Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

I need to design a database that will contains information about personal disease of users. What can be the approach in order to implement the columns of the DB's tables: encrypt the information, separate data within two differents DB, one for sensitive data and another for not sensitive data, or both or another approach ??

share|improve this question
    
How would the access rights for the sensitive and non-sensitive data be handled? At the application layer, or would there be different database logins for sensitive & non-sensitive? What are you trying to prevent - people reading data from a stolen disk, or database users seeing sensitive information? –  FreshPhilOfSO Apr 12 '12 at 15:19
    
The dba should not be able to read information about sensitive data. –  carlo Apr 12 '12 at 15:22
1  
In that case, data will need to be encrypted at the application layer before insertion into the database. As an aside, in my experience encryption is mostly not needed in this kind of situation & is better served by having application and network security & access control in place. Sysadmins and DBAs should be trusted. –  FreshPhilOfSO Apr 12 '12 at 15:27
    
1  
I cannot understand why this question is closed. The faq says that configuration, backup and design of databases are in scope of these faq. At least Oracle has some features that address this problem: Transparent Database Encryption (oracle.com/technetwork/database/options/advanced-security/…), virtual private database, oracle database vault, oracle label security, oracle secure backup. –  miracle173 Apr 12 '12 at 21:55
show 1 more comment

closed as off topic by jcolebrand Apr 12 '12 at 17:29

Questions on Database Administrators Stack Exchange are expected to relate to database administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

Browse other questions tagged or ask your own question.