Re: PGP into a database

Hi Ted (and everybody else) I'll explain in a little more detail and hopefully this will give you a better indication of my needs The project ----------- I have talked with a couple of people on this list about developing a batch processing application for using authorize.net so that we can store credit card numbers (along with all the other user info) and batch all the transactions as and when needed. This is especially useful in environments where a regular, say monthly, charge is needed. Whether this is stored directly on the server, or more probably on a local machine in my office, my visitors information will have to be stored in a secure manner. So, my idea was: 1. visitor comes to website and buys a service 2. If it is a "one time" purchase, then we go direct to the authorize.net payment gateway and never see the credit card number 3. If it is to be a "repeat billing" purchase, then we save all of the information into a database for later processing 4. We download the database on a daily basis and integrate this with our off-line database for added security (at the same time removing the records on the server). My idea was to improve the security by also having the database stored on a PGPDisk 5. Every day we run a batch process and the previous days transactions are processed. How I "decrypt" the information depends I suppose The above is very simplified, but basically what I'm thinking about. In this instance I think that the data only needs to be readable by one person. Any ideas :) ? Thanks Ade inovica.com