Database anonymization

• US 9,342,562 B2
• Filed: 01/24/2014
• Issued: 05/17/2016
• Est. Priority Date: 08/03/2010
• Status: Active Grant

• Current Assignee: Accenture Global Services Limited (Accenture PLC)
• Original Assignee: Accenture Global Services Limited (Accenture PLC)
• Inventors: Fu, Chen, Grechanik, Mark, Xie, Qing
• Primary Examiner(s): PHAM, KHANH B
• Application Number:
  US14/163,695
• Publication Number:
  US 20140143239A1
• Time in Patent Office: 844 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/24578 using ranking
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification

Abstract

At least one quasi-identifier attribute of a plurality of ranked attributes is selected for use in anonymizing a database. Each of the ranked attributes is ranked according to that attribute'"'"'s effect on a database-centric application (DCA) being tested. In an embodiment, the selected quasi-identifier attribute(s) has the least effect on the DCA. The database is anonymized based on the selected quasi-identifier attribute(s) to provide a partially-anonymized database, which may then be provided to a testing entity for use in testing the DCA. In an embodiment, during execution of the DCA, instances of database queries are captured and analyzed to identify a plurality of attributes from the database and, for each such attribute identified, the effect of the attribute on the DCA is quantified. In this manner, databases can be selectively anonymized in order to balance the requirements of data privacy against the utility of the data for testing purposes.

Claims

1. A method for database anonymization, the method comprising:

selecting a quasi-identifier attribute from ranked attributes to provide a selected quasi-identifier attribute, wherein each of the ranked attributes is ranked according to a number of statements in code implementing a database-centric application affected by the ranked attribute; and

anonymizing, by a processor, a database based on the selected quasi-identifier attribute to provide a partially anonymized database.

2. The method of claim 1, wherein the selected quasi-identifier attribute comprises a ranked attribute of the ranked attributes that has a least effect on the database-centric application.

3. The method of claim 1, further comprising:

fully anonymizing the database to provide a fully anonymized database; and

providing the fully anonymized database and the database-centric application to a testing entity, wherein the testing entity determines the ranked attributes based on execution of the database-centric application using the fully anonymized database.

4. The method of claim 3, further comprising:

providing a desired test coverage parameter to the testing entity, wherein the testing entity further determines the ranked attributes based on the desired test coverage parameter.

5. The method of claim 1, further comprising:

providing the partially anonymized database and the database-centric application to a testing entity for functional testing of the database-centric application.

6. An apparatus for database anonymization, the apparatus comprising:

a quasi-identifier attribute selection engine, executed by a processor, to select a quasi-identifier attribute from ranked attributes to provide a selected quasi-identifier attribute, each of the ranked attributes being ranked according to a number of statements in code implementing a database-centric application affected by the ranked attribute; and

an anonymizer engine to anonymize a database based on the selected quasi-identifier attribute to provide a partially anonymized database.

7. The apparatus of claim 6, wherein the selected quasi-identifier attribute comprises a ranked attribute of the ranked attributes that has a least effect on the database-centric application.

8. A method for database anonymization, the method comprising:

analyzing, by a processor, a database-centric application to identify a plurality of attributes used by the database-centric application by capturing instances of database queries during execution of the database-centric application;

for each attribute of the plurality of attributes, quantifying, by the processor, a number of statements in code implementing the database-centric application affected by the attribute; and

ranking, by the processor, the plurality of attributes according to the number of statements in the code affected by each attribute of the plurality of attributes.

9. The method of claim 8, further comprising:

inserting, by the processor, callback instructions before and after substantially all instructions in code implementing the database-centric application,

wherein execution of the callback instructions provides as output complete execution status of the database-centric application.

10. The method of claim 8, wherein capturing the instances of database queries further comprises:

executing the database-centric application using a fully anonymized database.

11. The method of claim 8, wherein quantifying a number of statements in code implementing the database-centric application affected by the attribute further comprises:

constructing a control-flow graph of the database-centric application; and

counting the number of statements affected by the attribute while traversing the control-flow graph.

12. The method of claim 8, wherein ranking the plurality of attributes further comprises:

ranking lower those attributes of the plurality of attributes for which the number of statements is relatively larger; and

ranking higher those attributes of the plurality of attributes for which the number of statements is relatively smaller.

13. The method of claim 8, further comprising:

selecting from among the ranked plurality of attributes a quasi-identifier attribute to be used to partially anonymize a database to be used to test the database-centric application.

14. An apparatus for database anonymization, comprising:

a processor; and

a storage device, operatively connected to the processor, having stored thereon instructions that, when executed by the processor, cause the processor to;

analyze a database-centric application to identify a plurality of attributes used by the database-centric application by capturing instances of database queries during execution of the database-centric application;

for each attribute of the plurality of attributes, quantify a number of statements in code implementing the database centric application affected by the attribute; and

rank the plurality of attributes according to the number of statements in the code affected by each attribute of the plurality of attributes.

15. The apparatus of claim 14, the storage device further comprising instructions that, when executed by the processor, cause the processor to:

insert callback instructions before and after substantially all instructions in code implementing the database-centric application,

wherein execution of the callback instructions provides as output complete execution status of the database-centric application.

16. The apparatus of claim 14, wherein those instructions that cause the processor to capture the instances of database queries are further operative to:

execute the database-centric application using a fully anonymized database.

17. The apparatus of claim 14, wherein those instructions that cause the processor to quantify a number of statements in code implementing the database centric application affected by the attribute are further operative to:

construct a control-flow graph of the database-centric application; and

count the number of statements affected by the attribute while traversing the control-flow graph.

18. The apparatus of claim 14, wherein those instructions that cause the processor to rank the plurality of attributes are further operative to:

rank lower those attributes of the plurality of attributes for which the number of statements is relatively larger; and

rank higher those attributes of the plurality of attributes for which the number of statements is relatively smaller.

19. The apparatus of claim 14, the storage device further comprising instructions that, when executed by the processor, cause the processor to:

select from among the ranked plurality of attributes a quasi-identifier attribute to be used to partially anonymize a database to be used to test the database-centric application.