Systems and methods for dynamic masking of data
AssigneeIdera, Inc.
InventorVicky Harp
Life of this patent
Estimating the term…
Abstract
Embodiments disclosed herein may be useful for controlling access to data, and particularly to data intended for restricted access. In at least one embodiment, a system and method for dynamic data masking intercepts input/output (I/O) read requests for data in external memory, determines if the data to be read should be masked, and appropriately, dynamically masks data before the requested data is written into system memory. The system and method for dynamic data masking provides a technical improvement to computing systems by, for example, avoiding the need to create an entirely separate database with scrubbed data and, thus, resource and costs associated with creating a separate, scrubbed database.
Claims21
A method to dynamically enhance data security by masking selected data in transit from a database in a first memory to a second memory using a dynamic data masking system logically coupled between an input/output (I/O) system of a database system application and the database, the method comprising:
- with the dynamic data masking system:
- intercepting a request from the database system application to read data from the database in the first memory for writing to the second memory;
- determining if a portion of requested data should be masked;
- if a portion of requested data is determined to be masked, masking the portion of requested data determined to be masked;
- and
- providing the requested data with masking to the I/O system;
- and
- with the database system application:
- copying the requested data with masking to the second memory.
A system to dynamically enhance data security by masking selected data in transit from a database in a first memory to a second memory, the system comprising:
- a processor;
- a memory, coupled to the processor, having a dynamic data masking system encoded therein, executable by the processor, and logically coupled between an input/output (I/O) system of a database system application and the database to:
- intercept a request from the database application system to read data from the database in the first memory for writing to the second memory;
- determine if a portion of requested data should be masked;
- if a portion of requested data is determined to be masked, mask the portion of requested data determined to be masked;
- and
- provide the requested data with masking to the I/O system;
- and
- the memory further having the database system application encoded therein and executable by the processor to:
- copy the requested data with masking to the second memory.
A non-transitory, computer readable medium comprising a dynamic data masking system and database system application encoded therein, the dynamic data masking system is logically coupled between an input/output (I/O) system of a database system application and a database, to dynamically enhance data security by masking selected data in transit from the database in a first memory to a second memory, the non-transitory, computer readable medium, wherein:
- the dynamic data masking system is executable to:
- intercept a request from the database application system to read data from the database in the first memory for writing to the second memory;
- determine if a portion of requested data should be masked;
- if a portion of requested data is determined to be masked, mask the portion of requested data determined to be masked;
- and
- provide the requested data with masking to the I/O system;
- and
- the database system application is executable to:
- copy the requested data with masking to the second memory.
Dependencies are inferred from the claim text.