Secure DB on laptop

[csutton]

Hi Everyone --

I'm developing software that will run on laptops with a SQL Server Express. The database will contain personal information, but that data will only be stored there temporarily until it is uploaded to a server (which will be every day).

These laptops will be kept inside of a vehicle throughout the day, and run the risk of being stolen. I was wondering if anyone has any clues to how I may secure this information in a manner that if it is stolen, it would be reasonably difficult to break into.

Thank you for any assistance.

 

[mrdenny]

You'll want to do a few things, most of which the users won't like.

Enable the BIOS poweron password.
Require the use of strong passwords when logging into the machine.
Encrypt the data within the database using a strong encryption process.

Denny
MCSA (2003) / MCDBA (SQL 2000) / MCTS (SQL 2005) / MCITP Database Administrator (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[csutton]

Do you have any recommendations for the encryption of the records? I am thinking its going to require a lot of work to do the encryption/decryption for each column and row... was hoping to find something that I could plug into MS SQL that would handle the encryption/decryption automatically somewhat..

 

[mrdenny]

You'll have to manually make the changes. If you are using stored procs you can put it in procedures. Here is a FAQ on using the SQL 2005 encryption faq962-5964.

Denny
MCSA (2003) / MCDBA (SQL 2000) / MCTS (SQL 2005) / MCITP Database Administrator (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[csutton]

Ok, thanks for the info.

 

[mrdenny]

no problem.

Denny
MCSA (2003) / MCDBA (SQL 2000) / MCTS (SQL 2005) / MCITP Database Administrator (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com