Implementation of data protection policies in ETL landscapes
AssigneeInternational Business Machines Corporation
InventorsStevan Antic, Albert Maier, Oliver Suhre
Life of this patent
Estimating the term…
Abstract
Embodiments of the present invention provide, systems, methods, and computer program products for processing data in an extract, transform, and load system. Embodiments of the present invention provide protective enhancements to be applied to data during extract-transform-load operations, including protections that can prevent unauthorized access and/or modifications to data stored on an intermediate computer system. Embodiments of the present invention can afford users with the ability to modify the protective enhancements and provide users with transformation operations compatible with the protective enhancements during extract-transform-load operations.
Claims11
A computer program product for processing data in an extract, transform, and load system, comprising:
- one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising:
- program instructions to receive data from a source application to be transformed by an intermediate computer system and transmitted to a target computer system, wherein the data includes values which are categorized into one or more attributes;
- program instructions to correlate the one or more attributes to a predefined attribute, the protection class, and supported transformations, by referencing a glossary storing the predefined attributes and predefined data protection policies;
- program instructions to apply one or more data protection policies to the data to control user access to the data when stored on the intermediate computer system, wherein the one or more data protection policies include instructions to modify the values of the data using a protection class;
- program instructions to apply the one or more data protection policies to the data to obscure the values of the data;
- program instructions to transmit the data, which is protected and obscured, to the intermediate computer system;
- and
- program instructions to transform the data into a format used by the target computer system.
A computer system for processing data from a first computer system, comprising:
- one or more computer processors;
- one or more computer readable storage media;
- program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
- program instructions to receive data from a source application to be transformed by an intermediate computer system and transmitted to a target computer system, wherein the data includes values which are categorized into one or more attributes;
- program instructions to correlate the one or more attributes to a predefined attribute, the protection class, and supported transformations, by referencing a glossary storing the predefined attributes and predefined data protection policies;
- program instructions to apply one or more data protection policies to the data to control user access to the data when stored on the intermediate computer system, wherein the one or more data protection policies include instructions to modify the values of the data using a protection class;
- program instructions to apply the one or more data protection policies to the data to obscure the values of the data;
- program instructions to transmit the data, which is protected and obscured, to the intermediate computer system;
- and
- program instructions to transform the data into a format used by the target computer system.
Dependencies are inferred from the claim text.