# US 11,451,371 B2 · Data masking framework for information processing system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,371 B2 - Document ID: US11451371B2 - Status: Granted - Kind: B2 - Application number: 16/668,869 - Filed: 2019-10-30 - Published: 2021-05-06 - Granted: 2022-09-20 - Earliest claimed: 2019-10-30 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Sunil Kumar Gaddam; Dennis Wayne Tagliabue - Web page: https://patentgrep.com/patent/US11451371B2 ## CPC - H04L 9/06: the encryption apparatus using shift registers or memories for block-wise {or stream} coding, e.g. DES systems {or RC4; Hash functions; Pseudorandom sequence generators} - H04L 9/14: using a plurality of keys or algorithms - G06F 16/27: Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor - H04L 9/065: {Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3} - H04L 2209/043: of tables, e.g. lookup, substitution or mapping - H04L 2209/16: Obfuscation or hiding, e.g. involving white box - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques for improved masking data in an information processing system are provided. For example, a method comprises generating a data masking configuration file for use in an information processing system to mask at least a portion of a given data set, wherein the generation of the data masking configuration file further comprises attaching a masking algorithm function selected from a plurality of defined masking algorithm functions to each data element of the given data set to be masked. ## Claims ### Claim 1 A method, comprising: generating a data masking configuration file for use in an information processing system comprising a production system operatively coupled to a non-production system, the data masking configuration file configured to mask at least a portion of a given data set of a data source; wherein the generation of the data masking configuration file further comprises (i) grouping data elements of the given data set together based on a given data structure defined as part of a plurality of data structures, and (ii) attaching a masking algorithm function selected from a plurality of defined masking algorithm functions to each data element of the given data set to be masked; wherein the data masking configuration file generating step is performed in accordance with a processing device comprising a processor operatively coupled to a memory. ### Claim 2 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture the number of data masking threads to be spawned. ### Claim 3 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture indexes to be rebuilt post data masking. ### Claim 4 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture triggers disabled and re-enabled post data masking. ### Claim 5 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture tables to be truncated for data masking. ### Claim 6 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture one or more processes disabled during data masking. ### Claim 7 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture a data masking sequence. ### Claim 8 (depends on 1) The method of claim 1, wherein the plurality of data structures comprises a data structure configured to capture one or more objects to be excluded from data masking. ### Claim 9 (depends on 1) The method of claim 1, wherein the plurality of defined masking algorithm functions comprise a function configured to reverse data elements in the data set. ### Claim 10 (depends on 1) The method of claim 1, wherein the plurality of defined masking algorithm functions comprise a function configured to shuffle data elements in the data set. ### Claim 11 (depends on 1) The method of claim 1, wherein the plurality of defined masking algorithm functions comprise a function configured to translate data element types. ### Claim 12 (depends on 1) The method of claim 1, wherein the plurality of defined masking algorithm functions comprise a function configured to mask data elements that are not of a specific language. ### Claim 13 (depends on 1) The method of claim 1, further comprising applying the data masking configuration file in the production system of the information processing system to mask at least a portion of a production data set to generate a masked production data set. ### Claim 14 (depends on 13) The method of claim 13, further comprising generating a replica of the masked production data set. ### Claim 15 (depends on 14) The method of claim 14, further comprising sending the replica of the masked production data set to the non-production system of the information processing system to enable the non-production system to utilize the masked production data set for one or more non-production purposes. ### Claim 16 An information processing system, comprising: a production system for online processing of a given data set operatively coupled to a non-production system for offline processing of the given data set; and a data masking framework comprising a processor operatively coupled to a memory and configured to: load a data masking configuration file for use in masking at least a portion of the given data set of a data source, wherein the data masking configuration file further comprises a masking algorithm function selected from a plurality of defined masking algorithm functions attached to each data element of the given data set; and mask at least a portion of the given data set in accordance with the defined masking algorithm functions attached to each data element to generate a masked production data set, the data elements of the given data set being grouped together based on a given data structure defined as part of a plurality of data structures. ### Claim 17 (depends on 16) The system of claim 16, wherein the processor is further configured to generate a replica of the masked production data set. ### Claim 18 (depends on 17) The system of claim 17, wherein the processor is further configured to send the replica of the masked production data set from the production system to the non-production system to enable the non-production system to utilize the masked production data set for one or more non-production purposes. ### Claim 19 An article of manufacture comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes said at least one processing device to perform steps of: generating a data masking configuration file for use in an information processing system comprising a production system operatively coupled to a non-production system, the data masking configuration file configured to mask at least a portion of a given data set of a data source; wherein the generation of the data masking configuration file further comprises (i) grouping data elements of the given data set together based on a given data structure defined as part of a plurality of data structures, and (ii) attaching a masking algorithm function selected from a plurality of defined masking algorithm functions to each data element of the given data set to be masked. ### Claim 20 (depends on 19) The article of manufacture of claim 19, wherein the program code when executed by at least one processing device further causes said at least one processing device to perform the step of applying the data masking configuration file in the production system of the information processing system to mask at least a portion of a production data set to generate a masked production data set.