Credit card Number Encryption

[Praveena]

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Prabhakar]

Hi Praveena and Nirmal,
I don not think, there is any built in functionality in
SQL Server (as far as my knowledge is considered).

The solution which we can implement here is,
we can create a stored procedure to insert the
rows into the base table and instead of passing an
INSERT statement we can pass the values as arguments
to the stored procedure from Objects or ASP pages.
You can implement the encription algorithms, there
some stock standard algorithms which are posted on
some sites, which I came across recently.

Have a go with this and please let me know any comments.

Good luck
Regards


Prabhakar


------------
Nirmal at 8/11/00 5:46:45 PM



Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Ben Johnston]

Praveena,

You can use the undocumented function pwdencrypt to store data. It seems to work best when stored in a binary column. This is a one way hash, there is no decrypt function. The undocumented function pwdcompare compares its first parameter with the encrypted column. It returns a 1 if they are the same. This can be used to store passwords and compare them when the user logs in.

It won't work for credit card numbers if you need to view them later or other data that you need to be able to decrypt easily. These functions just encrypt strings and allow you to compare a known string with the encrypted string. You will need to look for a different function if you need to view the data.

Be sure to set proper security on the field with the encrypted data. It is possible to brute-force the pwdencrypt field.

Ben Johnston



------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[dvugteveen]

SQL Server 7 does not have this functionality built in. Most commerce solutions provide this in a server-side dll that uses some standard, robust encrytion, after receiving the original number through a secure connection.

Check out eWeek's OpenHack results at http://www.zdnet.com/eweek/filters/specials/ for an intro, including information on Akopia Inc.'s MiniVend.

I've used custom encyption based on common algoriths, with good success.

Best wishes, David.

------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[HemantH]

It may be too late... but if you haven't had a solution yet, use the undocumented ENCRYPT() function. There is no decrypt function. You need to use the same function with the credit number and compare it with the value stored in database.
- hope it helps..


------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Mr Bean]

Hi,

Use the encrypt() function in TSQL.

When inserting the credit card details use the encrypt() function.

Once stored, all you need to do is compare it again using the encrypt function

Example:

select encrypt('1234-4567&#39

if encrypt('1234-4567&#39 = 0x3E16CDED63C65341B251DB5795269A697C22
begin
print'OK'
end
else
begin
print'Bad'
end


------------
Prabhakar at 8/14/00 7:52:07 PM

Hi Praveena and Nirmal,
I don not think, there is any built in functionality in
SQL Server (as far as my knowledge is considered).

The solution which we can implement here is,
we can create a stored procedure to insert the
rows into the base table and instead of passing an
INSERT statement we can pass the values as arguments
to the stored procedure from Objects or ASP pages.
You can implement the encription algorithms, there
some stock standard algorithms which are posted on
some sites, which I came across recently.

Have a go with this and please let me know any comments.

Good luck
Regards


Prabhakar


------------
Nirmal at 8/11/00 5:46:45 PM



Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Thanks
Mr Bean
But now how can i get decrypt value .Once i encrypt , Is there any way i can get back original value of that data by using decrypt fuction or by applying some another logic.

I'll appreciate your help if u can suggest me something on this

Thanks
nirmal.


------------
Mr Bean at 8/24/00 6:07:28 AM

Hi,

Use the encrypt() function in TSQL.

When inserting the credit card details use the encrypt() function.

Once stored, all you need to do is compare it again using the encrypt function

Example:

select encrypt('1234-4567&#39

if encrypt('1234-4567&#39 = 0x3E16CDED63C65341B251DB5795269A697C22
begin
print'OK'
end
else
begin
print'Bad'
end


------------
Prabhakar at 8/14/00 7:52:07 PM

Hi Praveena and Nirmal,
I don not think, there is any built in functionality in
SQL Server (as far as my knowledge is considered).

The solution which we can implement here is,
we can create a stored procedure to insert the
rows into the base table and instead of passing an
INSERT statement we can pass the values as arguments
to the stored procedure from Objects or ASP pages.
You can implement the encription algorithms, there
some stock standard algorithms which are posted on
some sites, which I came across recently.

Have a go with this and please let me know any comments.

Good luck
Regards


Prabhakar


------------
Nirmal at 8/11/00 5:46:45 PM



Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Thanks
Mr Bean
But now how can i get decrypt value .Once i encrypt , Is there any way i can get back original value of that data by using decrypt fuction or by applying some another logic.

I'll appreciate your help if u can suggest me something on this

Thanks
nirmal.


------------
Mr Bean at 8/24/00 6:07:28 AM

Hi,

Use the encrypt() function in TSQL.

When inserting the credit card details use the encrypt() function.

Once stored, all you need to do is compare it again using the encrypt function

Example:

select encrypt('1234-4567&#39

if encrypt('1234-4567&#39 = 0x3E16CDED63C65341B251DB5795269A697C22
begin
print'OK'
end
else
begin
print'Bad'
end


------------
Prabhakar at 8/14/00 7:52:07 PM

Hi Praveena and Nirmal,
I don not think, there is any built in functionality in
SQL Server (as far as my knowledge is considered).

The solution which we can implement here is,
we can create a stored procedure to insert the
rows into the base table and instead of passing an
INSERT statement we can pass the values as arguments
to the stored procedure from Objects or ASP pages.
You can implement the encription algorithms, there
some stock standard algorithms which are posted on
some sites, which I came across recently.

Have a go with this and please let me know any comments.

Good luck
Regards


Prabhakar


------------
Nirmal at 8/11/00 5:46:45 PM



Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Thanks
Mr Bean
But now how can i get decrypt value .Once i encrypt , Is there any way i can get back original value of that data by using decrypt fuction or by applying some another logic.

I'll appreciate your help if u can suggest me something on this

Thanks
nirmal.


------------
Mr Bean at 8/24/00 6:07:28 AM

Hi,

Use the encrypt() function in TSQL.

When inserting the credit card details use the encrypt() function.

Once stored, all you need to do is compare it again using the encrypt function

Example:

select encrypt('1234-4567&#39

if encrypt('1234-4567&#39 = 0x3E16CDED63C65341B251DB5795269A697C22
begin
print'OK'
end
else
begin
print'Bad'
end


------------
Prabhakar at 8/14/00 7:52:07 PM

Hi Praveena and Nirmal,
I don not think, there is any built in functionality in
SQL Server (as far as my knowledge is considered).

The solution which we can implement here is,
we can create a stored procedure to insert the
rows into the base table and instead of passing an
INSERT statement we can pass the values as arguments
to the stored procedure from Objects or ASP pages.
You can implement the encription algorithms, there
some stock standard algorithms which are posted on
some sites, which I came across recently.

Have a go with this and please let me know any comments.

Good luck
Regards


Prabhakar


------------
Nirmal at 8/11/00 5:46:45 PM



Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Thanks
Mr Bean
But now how can i get decrypt value .Once i encrypt , Is there any way i can get back original value of that data by using decrypt fuction or by applying some another logic.

I'll appreciate your help if u can suggest me something on this

Thanks
nirmal.


------------
Mr Bean at 8/24/00 6:07:28 AM

Hi,

Use the encrypt() function in TSQL.

When inserting the credit card details use the encrypt() function.

Once stored, all you need to do is compare it again using the encrypt function

Example:

select encrypt('1234-4567&#39

if encrypt('1234-4567&#39 = 0x3E16CDED63C65341B251DB5795269A697C22
begin
print'OK'
end
else
begin
print'Bad'
end


------------
Prabhakar at 8/14/00 7:52:07 PM

Hi Praveena and Nirmal,
I don not think, there is any built in functionality in
SQL Server (as far as my knowledge is considered).

The solution which we can implement here is,
we can create a stored procedure to insert the
rows into the base table and instead of passing an
INSERT statement we can pass the values as arguments
to the stored procedure from Objects or ASP pages.
You can implement the encription algorithms, there
some stock standard algorithms which are posted on
some sites, which I came across recently.

Have a go with this and please let me know any comments.

Good luck
Regards


Prabhakar


------------
Nirmal at 8/11/00 5:46:45 PM



Hi,
I am also working on that but from back end i.e from SQL SERVER u cannot
encrypt or decrypt table column , but from your front end coding in ASP ,u can set the algorithum so u can Encrypt script & use Same algoritum to reverse it.

I am working on that script if u are done with this then please pass it to me .

Thanks
Nirmal.
------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Thanks
Mr Bean
But now how can i get decrypt value .Once i encrypt , Is there any way i can get back original value of that data by using decrypt fuction or by applying some another logic.

I'll appreciate your help if u can suggest me something on this

Thanks
nirmal.



------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena

[Nirmal]

Thanks
Mr Bean
But now how can i get decrypt value .Once i encrypt , Is there any way i can get back original value of that data by using decrypt fuction or by applying some another logic.

I'll appreciate your help if u can suggest me something on this

Thanks
nirmal.



------------
Praveena at 8/11/00 3:26:10 PM

Is there any tool available that can encrypt Credit card numbers or other fields stored in the database? For example, when a customer enters his credit card number or his password on the site, is there a way by which the Front end can encrpt the field before storing it in the database and decrypt it when it the customer requests it, through the application?

Thank you in advance
Praveena