METHOD AND SYSTEM FOR ANONYMIZING DATA DURING EXPORT

• US 20130282679A1
• Filed: 05/24/2012
• Published: 10/24/2013
• Est. Priority Date: 04/18/2012
• Status: Active Grant

• Current Assignee: Software AG
• Original Assignee: Software AG
• Inventors: KHIN, Gerald, Prowald, Mathias
• Granted Patent: US 8,949,209 B2
• Time in Patent Office: Days
• US Class Current: 707/698
• CPC Class Codes: G06F 16/258 Data format conversion from or to a database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification

Abstract

The present invention refers to a computer-implemented method of anonymizing data of a database (2), wherein the method comprises the following steps:

• a. exporting at least one data record (10) from the database (2), wherein the data record (10) has a structure and comprises content (100); and
• b. anonymizing at least part of the content (100) to produce at least one anonymized data record (3);
• c. wherein the anonymized data record (3) has the same structure than the data record (10) read from the database (2).

Claims

1. A computer-implemented method of anonymizing data of a database, the database including a plurality of data records, with each one of the plurality of data records including a plurality of content elements, each one of the plurality of data records adhering to a first defined structural relationship based on the plurality of content elements, the method comprising:

anonymizing, in connection with at least one processor, at least one of the plurality of content elements for each one of the plurality of data records to produce at least one corresponding anonymized content element; and

exporting, in connection with the anonymizing, the plurality of data records,

wherein each one of the plurality of exported data records includes the at least one corresponding anonymized content element instead of the at least one of the plurality of content elements,

wherein each one of the exported plurality of data records adheres to a second defined structural relationship, and

wherein the first defined structural relationship is equal to the second defined structural relationship.

2. The method of claim 1, wherein the anonymizing is performed during the exporting, so that no confidential content is stored outside of the database during the exporting process.

3. The method of claim 1, wherein the anonymizing comprises:

generating a random encryption key; and

deleting the random encryption key,

wherein the at least one corresponding anonymized content element is anonymized with the generated random encryption key.

4. The method of claim 1, further comprising selecting the at least one of the plurality of content elements for each one of the plurality of data records that are to be to be anonymized.

5. The method of claim 1, wherein the anonymizing is performed in a deterministic manner.

6. The method of claim 5, wherein the anonymizing is performed using a cryptographic hash function.

7. The method of claim 5, wherein the anonymizing is performed using a random anonymizing process and using a cache to remember already created anonymized content.

8. The method of claim 1, wherein the content to be anonymized adheres to at least one data type and wherein the anonymizing preserves the validity of the anonymized content in accordance with the at least one data type.

9. The method of claim 1, wherein the anonymizing is performed using one or more predefined transformation rules.

10. The method of claim 9, wherein the one or more predefined transformation rules are provided as code annotations and/or as a configuration file.

11. The method of claim 1, wherein the at least one of the plurality of content elements for each one of the plurality of data records comprises confidential data and wherein the corresponding anonymized data record is usable for being investigated while preserving the confidentiality of the confidential data.

16. The method of claim 6, wherein the cryptographic hash function is the Message-Digest Algorithm 5 (MD5) and/or the Secure Hash Algorithm (SHA).

17. The method of claim 10, wherein the one or more predefined transformation rules are provided as an XML file.

12. A system for anonymizing data of a database, the database including a plurality of data records, with each one of the plurality of data records includes a content element, the system comprising:

processing resources including at least one processor and a memory, the at least one processor being configured to control a plurality of computer-related components including;

an exporter component configured to export the plurality of data records at least one data record from the database along with the included content element for each one of the plurality of data record; and

an anonymizer component configured to anonymize the content element for each one of the plurality of data records to produce a corresponding anonymized content element such that the content element for each one of the plurality of data records and the corresponding anonymized content element for each one of the data records is consistent in size and/or an amount of content.

13. The system of claim 12, wherein the content element for each one of the plurality of data records adheres to a data type and wherein the anonymizer component is configured to preserve the validity of the corresponding anonymized content element in accordance with the data type.

14. The system of claim 12, further comprising a transformation rule library configured to store one or more predefined transformation rules to be used by the anonymizer component.

15. The system of claim 12, further comprising a graphical user interface configured to enable a user to select content element to be anonymized, wherein the anonymizer component is configured to anonymize only the selected content.

18. A non-transitory computer-readable storage medium tangibly storing instructions for use with a database system, the database system including a with a plurality of data records, with each one of the plurality of data records including a plurality of content elements, each one of the plurality of data records adhering to a first defined structural relationship based on the plurality of content elements, the stored instructions comprising instructions that, when executed by at least one processor of a computer system, are configured to:

anonymize at least one of the plurality of content elements for each one of the plurality of data records to produce at least one corresponding part of the content to produce at least one anonymized content element data record; and

export, in connection with the anonymizing, the plurality of data records,

wherein each one of the plurality of exported data records includes the at least one corresponding anonymized content element instead of the at least one of the plurality of content elements,

wherein each one of the exported plurality of data records adheres to a second defined structural relationship, and

wherein the first defined structural relationship is equal to the second defined structural relationship.