MASKING DATA WITHIN JSON-TYPE DOCUMENTS

• US 20160127322A1
• Filed: 10/29/2014
• Published: 05/05/2016
• Est. Priority Date: 10/29/2014
• Status: Active Grant

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Ben-Natan, Ron, Domany, Tamar, Farkash, Ariel, Goldsteen, Abigail, Rozenberg, Boris, Gorkhman, Igor
• Granted Patent: US 9,699,145 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method comprising using at least one hardware processor for: receiving input from a user with respect to masking of a data element in one or more documents of a java script object notation (JSON) type, wherein the input comprises: an identifier of the data element, and one or more constraints for masking the data element based on the hierarchy of the one or more documents of the JSON-type; and generating a masking rule for the one or more documents of the JSON-type based on the input.

Claims

1. A method comprising using at least one hardware processor for:

receiving input from a user with respect to masking of a data element in one or more documents of a java script object notation (JSON) type, wherein the input comprises;

(i) an identifier of the data element, and

(ii) one or more constraints for masking the data element based on the hierarchy of the one or more documents of the JSON-type; and

generating a masking rule for the one or more documents of the JSON-type based on the input.

2. The method of claim 1, wherein said at least one hardware processor is further used for enforcing the masking rule on a document of the one or more documents of the JSON-type.

3. The method of claim 2, wherein the enforcing of the masking rule on the document is performed online.

4. The method of claim 3, wherein the enforcing of the masking rule comprises:

listening to traffic in a network,

identifying the document as it passes through the network, and

enforcing the masking rule on the object.

5. The method of claim 2, wherein the enforcing of the masking rule on the document is performed offline.

6. The method of claim 1, wherein the generating of the masking rule comprises generating a script.

7. The method of claim 6, wherein the language of the script is JavaScript.

8. The method of claim 6, wherein the language of the script is extended with one or more additional functions.

9. The method of claim 2, wherein:

the generating of the masking rule comprises generating a script, and

the enforcing of the masking rule on the document comprises executing the script on the document.

10. The method of claim 1, wherein the receiving of the input from the user comprises providing the user with a form to be filled out and wherein the input is received by the form.

11. The method of claim 1, wherein the receiving of the input from the user comprises providing the user with a display of a document of the one or more documents of the JSON-type and wherein the input is received by a selection made by the user on the display.

12. The method of claim 1, wherein the one or more documents are selected from the group consisting of:

NoSQL queries responses, messages and files.

13. The method of claim 1, wherein the JSON-type of the one or more documents is selected from the group consisting of:

JSON documents and binary JSON (BSON) documents.

14. A method comprising using at least one hardware processor for:

receiving a masking rule of a data element in one or more documents of a JSON-type, wherein the masking rule is based on the hierarchy of the one or more documents of the JSON-type; and

enforcing the masking rule on a document of the one or more documents of the JSON-type.

15. The method of claim 14, wherein the enforcing of the masking rule on the document is performed online.

16. The method of claim 15, wherein the enforcing of the masking rule comprises:

listening to traffic in a network,

identifying the document as it passes through the network, and

enforcing the masking rule on the document.

17. The method of claim 14, wherein the enforcing of the masking rule on the document is performed offline.

18. A computer program product comprising a non-transitory computer-readable storage medium having program code embodied therewith, the program code executable by at least one hardware processor to:

receive input from a user with respect to masking of a data element in one or more documents of a java script object notation (JSON) type, wherein the input comprises;

(i) an identifier of the data element, and

(ii) one or more constraints for masking the data element based on the hierarchy of the one or more documents of the JSON-type; and

generate a masking rule for the one or more documents of the JSON-type based on the input.

19. The computer program product of claim 18, wherein said program code is further executable by the at least one hardware processor to enforce the masking rule on an document of the one or more documents of the JSON-type.

20. The computer program product of claim 18, wherein the generating of the masking rule comprises generating a script.