Join Log in
Score:1
F4T4liS avatar Crypto

Securing a local database

ke flag
F4T4liS

I am a member of a sports association and I am developping a simple JavaFX application for managing member's license.

This application will be used on a notebook without any connection, it has to be offline an protected by a user/password. It will run on a shared Windows account.

The application must be the simpliest possible to install and use (average user age around 60-70 years old) so for storing data I plan to use an embedded Java database (I started with H2 in db file mode but I can switch to another engine) with some user restriction.

Everything work so far and users only have access to the desired informations but my problem is that everyone who can access the notebook can freely open the DB file with notepad or something else and see all confidential informations.

I known that H2 offer some database encryption and I test with AES and it work so far, but I don't known of to deal with the DB password.

The DB must have a single password but I want the application so be accesible and started by any user without the help of an administrator (who would enter the master password for example)

How can I secure the information in the database and make it usable by multiple users without an administrator involved?

32
0 + 0
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.