清除数据库记录
我正在处理必须存储一些支付卡数据的问题。为了符合 PCI DSS 法规，我们必须清除光盘中的数据，不仅要从存储系统中删除文件，还要用随机数据序列覆盖字节，使数据更难恢复。
我希望能够利用数据库来满足我的存储需求（为了增加并发性和更简单的查询），但是我找不到任何方法以这种方式清除单个记录。
是否有任何已知的技术可以实现这一点？
I'm dealing with having to store some payment card data. In order to be compliant with PCI DSS regulation, we have to purge the data from discs by not just deleting the file from the storage system, but also writing over the bytes with a random sequence of data to make it harder to recover the data.
I would like to be able to leverage a database for my storage needs, (for increased concurrency and simpler querying) however I can't find any way to purge individual records in this fashion.
Are there any known techniques for accomplishing this?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
据我对 PCI DSS 的了解，只有存储在文件系统中的文件才需要安全擦除。 RDBMS 不一定以可预测的方式将数据映射到文件系统。您可以做的（如果您仍然想“安全地擦除信息”）是
假设您要删除 PAN 为 4444441234567890 的所有记录。您可以编写以下语句：
< code>更新card_data集PAN='0000000000000000'，其中PAN ='4444441234567890';
然后
delete card_data where PAN='0000000000000000';此外，您可能有兴趣了解 Oracle 和 SQL Server 支持的透明数据加密。
As far as I know about PCI DSS, secure wiping is required only for files stored in the filesystem. An RDBMS not necessarily maps data to the file system in a predictable way. What you can do (if you still want to "securely wipe information") is to
Let's say you want to delete all records where PAN is 4444441234567890. You can write the following statements:
update card_data set PAN='0000000000000000' where PAN = '4444441234567890';and then
delete card_data where PAN='0000000000000000';Further, you might be interested in knowing about Transparent Data Encryption supported by both Oracle and SQL Server.