Database information encryption

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Database information encryption

Pedro Lopes
Hello all,

One of the requirements of the implementation of an ERP possibly OFBiz here
is the possibility to have an encryption layer between business and data
layer. The idea is to *not* have plain text data on the database. Is there
already a solution for this of this kind or some other idea that can be
transparent to the application users and the application itself?

Thanks in advance,

Pedro
Reply | Threaded
Open this post in threaded view
|

Re: Database information encryption

Jacques Le Roux
Administrator
The field element of the entity element in entitymodel files has an encrypt attribute, it's false by default. I'd recommend to use salt, see
http://ofbiz.apache.org/dtds/entitymodel.xsd for details)

So it's "only" a matter of S/R where you need it

Jacques

Le 09/10/2015 10:54, Pedro Lopes a écrit :

> Hello all,
>
> One of the requirements of the implementation of an ERP possibly OFBiz here
> is the possibility to have an encryption layer between business and data
> layer. The idea is to *not* have plain text data on the database. Is there
> already a solution for this of this kind or some other idea that can be
> transparent to the application users and the application itself?
>
> Thanks in advance,
>
> Pedro
>
Reply | Threaded
Open this post in threaded view
|

Re: Database information encryption

Pedro Lopes
Very good,

Thank you very much!!!

On Fri, Oct 9, 2015 at 12:54 PM, Jacques Le Roux <
[hidden email]> wrote:

> The field element of the entity element in entitymodel files has an
> encrypt attribute, it's false by default. I'd recommend to use salt, see
> http://ofbiz.apache.org/dtds/entitymodel.xsd for details)
>
> So it's "only" a matter of S/R where you need it
>
> Jacques
>
> Le 09/10/2015 10:54, Pedro Lopes a écrit :
>
>> Hello all,
>>
>> One of the requirements of the implementation of an ERP possibly OFBiz
>> here
>> is the possibility to have an encryption layer between business and data
>> layer. The idea is to *not* have plain text data on the database. Is there
>> already a solution for this of this kind or some other idea that can be
>> transparent to the application users and the application itself?
>>
>> Thanks in advance,
>>
>> Pedro
>>
>>