Making Data Safe

[bwolfsohn]

Massachusetts will soon impose the most stringent data security regulations in the nation. The regulations go into effect on March 1, 2010, and will require you to secure all private personal information in your possession (employees, customers). Your files and computers must be compliant or you will be assessed fines for each breach!

Any thoughts on how to meet these security regulations without re-writing code ??

Perhaps o/s h/d encryption ??

anyone have any thoughts ??

also asked on xbase newsgroup..

Brian

[rdonnay]

Brian -

Look at \exp19\samples\encrypt.

This uses a very secure method of encrypting data.

You also use Advantage server, so you can encrypt an entire database rather easily.

Roger

[Tom]

If you have the Alaska Professional Subscription, there should be the files XbpCrypt.dll/.lib somewhere. This provides Hash-Encryption (several mechanisms) and auto-encryption for DBFCDX.

[bwolfsohn]

Roger, Tom,

thanks for the suggestions...

Roger,

not all clients are using adsserver.. most still use adslocal.

Don't both the methods you and tom are suggestions require extensive recoding when getting/putting data..

back onto adsserver for a moment...

is encryption/decryption done at the adsserver level i.e. ads returns the data to the program and gets the data from the program unencrypted, but stores it encrypted ??

if so, that's the answer.. just require all clients that must meet the regs to use adsserver !!!

[bwolfsohn]

Roger, Tom,

back onto adsserver for a moment...

is encryption/decryption done at the adsserver level i.e. ads returns the data to the program and gets the data from the program unencrypted, but stores it encrypted ??

if so, that's the answer.. just require all clients that must meet the regs to use adsserver !!!

Roger,Tom,etal,

can you confirm, or not whether my assumption above is valid ??

i.e. something like ads_setencryption() on ??

[rdonnay]

Yes, that's the way Ads Table Encryption works.