We have a healthcare application. It is in production. We want to make it HIPPA compliant. One of the requirements is to encrypt patient information. We are using patient's last name, date of birth and social security number in various areas of the application. We provide auto complete behaviour where patient's last name field is used, we also provide search with last name and date of birth.
Can anyone suggest how we can encrypt these three columns in database, so that we don't have to change our existing code and queries?
Or if we can do it only changing application code?
Or if we can do it only changing database queries/stored procedures?
We are using ASP.NET (C#) and MS SQL Server 2008, please let us know any solution which would have very little impact on our exiting code and queries.
