Security Basics mailing list archives

Database Encryption and PCI issue.


From: "Mohamed Farid" <mfarid () mscc com eg>
Date: Tue, 12 Feb 2008 09:57:25 +0200

Dear All :
We are in our way to have a PCI DSS complaint - and we are facing a
challenge to have encryption with our Database Systems.

The problem is that the Application we are using is using the PIN as a
primary key in the DB tables - and this will make it very hard to
encrypt the PIN columns ...

Anyway - we are using Oracle 9i and the server is connected to HP SAN.
Can anyone advise us: what are the systems we can go after to solve
this?
Is there any technique or 3rd party applications can help us to overcome
this?

M Farid

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
This e-mail (including attachments) is classified as Mediterranean Smart Cards Company confidential and proprietary 
information 
The recipient hereby is committed to hold in strict confidence the contents of this (e-mail, document, and information) 
and not to disclose to any third party without the prior written consent of Mediterranean Smart Cards Company. 
Recipient will be held liable for any unauthorized disclosure.
It is intended solely for the addressee. Unless you are the addressee, you may not read, copy, use or store this e-mail 
in any way, or permit others to. 
If you have received it in error, please notify the sender by return e-mail and delete the message in its entirety, 
including any attachments
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 



Current thread: