Re: Storing Social Security Number WAS: Encryption/Decryption Question
| From: | tedd | Date: | Thu, 12 Aug 2010 15:55:07 +0000 |
| Subject: | Re: Storing Social Security Number WAS: Encryption/Decryption Question | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-307424@lists.php.net to get a copy of this message | ||
At 11:39 AM -0400 8/12/10, Joshua Kehn wrote:
Would one option be to have a table of unencrypted SSN's with an encrypted id for the user. So you could search the SSN's and then connect them, however if the table was dumped you wouldn't be able to link it directly to the person (as it would just have a SSN and an id). Regards, -JoshNo, the problem here is to keep the database from containing any raw SS#. It is absolutely necessary to encrypt the data. The question is: 1. Is it legal? 2. How to do it? Cheers, tedd -- ------- http://sperling.com/