DB2 Field Procedures (FieldProcs) were introduced in IBM i version 7.1 primarily to help simplify field encryption projects. A FieldProc can be placed on almost any DB2 database field including alphanumeric, packed decimal, zoned decimal, signed numeric, date and time fields. FieldProcs offer two distinct advantages over database triggers:
While IBM provided this “hook” into the database with FieldProcs, they have left it up to the customer or 3rd party solutions (like Crypto Complete) to create the FieldProc programs and perform the encryption/decryption functions.
Crypto Complete simplifies the creation and management of FieldProcs through its innovative Field Encryption Registry commands and screens. It encrypts and decrypts the field values (within the FieldProcs) while providing full integration to Crypto Complete’s policy and security controls, key management and audit trails for meeting strict compliance requirements.
Based on authorization lists assigned to the fields, users can be granted access to the fully decrypted field values, restricted to the masked values or can be denied access to any values.
The IBM i is also referred to as System i, iSeries, AS/400, AS400 and i5