   ****
    
  • How always display the date with taskbar buttons activated in widows 8?

    It's got to be average, just to be there. Even using the buttons small taskbar, it is actually enough space to have always the date and stacked. I would be well with them, next to each other also. I don't really understand why the date masks even as it would fit really well. I'm fine with the help of a third party program if necessary. I already have the classic interface installed because microsoft somehow forgot to add the menu start Windows 8.

    There are several strange suggestions and wonderful here for you to play with.  Make sure that you first create a system restore point.

    Windows 7 - display date using small icons
    http://superuser.com/questions/89628/Windows-7-display-date-using-small-icons

    http://www.Google.com.au/search?q=use+small+taskbar+but+have+date+and+time&SourceID=IE7&RLS=com.Microsoft:-to THE: IE-address & ie = & oe = & gws_rd = cr & redir_esc = & ei = 4L7sUaPiKKWSiQe2_IFQ

  • Oracle Data Masking Pack with Oracle Standard Edition

    Hello
    I found on the Oracle data masking Pack in the oracle web site:

    https://shop.Oracle.com/pls/ostore/f?p=dstore:product:3439101311204935:no:RP, 6:P6_LPI, P6_PROD_HIER_ID:4509221213031805719914, 114180807059101824910944 & tz = - 5:00

    I would like to know if the data masking Pack Oracle can work with Oracle Standard Edition, which is the license we have in my office. We don't plan to upgrade to Oracle Enterprise Edition.

    I know that Oracle Enterprise Edition with the functionality of datamasking. Standard Edition does not.

    I asked this question here because I chat with an agent of sale to Oracle's web site, but has not answered my question.

    Published by: user521219 on November 17, 2011 11:20

    Yes, it's an add-on but only in Enterprise Edition.

    Read this book to see what functions are standard and optional:

    http://www.Oracle.com/us/products/database/039449.PDF

  • Hide the Data - Format library

    Experts,

    When you use the option "Column of the Table" in library Format, what it means and what is its role?

    Please let me know.

    Thank you

    General response: the 'formal library' is related to the 'data masking Pack' and it is the repository of the masks of format that have been defined. These masks can then be applied when you use the masking of data, sensitive, mask data.

    To the original poster: as I understand it, "Column of the Table" option indicates that the source of the data mask will be rather than, say, a function that generates a column of table data.

    You can find a walkthrough OTN where a table column is used here:

    http://www.Oracle.com/WebFolder/technetwork/tutorials/OBE/em/emgc10205/data_masking/datamask.htm

    Maybe this helps a little,

    Mark

  • Best approach for the transmission of data and images

    We you write an app that will allow the user to take a picture of a document and enter a few bits of information about the document and then send it to our server. It is a mobile extension to a larger system of document management to back office we develop in-house so the intention of this BB app is not not to distribute to the masses.

    What is the most practical approach to transmit data and images captured on our server?

    -FTP - fooled with it some and a pain

    -WebService - did not attempt

    -Send an email with the picture attached - seems to work very well

    Is there another approach, should I consider?

    If you do not already things that communicates to the Server backend, e-mail is probably the easiest way.  Crosses all the issues of the segmentation of the image that you would have to do with the Web Service or FTP.

  • With EM data masking and other utilities of security features available within the DB package

    Hello

    Please let me know your experience of the difference between EM data masking Pack and other security elements such as writing, available in the database Vault.

    Kind regards

    VN

    Hide data are used when you have to clone the database of production for developers. Its purpose is to sensitive data mask in the clone database and you can use several formats of masking (numbers random, random strings, shuffle of data, etc.).

    The masking process is irreversible. (http://docs.oracle.com/cd/E11882_01/server.112/e41481/tdm_data_masking.htm#RATUG04000)

    Writing of data (http://docs.oracle.com/cd/E11882_01/network.112/e40393/redaction.htm#ASOAG596)

    "Starting Oracle 11 g Release 2 (11.2.0.4) database, Oracle data writing allows you to hide (delete) data that are queried by applications or limited users." Drafting occurs in real-time when users query the data. Drafting of data Oracle is part of the Oracle Advanced security features. »

    In a nutshell, you create a policy of writing for a table using DBMS_REDACT package that will redact (mask) data for some users - depending on your political - select.

    For example, a group of users will not be able to view credit card numbers (1234 5678 1235 5690-> * * * 5690). Please note that the data are not hidden within the table.

    Database Vault is used to restrict powerful users (users with system privileges) to access some objects (and not only). Please see the DEMO on this link ( Oracle Database Vault |) Oracle database | (Oracle ) "

  • Remove the mask before entering the data in the database?

    Hello!

    Hey guys, I'm with the following problem, I am using plugin 'text with hidden Input field', works perfectly in a deal to add the mask, but I have a problem saving the data in the database, I need to record data only, without the mask at all, no idea how to do this, a dynamic of action? What would be the best way to go, and if they have advice on how to make would be welcome.

    Thank you!

    Hello!

    I would like to share with you that I found the solution to remove the mask before you update the database, I share case someone needs and evaluation of teachers is the best solution, I did the following creates a "process after Submit" before performing the "LMD" process, removing the masks as replace, just below my code is pretty simple as I said, my point in this case decided, as I have said I would like that assessment of you as possible to see if others have better enforcement solutions!

    : P33_NR_CEP: = replace (: P33_NR_CEP,'-', ");

    : P33_NR_TELEFONE: = replace (replace (replace (: P33_NR_TELEFONE, '(', ''), ')', "),'' ', ',");

    hug!

    Chubby Kiran fac586

  • Default value in the item with the format mask DATE: DD-MON-RRRR HH:MIPM

    Dear all,

    I created OF type date DATE and mask game format: DD-MON-RRRR HH:MIPM

    and need to display the default code:

    declare

    v_start timestamp;

    Start

    BEGIN

    Select FROM_DATE IN v_start of TOUR_MAS

    where id =: P67_ID

    EXCEPTION WHEN OTHERS THEN

    v_start: = SYSDATE;

    END;

    RETURN v_start;

    END;

    But value display the DATE element is "11.02.00.000000 may 20, 15 h.

    In the table FOLLOWING is the timestamp.

    How to display the query result of default in the format ""HH:MIPM DD-MON-RRRR ". "

    How can I do that.

    Thank you

    Hi Maxence,

    Try this:

    DECLARE
    
      V_START VARCHAR2(64);
    
    BEGIN
    
      BEGIN
        SELECT TO_CHAR(FROM_DATE,'DD-MON-RRRR HH:MI PM')
          INTO V_START
          FROM TOUR_MAS
         WHERE ID =:P67_ID;
      EXCEPTION WHEN OTHERS THEN
        V_START:=TO_CHAR(SYSDATE,'DD-MON-RRRR HH:MI PM');
      END;
    
      RETURN V_START;
    
    END;
    

    Kind regards

    Kiran

  • To access the data of mask

    Is there a way to return data mask in a way that I am able to export and analyze in nuke?

    For example,.

    app.project.activeItem.selectedLayers [0]. Masks.Property (1) .property (1) .valueAtTime (current Frame/24.0)

    Returns the path of the mask of the first the first layer mask selected on the first image, assuming that my computer is 24 frames per second. But when I alert(), I went back "Shape object." Now, I do not deny, it is a form of the object, but I was hoping to find the data that I can at least try to work with. Any ideas?

    Note: I'm fine with a solution that leaves the Béziers baked. The masks are already cooked in the first place for these purposes.

    Say you do the following:

    var myMask = app.project.activeItem.selectedLayers [0]. Masks.Property (1). Property (1).valueAtTime(0,false);

    myMask will be a shape with 4 attributes:

    myMask.vertices gives you an array of points in 2D, in layer space, one for each vertex.

    myMask, inTangents gives you an array of the incoming tangency points, compared to each vertex.

    myMask.outTangets gives you a picture of outgoing tanget points from each peak.

    myMask.closed is set to true if the shape is closed

    Dan

  • Masking of the date of cflocale

    I'm trying to create a form in my localized web application that will use the value of cflocale to hide a text entry field.

    I don't want to use a calendar tool as the date selection method, but I would like to be able to use something like this:


    < cfinput type = "text" name = "myDate" id = "myDate" required = "Yes" mask = "" #localeDateMask # "message ="Enter a valid date in the format #localeDateMask"validateat ="onsubmit, EEP"/ >"

    Ideally, I was wondering if I can fill up the underlying java language setting localeDateMask variable. Otherwise, I'm going to create a lookup table to get this value for each possible locale. No problem doing this, but I would rather not reinvent the wheel!

    Guess he has truncated through the e-mail gateway. lets see if the web site of the forum works better.


    formatStyle = 0; full 0---> 3 short
    thaiLocale is createObject("java","java.util.Locale").init ("th", "TH");.
    dF = createObject("java","java.text.DateFormat").getDateInstance (formatStyle, thaiLocale);
    WriteOutput ("#DF.toPattern () #")
    for example: #df. Format (Now ()) #");"

  • Best way to apply the Format mask for the fields in a Table of the ADF

    Hi all

    12.1.3 JDev

    I would like to introduce the price data, quantity etc. fields of the ADF Table of the user interface in a specific format.

    These formats need to be dynamic, because they change according to the locale selected and sometimes they differ in the same locale.

    I tried approach converter custom but not satisfied because it is called several times when it is used in a table of the ADF and when asked that told me that this is the behavior.

    Custom converter of an attribute in a table called several times

    So, please suggest a better way to apply the format mask (which has min & max fractions, grouping, rounding) to the fields in the Table of the ADF.

    Please let me know if you need more information.

    Thank you

    B S Bilodeau.

    The second question, which I've mentioned here is the converter is called several times for each click on the table.

    This isn't a problem, this is the expected behavior (and you can't avoid it).

    Dario

  • filling of datetime column SQL Server with the data in the date column oracle

    After a lot of "finangling", I think I have my link dg4msql works well between Oracle and MSSQL.

    Now, what I'm trying to do, is fill a table in MSSQL with an Oracle table column values, whenever a new row is inserted in the Oracle table. I use a very simple trigger on the oracle table that goes basically like this:

    mware is dblink to MSSQL database, oracle col worth DATE and mssql col is of type DATETIME

    This is the relaxation: (edited to show only the column in question)
    ==================================================================================
    CREATE or replace TRIGGER < oracleowner >. INSERT_INTO_NVDB
    AFTER INSERT ON < oracleowner >. < oracletable > for each row
    BEGIN
    insert into '< mssqlowner > '. «< mssqltable > @mware «»
    (
    "load_date_time,"
    )
    VALUES)
    : new.loading_date,.
    );

    END;
    ==================================================================================

    Now, when you enter a record in the Oracle trigger triggers ok table but does not insert a date in the MSSQL table, the 'load_date_time' in the mssql table can have NULL values so I guess there just inserts a null value.

    When I activate the triggers on the table MSSQL, which then takes these values and inserts them into another table with values from other tables, inserting in the Oracle table fails because the relaxation on the MSSQL database tries to pass the date (which is empty) table MSSQL in another table where the datetime field is not null.

    I guess it's because Oracle date format is not compatible with MSSQL, which I think is "yyyy-mm-dd hh: mm:"- so I have to either convert the date format by default Oracle to match a MSSQL, or convert a char of the trigger value. (The developer of the side MSSQL says if I can convert it to a char value that should be ok too)

    I think that it is probably better to leave it in the date format, the best way to do this would be to put an "alter session set nls_date_format ="at the beginning of the trigger?

    Can I convert the date to char the trigger easily? If there is a better way to proceed in the way I approach it I'm all for it.

    Thank you!

    Hello
    Your best option is to explicitly convert dates Oracle in a format recognized by SQL * Server. It's more coding, but then you know exactly what is being inserted and you give more control, if anything changes. You can also code to handle null data.
    I'm not sure than to try to change the format of date to 'alter session... ". "do what you want.
    You can use "to_char" on a date into character data-

    To_char (, "HH24:MI:SSxFF of MON-DD-YYYY")

    and use any mask format supported.
    You also use 'to_date' to transform the character data in a date format, as well as 'to_char' and 'to_date' in combination.
    For example -.

    SELECT TO_CHAR (TO_DATE (October 27, 98 ',' DD-MON-RR'), 'YYYY') 'Year' FROM DUAL;

    This is all discussed in the documentation-

    Oracle® database
    SQL language reference
    11g Release 2 (11.2)

    where it also describes the different format masks.
    If you need further assistance on the use of to_date, to_char formats then ask in the forum SQL/PLSQL.

    SQL and PL/SQL

    where they have more experience.

    Kind regards
    Mike

  • Reliability of the data in the conversion to &amp; from a Variant...

    It is possible to convert any data type to a variant, and then turn it back on.  In doing so, are there data types who will lose information during the conversion process?  If so, why?

    Yes, you can convert any type to a variable ranging and back. There is a VI called "Variant data" which will have a type as input. He continued to convert the variant the correct data. The side variant must know what type of data to expect. He can pull of the Variant. However, you can use a cluster of generic data that consists of a username and a Variant. Then you can have different types of data which can handle the side reception. It is a two-step process. One of conversion the variant of general type (data type and Variant cluster). The second would be a case statement uses the type then covert the internal variant to the specified type. This approach is used for generic messaging systems. The upper levels of the code will know what to do with the data. The lower levels are just generic data passing around.

    I'm not aware of any information that get lost during the conversion of the data to and from a variant. Of course, I not had no problem using them.

  • Save the data before and after the occurrence of a Trigger Condition.

    Hello

    I am worrking on an application that acquires data from 64 channels and performs many analyses.

    Necessary to implement something is recording the data in the event of alarm condition.

    I've implemented datalogging in many previous applications, but this one is difficult.

    I need to save data for a few seconds before and a few seconds after the alarm has occurred in a single file.

    I thought constantly write data to a file PDM and at the same time deleting the old data, until the alarm trigger occurs.

    but I was not able to do, since I have no blocks to remove data from a PDM file.

    I'm looking for the ideal approach to this recording.

    Any help will be appreciated.

    What I have to do this in the past, use of a queue with loss as a circular buffer.  When you get the relaxation, dump you the data in the queue to your file and then save however many data you want after the outbreak.

    For the purposes of the memory allocation, do not use the queue to rinse.  Use rather a Dequeue element inside a conditional FOR loop with a 0 timeout (reading the queue stops when you have a timeout or you read X samples).

Maybe you are looking for