EXPERT RESPONSE
It doesn't require a 3rd party application. You can do this yourself.
All it requires is for you to utilize an encryption algorithm in your
application. Data coming in is encrypted and then sent on to the SQL
Server where it is stored. When a validating a user, it passes through
your application where the process is reversed. I would very strongly
recommend that when you are doing this, that algorithm is locked up and
very tightly controlled. In no case should it ever be used to allow a
user to decrypt the data and view it in a report or via some other
manner. Once encrypted, the data should always be encrypted except
during validation processes within your application which never retains
the password. There is a third-party tool that can do this for you as
well called Encryptionizer.
For More Information
|