Method and system for logical data masking

摘要

A system and method for logically masking data by implementing masking algorithms is provided. The method includes receiving one or more inputs from user regarding type of data masking to be implemented depending on type of data entry. Data entries include alphabetical data, data comprising unique codes, data comprising dates and numerical data. Based on inputs received, the data entries are classified and appropriate masking algorithms are executed. For masking numerical data entries, the data entries are first grouped using clustering algorithms and are then shuffled using shuffling algorithms. For low level of data masking selected by a user, numerical data entries are shuffled within groups and for high level of data masking selected by a user, numerical data entries are shuffled across groups.

主权项

1. A method for implementing logical data masking on data stored in a database, the method comprising:
loading data to be masked from the database, wherein the loaded data comprises a table having one or more entries; grouping columns within the table into at least a first group of columns and a second group of columns, such that data entries within the first group of columns share a first data type, and data entries within the second group of columns share a second data type; applying a first data masking algorithm to data entries within the first group of columns and a second data masking algorithm to data entries within the second group of columns, wherein the first data masking algorithm and the second data masking algorithm are mutually distinct; wherein applying the first data masking algorithm to data entries within the first group of columns comprises;
determining that data entries within the first group of columns are of a numerical data type; andresponsive to determining that data entries within the first group of columns are of a numerical data type:
grouping individual rows of data entries within the first group of columns into at least a first group of rows and a second group of rows, wherein an individual row is grouped within the first group of rows and a second group of rows, wherein an individual row is grouped within the first group of rows based on a determination that numerical data within said individual row is quantitatively similar to numerical data within other rows within the first group of rows;receiving user input selecting a first level of data masking; andresponsive to the received user input selecting the first level of data masking:
(i) randomly swapping at least a first row data entry with a second row data entry within a first column of the first group of rows; and(ii) randomly swapping at least a first row data entry within a second column of the first group of rows, with a second row data entry within a corresponding column of the second group of rows.