I've seen this type of thing done using domain indexes, i.e. defining your
own indextypes. Looked like a bit of work, though.
HTH,
Gary
Gary Kirsh
Next Extent Consulting
-----Original Message-----
Sent: Tuesday, September 10, 2002 11:58 AM
To: Multiple recipients of list ORACLE-L
Don,
It seems like a real good idea, but what am I putting inside my call to the
encrypt function in my Create View statement?
Randy
-----Original Message-----
Sent: Tuesday, September 10, 2002 10:13 AM
To: Multiple recipients of list ORACLE-L
Subject: Re: using obfuscation
<< File: Card for Don Jerman >> What about...
create view my_data as select de_encrypt(sensitive_data) as
clear_sensitive_data where
sensitive_data = encrypt('CLEAR TEXT') ?
This lets you create an index on the sensitive data without decrypting it,
and
the function need only be called once on the clear text.
Caveat: no idea if this should work :)
"Steiner, Randy" wrote:
> Hi all,
>
> I have downloaded the Metalink Notes on implementing dbms_obfuscation. I
am
> using multiple front ends on the database, so the way I plan to implement
> the de-encryption is with a de-encrypt function in a view.
>
> Create View my_data
> AS
> Select de_encrypt(sensitive_data) AS sensitive_data
> ,other_data
> FROM original_table
> ;
>
> If I select from the view with a where clause on other_data, the response
> time is fine. If I select from the view with a where clause on
> sensitive_data, I do a full table scan and which takes about 15 minutes.
> The de-encrypt function is copied from a Metalink note, nothing fancy.
>
> Since I have various front ends, I can not de-encrypt the data in the
front
> end. The only way I can think of is with the function in a view, but the
> response time is unacceptable. Does anyone have any thoughts on this?
>
> Thanks
> Randy
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Steiner, Randy
> INET: [EMAIL PROTECTED]
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Steiner, Randy
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Kirsh, Gary
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
