December 16, 2004 at 1:39 pm
Hi
I currently sell an application to a specific market that uses an Access back end (and VB6 front end.) I'm thinking of moving to SQL Server Express for the database. However, using a secured .mdb allows me to keep bits of data in the database that I don't want the end users to have access to - when their licence expires, how many simultaneous users they've paid for, etc. I have some experience with SQL Server too, but I've never found a way to prevent access to the data - bearing in mind they have physical access to the machine and could move the mdf onto another box, thus circumventing permissions . . .
Any suggestions please? I'm not up against experts or dedicated hackers; I'd like them to be able to move their database onto another box without having to re-license (this is ok as if they copy it to another organisation the data would be incorrect for the new users) and the Access back-end has worked well for a few years. I would like the performance and robustness of SQL Server however.
TIA
pg
December 16, 2004 at 2:20 pm
Ever thought of encrypting that sensitive data? That won't stop someone with sa privileges from watching the data, but he will not understand what he sees.
--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]
December 16, 2004 at 4:03 pm
Hi Frank
Y'know, sometimes when it's someone else asking the same question that's been circulating round your head for a day or two, it makes all the difference. . .I'd kind of dismissed encryption, thinking 'if they can get at an encrypted 'Licence status = ok' string, then they can cut n paste it . .
- but there's a lot more possibilities to encryption than that. Thanks for taking the time to give my brain a jump start
pg
December 17, 2004 at 2:51 am
Glad I could help. And best of all is, that you should be able to find good algorithms for free on the web
--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply