There is no way to "Mask" the value natively in sql. There are several articles that introduce encrypting.
Do a search on this site, and you will find tons of information.
I always make the application encrypt the data, because they can control encryption level, and keys better than in a db.
http://www.sqlservercentral.com/columnists/bknight/encryptfunction.asp