Tag-Based Masking Policy Framework for Data Platforms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data platforms require manual effort for applying masking policies to individual columns or rows in databases, which is inefficient and prone to errors, especially when dealing with large datasets or sensitive information like PII data.
Innovation Solution
Implementing a tag-based masking policy framework that allows users to assign masking policies to tags, which are then automatically inherited by associated entities such as columns or tables, reducing manual effort and enabling conditional masking policy mapping.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual masking policy application is used for individual columns or rows, then flexibility in data protection is maintained, but efficiency deteriorates and errors increase
Solution Approach 1:
The patent introduces tags as intermediary elements that mediate between masking policies and data entities. Instead of manually configuring masking policies for each column or row, users assign tags to entities and associate masking policies with tags. This intermediary approach automates the policy application process while maintaining flexibility, directly resolving the contradiction between efficiency and complexity.
Solution Approach 2:
The system enables self-service masking policy application through automatic inheritance. When a masking policy is assigned to a tag, all entities with that tag automatically inherit the policy without manual configuration. This self-service mechanism significantly improves productivity while reducing the complexity of manual configuration processes.
2Loss of time
If manual masking policy application is used, then precision in policy assignment is maintained, but time consumption increases
Solution Approach 1:
Tags serve as intermediaries that pre-define policy characteristics. By assigning masking policies to tags rather than individual entities, the system maintains precision in policy assignment while dramatically reducing configuration time. The tag acts as a pre-configured template that ensures accuracy without manual intervention.
Solution Approach 2:
The system performs preliminary action by pre-defining masking policies at the tag level before they are needed for specific entities. This preliminary configuration allows for rapid, accurate policy application to multiple entities simultaneously, reducing both time consumption and maintaining reliability.
3Adaptability or versatility
If manual masking policy application is used for large datasets, then customization capability is maintained, but scalability deteriorates
Solution Approach 1:
The patent implements universality by creating a tag-based system that can apply the same masking policy to multiple different entities (columns, rows, tables) simultaneously. This multi-functional approach maintains customization capability through selective tag assignment while enabling scalable policy application across large datasets without manual intervention for each entity.
Solution Approach 2:
Tags act as universal intermediaries that bridge masking policies and various data entities. This intermediary mechanism enables customized policy definitions to be efficiently applied across large scales by simply assigning tags to entities, maintaining both adaptability and scalability.
Data Source
AI summary
Various embodiments provide for tag-based application of a masking policy, which can be used in connection with a data platform. In particular, various embodiments enable enforcement of one or more masking policies against an entity (e.g., object) of a data platform, such as a database, a table, a row, or a column, based on one or more tags associated with the entity.