a system , method and program product for implementing a database security model . a database security model is disclosed that includes : a system for maintaining private data in an encrypted storage area ; an encr system for implementing a plurality of encr routines , wherein each of the encr routines is callable from a database application to access and process private data and wherein the encr system operates in a functional space separate from the database application ; and a crypto system having a private key and decryption system , wherein the crypto system decrypts private data in response to receiving a decrypt request and public key from an encr routine , and wherein the crypto system operates in a functional space separate from the encr system .