Database security model

A computer program product stored on a computer readable storage medium, which when executed by a computing system, provides a database security model, the program product comprising:

• program code for providing access to private data in an encrypted storage area;
• first level program code for implementing a plurality of ENCR routines, wherein each of the ENCR routines is callable from a database application to access and process private data and wherein the first level program code operates in a functional space separate from the database application;
• and
• second level program code having a private key and a decryption routine, wherein the decryption routines decrypts private data in response to receiving a decrypt request and public key from the first level program code, and wherein second level program code operates in a functional space separate from the first level program code.

A computerized method for implementing a database security model, comprising:

• maintaining private data in an encrypted storage area;
• receiving a request at an application database that requires access to private data;
• passing an ENCR request to an ENCR routine that operates in a first level functional space separate from the database application;
• processing the ENCR request and submitting a decrypt request along with a public key to a crypto system that operates in a second level functional space separate from the ENCR routine;
• retrieving and decrypting private data within the crypto system using a stored private key and a submitted public key;
• passing decrypted private data to the ENCR routine;
• and
• returning an ENCR result to the database application.