Dynamic de-identification of data

• US 8,881,019 B2
• Filed: 06/21/2012
• Issued: 11/04/2014
• Est. Priority Date: 11/22/2010
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Gupta, Ritesh K, Nagaraj, Prathima, Padmanabhan, Sriram K.
• Primary Examiner(s): LEGGETT, ANDREA C.
• Application Number:
  US13/529,303
• Publication Number:
  US 20120266255A1
• Time in Patent Office: 866 Days
• Field of Search: 715/780, 715/764, 715/741, 726/26
• US Class Current: 715/741
• CPC Class Codes: G06F 16/254 Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

The present invention relates to a method, computer program product and system for masking sensitive data and, more particularly, to dynamically de-identifying sensitive data from a data source for a target application, including enabling a user to selectively alter an initial de-identification protocol for the sensitive data elements via an interface.

Claims

1. A computer-implemented method of dynamically de-identifying sensitive data from a data source for a target application comprising:

identifying sensitive data elements within data from the data source and generating data definitions for data elements indicating the sensitive data elements via a discovery tool including a processor, wherein the data definitions include a plurality of properties for the data elements including a type of sensitive data contained within the sensitive data elements and determined by the discovery tool;

determining, via a processor, an initial de-identification protocol for each of the sensitive data elements based on the properties of the data definitions of the sensitive data elements generated by the discovery tool and one or more predetermined rules, wherein the one or more predetermined rules specify a de-identification protocol for each sensitive data element based on the determined type of sensitive data contained in that sensitive data element;

altering the determined initial de-identification protocol of a sensitive data element to a different user-selected de-identification protocol and at least one property indicated by the data definition for a sensitive data element via a user interface, wherein the at least one property includes the determined type of sensitive data;

modifying, via a processor, the predetermined rules in accordance with the user-selected de-identification protocol and the altered at least one property to process subsequent data elements from the data source according to the modified rules to enable the de-identification protocols indicated by the modified rules to be applied to the subsequent data elements; and

applying the corresponding de-identification protocols to the sensitive data elements, via a processor, to de-identify the sensitive data elements for the target application.

2. The computer-implemented method of claim 1, wherein the user interface further provides enablement or disablement of maintenance of affinity for the de-identification, wherein maintenance of affinity enables operators to produce results for de-identified data in an order that corresponds to an order of results for unmasked data.

3. The computer-implemented method of claim 2, wherein the de identification protocols that maintain affinity are determined and presented by the user interface in response to the affinity enablement, thereby disabling remaining de-identification protocols.

4. The computer-implemented method of claim 1, wherein the de-identification is for an Extract Transform Load (ETL) job.

5. The computer-implemented method of claim 1, further comprising populating the user interface with the sensitive data elements based on the generated data definitions.

6. The computer-implemented method of claim 1, further comprising selectively re-identifying a de-identified data element to produce an unmasked data element.