Maybe someone can help me with this. I do have the following requirement for some of my applications.
To clearify it in advance!! I do not need a emailencryption system! I need an option to encrypt / decrypt databases and information inside databases and govern the access to the keys.
We have many Databases like Document libaries and people are storing sensitive information in it. So one requirement ist encryption of the content/attachment. To use the standard ecryption (symetric secret key encryption) is no good because of the following reasons.
1)once the key is distributet u can not revoke it
-
if someone makes a copy of the notes ID the key is compromised
-
if you change the key you need to redistribute it again
4)if the “user” changes the departement a new id needs to be calculated, because the old one holds the secred key the user shouldnt have any more (what about encrypted local databases?)
So what i need is an option to “plug in” an PKI system that allows me to generate keys, revoke them extend them and govern them. And all of that on a multidomain infrastructur and on a database / user basis
Reviews on that via inet or partner sites where unsuccessfull and we are running into more and more.
Subject: Have you read any of the security redbooks?
You can use public keys to encrypt documents with field-level encryption just as easily as you can use secret document encryption keys. That will remove the key management burden of document encryption keys, and should allow you to add and remove people to the list of those who can decrypt a document dynamically.
Copying an ID file does not reveal the keys inside the ID, but that’s a separate matter entirely.
Subject: RE: Have you read any of the security redbooks?
yes I did read those redbooks.BUt i think the obstacle we have is that those document libaries are also mail in databases and the “burden” of the administratin should be centralized in a pki managementsoftware and should not be handeld in each databes respective form.
maybe we just interpreted the way tou handly private key encryption, but any single consultant an developer we paid to find a solution wasnt able to present any result at all.
Subject: Fieldencryption and PKI management
HI
From u query i came to know that you are looking for Some methodology which gives IKEY features.
Please refer Dekart Ikey for lotus notes(search in google for this) and please serach for safenet rainbow ikey drivers and try to use it.
You have to but a plugin key (USB) from rainbow technologies where you can store ur Ikey (PKI) files and use it.