OraFAQ Forum: Security » Prevent DBA to change password of owner of encrypted data

Home » RDBMS Server » Security » Prevent DBA to change password of owner of encrypted data

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Prevent DBA to change password of owner of encrypted data [message #260936]

Tue, 21 August 2007 05:24

aydenise
Messages: 6
Registered: April 2007
Location: HK

Junior Member

Dear all,

We are using DBSec to enrypt the database data but the ecrypted database data are owned by one user.

As we think that DBA can change the password of the user, then the DBA can also access these sensitive data.

Is there any method to prevent this case ?

Please advice.

Denise

Report message to a moderator

Re: Prevent DBA to change password of owner of encrypted data [message #260941 is a reply to message #260936]

Tue, 21 August 2007 05:30

ebrian
Messages: 2794
Registered: April 2006

Senior Member

Data Vault.

Report message to a moderator

Re: Prevent DBA to change password of owner of encrypted data [message #260942 is a reply to message #260936]

Tue, 21 August 2007 05:30

Michel Cadot
Messages: 67769
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

If the data are encrypted what is the problem?
Is this not the purpose of encryption to prevent from knowing what are the data even if they are stealed?

Regards
Michel

Report message to a moderator

Re: Prevent DBA to change password of owner of encrypted data [message #261134 is a reply to message #260942]

Tue, 21 August 2007 23:16

aydenise
Messages: 6
Registered: April 2007
Location: HK

Junior Member

Hi,

The purpose of guarding the DBA from changing the password of the user account controlling the encrypted data in order to prevent the DBA to access the sensitive information.

Thanks.

Denise

Report message to a moderator

Re: Prevent DBA to change password of owner of encrypted data [message #261170 is a reply to message #261134]

Wed, 22 August 2007 01:38

Michel Cadot
Messages: 67769
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

You repeat the same sentence, I repeat mine:
Which sensitive information? If the data are encrypted then no one has access to sensitive information just to encrypted data which can't be considered as sensitive unless you have a poor encryption algorithm.

By the way, DBA does not need access to a user to get data in any of his tables.

Regards
Michel

Report message to a moderator