Adaptive Column-Level Data Masking for Evolving Database Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data masking approaches fail to adapt to new data attributes and require frequent maintenance, making them ineffective for real-time data security as data types and requirements evolve.
Innovation Solution
A method and apparatus that obtain database metadata, validate requests, perform data masking operations at a column level, and store records, enabling flexible and adaptive data masking with efficient recovery from failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If prior data masking approaches are used, then data masking can be implemented, but they fail to adapt to new data attributes and require frequent maintenance
Solution Approach 1:
The patent implements dynamic data masking by analyzing the actual data content and applying masking rules based on data sensitivity detection, rather than using static pre-defined rules. The system continuously adapts to new data attributes by analyzing data patterns and automatically adjusting masking strategies, eliminating the need for frequent manual maintenance while maintaining high adaptability to evolving data types.
2Reliability
If data masking is performed on entire tables, then data security is improved, but productivity and query performance deteriorate
Solution Approach 1:
The patent applies masking selectively at the column and cell level based on data sensitivity analysis, rather than masking entire tables. The system identifies specific sensitive columns and applies masking only to those areas, preserving query performance for non-sensitive data while maintaining security for sensitive information, thus achieving both high reliability and productivity.
Solution Approach 2:
The patent segments the database into sensitive and non-sensitive portions, applying different masking strategies to each. By dividing the data handling approach into targeted segments rather than uniform table-level masking, the system maintains security where needed while preserving query efficiency for the majority of non-sensitive data access operations.
3Ease of manufacture
If data masking rules are defined at database level, then implementation is simplified, but flexibility to adapt to changing requirements is reduced
Solution Approach 1:
The patent implements dynamic masking rules that automatically adjust based on data content analysis and changing security requirements. The system continuously monitors data patterns and adapts masking strategies without requiring manual rule updates, maintaining implementation simplicity through automation while achieving high flexibility to evolving requirements.
Solution Approach 2:
The patent enables the data masking system to self-adjust and self-optimize by automatically analyzing data sensitivity and adapting masking rules. The system performs self-service maintenance by continuously learning from data patterns and automatically updating masking strategies, eliminating the need for manual intervention while maintaining both simplicity and adaptability.
Data Source
AI summary
Methods, non-transitory computer readable media, and an apparatus that includes obtaining a database and metadata associated with the database in response to a request for data masking. Next, the obtained metadata is compared with the received request to determine when the obtained metadata validates the received request. A data masking operation is performed on the obtained database at a column level when the determination indicates the received request is validated. A record of the performance of the data masking operation on the obtained database at the column level is stored.