Data field masking and logging system and method

A computer-implemented method for controlling expression of data from a sensitive data storage device, the computer-implemented method comprising:

• receiving from a software application, at or via one or more processors, a revelation request initiated by a user, the revelation request relating to masked one or more portions of information of a data field;
• revealing, in response to the revelation request, the masked one or more portions of the information of the data field at a destination device;
• automatically storing in a memory log, via the one or more processors, identification information of the user, a time and date of processing of the revelation request, and at least one of (a) a data type for the masked one or more portions of the information of the data field, (b) a data type for the data field, and (c) information to permit identification of the information of the data field to generate log data;
• generating, via the one or more processors, a notification based upon at least a result of a comparison of the log data with a predetermined usage rule;
• and
• denying a revelation request from the user upon determining, based upon the log data, that a number of revelation requests from the user exceeds a predetermined threshold.

A computer-implemented method for controlling expression of data from a sensitive data storage device, the computer-implemented method comprising:

• receiving from a software application, at or via one or more processors, a revelation request initiated by a user, the revelation request relating to masked one or more portions of information of a data field;
• revealing, in response to the revelation request, the masked one or more portions of the information of the data field at a destination device;
• automatically storing in a memory log, via the one or more processors, identification information of the user, a time and date of processing of the revelation request, and at least one of (a) a data type for the masked one or more portions of the information of the data field, (b) a data type for the data field, and (c) information to permit identification of the information of the data field to generate log data;
• adjusting, via the one or more processors, user permissions associated with rights to issue or be granted one or more revelation requests based upon at least a result of a comparison of the log data with a predetermined usage rule;
• and
• denying a revelation request from the user upon determining, based upon the log data, that a number of revelation requests from the user exceeds a predetermined threshold.