Delphix Products

 View Only
  • 1.  Delphix Masking - Mapping for individual digits

    Posted 05-23-2022 12:15:00 AM
    Hi Team,

    Could you please advise if there is any in-built algorithm in delphix which allows me to do the following:

    I would like to define how individual digits in a numeric value should masked:
    1 > 9, 2 > 8, 3 > 4, 4 > 5 and so on for all the 10 digits.
    Hence if the original number is 1234, it should be masked to 9845. If its 3214, it should be masked to 4895 and so on.

    Thanks,

    ------------------------------
    Rajat Solanki
    TCS
    Delphix Community Members
    ------------------------------


  • 2.  RE: Delphix Masking - Mapping for individual digits
    Best Answer

    Posted 05-23-2022 05:07:00 PM
    Hi Rajat,

    Thanks for reaching out. Great question and it is possible to arrange this. 

    The algorithm that comes to mind here is Segment Mapping (SM). This enables you to map In>Out per character and is a built-in algorithm.
    A new version is being developed and is soon to be released as well. 

    If greater control is needed or you need to mask different data types (i.e. numeric fields with leading masked Zeros which is one consideration), then I would recommend reaching out to Technical Services as it might require a special configuration or a Custom Algorithm.
    Technical Services are happy to help you with that.


    Please let us know if there are any questions.
    Happy to help.

    Kind regards,












    ------------------------------
    Anders Karlsson
    Delphix Support
    Delphix
    ------------------------------



  • 3.  RE: Delphix Masking - Mapping for individual digits

    Posted 05-24-2022 12:24:00 AM
    Hi,

      Could you please let me know the Delphix version in which rule can be created? or this capability is not released yet?

    Thanks
    Nandkumar Patel.

    ------------------------------
    Nandkumar Patel
    Community Member
    Cognizant Technology Solutions
    ------------------------------



  • 4.  RE: Delphix Masking - Mapping for individual digits

    Posted 05-24-2022 09:20:00 AM
    Hi Nandkumar,
    Segment Mapping is an algorithm provided and built into the product, you can find more information here: https://maskingdocs.delphix.com/Securing_Sensitive_Data/Algorithms/Algorithm_Frameworks/Segment_Mapping/

    Thanks,
    Michael

    ------------------------------
    Michael Torok
    Community Mgmt & Experience, Sr. Director
    Delphix
    ------------------------------



  • 5.  RE: Delphix Masking - Mapping for individual digits

    Posted 05-24-2022 09:42:00 AM

    Hi,

     

    Under each segment there minimum value that can be treated for masking is 2.

     

    We are looking for Digit by Digit or Character by character by character masking. Hence Segment mapping will not work.

     

    Please see below example and please suggest how we can achieve it.  (Please Note: There can be digits and character of data length range from 10 to 20 )

     

    Nine digit value masked value should get masked as below. (Mapping of number at the last of this mail)

     

    Scenario 1:  Below masked value is based on Green table below as a fixed values to be replaced.

     

    Database value

    1

    3

    5

    2

    2

    4

    9

    4

    0

    Masked value should

    9

    4

    1

    8

    8

    5

    6

    5

    7

     

    Scenario 2:

    Database value

    1

    3

    5

    -

    2

    2

    4

    -

    9

    4

    0

    Masked value should

    9

    4

    1

    -

    8

    8

    5

    -

    6

    5

    7

     

     

    If we use segment mapping , I will have only 9 segments with min 2 / 3/ 4 length. So it cannot be used here.  

    If we use character mapping then how we can add mapping per digit as per last table in this mail?

    How we can do the masking for this using existing Delphix default rule?

     

    Fixed Mapping of fixed numbers for 0-9

    Number

    Always mapped to

    1

    9

    2

    8

    3

    4

    4

    5

    5

    1

    6

    2

    7

    3

    8

    4

    9

    6

    0

    7

    -

    -

     

     

    Regards,

    Nandkumar Patel

     

    This e-mail and any files transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient(s), please reply to the sender and destroy all copies of the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email, and/or any action taken in reliance on the contents of this e-mail is strictly prohibited and may be unlawful. Where permitted by applicable law, this e-mail and other e-mail communications sent to and from Cognizant e-mail addresses may be monitored.





  • 6.  RE: Delphix Masking - Mapping for individual digits

    Posted 05-24-2022 11:02:00 AM

    Hello Nandkumar,
    the logic you are proposing  is extremely insecure and I would strictly advise not to attempt to do that.
    If the sensitive data gets "stolen" it would take only minutes to reverse back to original.
    In any audition such a logic would mean a failure.

    My suggestion to you is to use character mapping (CM) framework instead.
    A digit within a string gets replaced with a different digit, alpha with alpha etc. but the logic used behind the scene is not reversible
    but still deterministic and uniqueness preserving.
    Example input / output:
    123456 / 573501
    12345 / 62104
    123456 / 210313
    123-456 / 921-432
    123.456 / 430.219

    To create a logic as described by you above you could implement it in Java using the Delphix masking extensible SDK.
    The SDK can be downloaded for free from our download site.
    Here is the documentation:  https://maskingdocs.delphix.com/Authoring_Extensible_Plugins/Introduction/



    ------------------------------
    Tino Pironti
    Masking SME
    Technical Manager
    Delphix
    ------------------------------