The Eloquence dabase supports different options to protect
database content. Database encryption protects data on disk
and Item Level Security allows selective access to data
depending on application or user authorization.
- Database encryption
-
Sensitive information may be encrypted in the database.
This helps protecting database volume files, forward logs, as well as
dbstore output files or backups against unauthorized access to sensitive data.
Encryption keys may be updated periodically with no downtime.
- Item Level Security
-
Sensitive information may be masked or blanked upon retrieval, depending on
the user authorization. This allows to enhance the security of
existing applications with no or
minimal code changes.
If you are working to meet the PCI DSS requirements or exploring
how to improve protection of sensitive information with a minimum of
changes to your application and procedures, you are likely interested
in this new functionality.
The item security enhancements are included in the Eloquence base
version, the data encryption feature is available as an optional
add-on component.
Item Level Security
The item level security functionality allows restricting access
on selected items at the database and/or dataset level, depending
on the access privileges of a database account.
This allows to enhance the security of existing applications
with no or minimal code changes.
A typical use would be to limit access on items with sensitive
information, such as credit card numbers, social security numbers
or salary figures to those database users that are member of a
dedicated security group, whereas all other users only get to
see empty or masked values when reading the respective item
contents.
Find details in the document (and section links) below:
Enhanced item level security is part of the base product.
Database encryption
The Eloquence database encryption feature allows to designate fields
with sensitive contents for encrypted storage. It helps protecting
database volume files, forward logs, as well as dbstore output
files against unauthorized access to sensitive data.
Find details in the document (and section links) below:
Data encryption is an optional add-on requiring an extra license key.
|
