Method for altering encryption status in a relational database in a continuous process

1. A method for altering encryption status in a database, said method comprising the steps of:

providing a table in said database, said table including a maintenance area and a base area, said base area including a first set of records;

copying said first set of records from said base area to said maintenance area, thereby creating, in said maintenance area, a second set of records;

while altering encryption status of said base area and in response to a user instruction to modify data in a record in said first set of records, modifying data in a record in said second set of records in said maintenance area instead of modifying data in any record in said first set of records in said base area; and

after altering encryption status of said base area, copying said second set of records in said maintenance area to said base area to replace said first set of records, thereby creating in said base area a third set of records, and then modifying data in a record in said third set of records in said base area.

2. The method of claim 1 , wherein said step of modifying a record in said second set of records is implemented in a trigger which is added to said table.

3. The method of claim 1 , wherein modifying a record in said second set of records comprises receiving data manipulation language (DML) statements.

4. The method of claim 1 , wherein each base area in said database table has a corresponding maintenance area.

5. The method of claim 1 , comprising the further step of:

emptying said maintenance area.

6. The method of claim 1 , comprising the further step of:

emptying said base area before said step of modifying a record in said second set of records.

7. The method of claim 6 , wherein said step of emptying the base area comprises the step of:

setting the value of a record in said first set of records to NULL.

8. The method of claim 1 , comprising the further step of:

changing a data type of said base area.

9. The method of claim 8 , wherein the data type of the base area is changed to a data type representing raw binary data.

10. The method of claim 1 , wherein modifying data in a record in said third set of records comprises receiving data manipulation language (DML) statements.

11. The method of claim 1 , wherein said base area comprises a first column of said table and said maintenance area comprises a second column of said table.

12. The method of claim 1 , wherein said step of altering encryption status of said base area comprises activating encryption means of said base area.

13. A computer readable medium containing instructions for executing the method recited in claim 1 .

14. A system configured to execute the method recited in claim 1 .

15. A method for altering encryption status in a database, said method comprising the steps of:

providing a table in said database, said table including a maintenance area and a base area, said base area including a first set of records;

copying all data of said first set of records from said base area to said maintenance area, thereby creating a second set of records in said maintenance area;

while altering encryption status of said base area, modifying data in a record in said second set of records in said maintenance area instead of modifying data in any record in said first set of records in said base area upon receiving an instruction to modify data in a record in said first set of records; and

after altering encryption status of said base area, copying all data of said second set of records in said maintenance area to said base area to replace said first set of records, thereby creating a third set of records in said base area.

16. The method of claim 15 , comprising the further step of:

modifying the third set of records.

17. The method of claim 16 , wherein: copying all data of said first set of records from said base area to said maintenance area, further comprises the steps of:

decrypting all data of said first set of records; and

copying the decrypted data as the second set of records in said maintenance area.

18. The method of claim 16 , wherein said step of copying all data of said first set of records from said base area to said maintenance area creates said second set of records as a mirror of said first set of records.