About Data Masking

Overview

Data Security Broker Shield can mask the encrypted data and return the data in a user-friendly format without decryption or with partial decryption.

Data Masking converts data values into a predefined format that is typically irreversible. A Masking Mode defines the format used to mask selected data. You can create new Masking Modes and use them in a policy or map them to a column.

Creating a new masking mode

This section demonstrates how to create a new masking mode that is added to the Data Protection Library.

To create a masking mode, complete the following steps:

1. Go to the Data Protection Library and in the header, click the Plus (+) sign to begin creating a new mode.

2. Select Masking Mode from the drop-down list. The Masking Mode Builder dialog appears.

3. Enter a unique Mask Mode Name (30 characters or less) and optionally, a Description of up to 100 characters.

4. Select one of the following options from the Mask Mode drop-down menu: FIXED, PATTERN, NUMERIC, CHARACTER.

5. In the Mask Format field, enter the string to be used to mask the data.

6. Click Save. The new masking mode appears in the Data Protection Library, as well as a selection in the Encryption Mode drop-down.

   The compatible data types are automatically associated with the mode when you click Save. In this way, only the modes that are compatible with a column's data type are shown. 

Viewing and editing a masking mode

This section demonstrates how to view and edit Masking Modes. However, editing is limited to modifying the name and description of the selected mode.

To view the details of a masking mode, complete the following steps:

1. Go to the Data Protection Library and click the carrot icon (>) next to Masking Modes to view the list of modes.

2. Select a mode from the list. The details for the mode appear in the window on the right.

   To edit a masking mode, peform the following steps:

   a. Go to the Data Protection Library and click the carrot icon (>) next to Masking Modes to view the list of modes. The details for the mode appear in the window on the right.

   b. Click the Pencil icon in the upper right corner to edit the mode.

   c. Modify the Mask Mode Name.

   d. Modify the Description for the mode.

3. Click Save.

To perform Data Masking , follow the steps below:

1. Refer to the Configure RBAC Policy section configure a Role-Based Access Control (RBAC) policy.

2. Refer to the Create RBAC Policy section to create a RBAC policy.

3. Refer to the Configure User groups section to configure or add user groups.

4. Refer to the Apply RBAC policy section to a RBAC policy to user groups.

5. Perform a simple masking by following the instructions in the Apply simple masking section to a RBAC policy to user groups.