Securing sensitive data for cloud computing

A computer program product comprising:

• a computer readable storage apparatus having a computer readable program code embodied therein, said computer readable program code containing instructions securing sensitive data in a cloud computing environment, said securing comprising:
• associating, by a customer system, a hashing directive with a record of the customer system, wherein the cloud computing environment comprises a cloud and the customer system, wherein the customer system comprises a database storing the record, and wherein the record comprises at least one data field;
• obfuscating the record by hashing a respective value of each data field of said at least one data field pursuant to the associated hashing directive, wherein the hashing directive comprises a respective tag classifying said each data field as either a sensitive data field or a transactional data field, and a respective mode of hashing for each sensitive data field of the record;
• sending the obfuscated record to the cloud, wherein the cloud is configured to process the obfuscated record and to instantiate a cloud process result field of the record with a result value calculated with values of transactional data fields of the record;
• receiving the processed record having the instantiated result value from the cloud;
• and
• reconstituting the record by respectively reversing said obfuscating for said each sensitive data field of the record pursuant to the respective mode of hashing for each sensitive data field in the hashing directive.

A computer system comprising a processor and a computer readable memory unit coupled to the processor, said computer readable memory unit containing instructions that when run by the processor implement a method for securing sensitive data in a cloud computing environment, said method comprising:

• associating, by a customer system, a hashing directive with a record of the customer system, wherein the cloud computing environment comprises a cloud and the customer system, wherein the customer system comprises a database storing the record, and wherein the record comprises at least one data field;
• obfuscating the record by hashing a respective value of each data field of said at least one data field pursuant to the associated hashing directive, wherein the hashing directive comprises a respective tag classifying said each data field as either a sensitive data field or a transactional data field, and a respective mode of hashing for each sensitive data field of the record;
• sending the obfuscated record to the cloud, wherein the cloud is configured to process the obfuscated record and to instantiate a cloud process result field of the record with a result value calculated with values of transactional data fields of the record;
• receiving the processed record having the instantiated result value from the cloud;
• and
• reconstituting the record by respectively reversing said obfuscating for said each sensitive data field of the record pursuant to the respective mode of hashing for each sensitive data field in the hashing directive.

A process for supporting computer infrastructure, said process comprising providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in a computing system, wherein the code in combination with the computing system is capable of performing a method for securing sensitive data in a cloud computing environment, said securing comprising:

• associating, by a customer system, a hashing directive with a record of the customer system, wherein the cloud computing environment comprises a cloud and the customer system, wherein the customer system comprises a database storing the record, and wherein the record comprises at least one data field;
• obfuscating the record by hashing a respective value of each data field of said at least one data field pursuant to the associated hashing directive, wherein the hashing directive comprises a respective tag classifying said each data field as either a sensitive data field or a transactional data field, and a respective mode of hashing for each sensitive data field of the record;
• sending the obfuscated record to the cloud, wherein the cloud is configured to process the obfuscated record and to instantiate a cloud process result field of the record with a result value calculated with values of transactional data fields of the record;
• receiving the processed record having the instantiated result value from the cloud;
• and
• reconstituting the record by respectively reversing said obfuscating for said each sensitive data field of the record pursuant to the respective mode of hashing for each sensitive data field in the hashing directive.