Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java

A Set of Connection Strings for an Application

On the client side, we are going to handle our table of connection strings as a HashMap, which we will call connsHash. You must assure that it is marked private so only the OracleJavaSecure class can see it. Here is the declaration:

    private static HashMap<String, RAW> connsHash = null;

We will have exchanged keys with the Oracle database, so we can receive this table of connection strings encrypted with the shared password key. We will only decrypt them as needed, creating a connection and then freeing the connection string for garbage collection (retaining no class member reference to it.) Note that until the garbage collector runs (automatically, self-scheduling), the clear-text connection ...