Need Help In Encrypting Database

[sunnymannava]

Dear Team,

As per our business requirement we have to encrypt customer phone number in the database and we are planning to implement AES method.We are in need of guidance on how to achieve it.

[mflorell]

I have never heard of encrypting the phone number as a requirement. What is the reason for that?

The phone number appears all over the place, from the Asterisk logs, to the vicidial logs, to the SIP messages that go out when calls are placed, and none of those can be encrypted.

[sunnymannava]

Hello Matt,

Thanks for the quick response. In our business we treat phone numbers as assets and whoever has them they can try reaching the customer outside the system and get the payment. In our existing system we have put certain check in the places so that no one can see the numbers. In our new vicidial setup too, we've removed the phone numbers being exposed to naked eyes. In our logs too we are thinking of encrypting them so that no one can read the numbers. Moreover we'll purge the logs periodically. Have you come across someone who has done it? or you can give us some pointers about how to proceed?

Thanks!

[mflorell]

For the phone number field we have never done any more than just hiding it from the agent screen and obscuring digits within certain admin pages and reports. Encryption of that field across the board would result in all kinds of issues.