초록 ▼

Methods and systems for tracking masking of one or more data elements in a datastore are disclosed. The methods involve monitoring one or more masking operations on the one or more data elements in the datastore. Thereafter, one or more metadata associated with the one or more masking operations are

Methods and systems for tracking masking of one or more data elements in a datastore are disclosed. The methods involve monitoring one or more masking operations on the one or more data elements in the datastore. Thereafter, one or more metadata associated with the one or more masking operations are identified. Subsequent to identifying the one or more metadata, at least a part of the one or more metadata may be recorded. This metadata may then be transmitted to the destination when a copy (full/partial) of the original data is made, enabling the same information on masking to be obtained at the destination, as at the source.

대표청구항 ▼

1. A method of tracking masking of one or more data elements in a datastore of a server, the method comprising: monitoring one or more masking operations associated with the one or more data elements;identifying one or more metadata corresponding to the one or more masking operations;generating a wa

1. A method of tracking masking of one or more data elements in a datastore of a server, the method comprising: monitoring one or more masking operations associated with the one or more data elements;identifying one or more metadata corresponding to the one or more masking operations;generating a watermark table comprising at least a portion of the one or more metadata at a first security controller;creating a pointer table in the datastore, the pointer table comprising one or more pointers to the one or more metadata in the watermark table;generating a copy of at least a part of the one or more data elements in the datastore and a copy of at least a portion of the pointer table at a destination having security operations controlled by a second security controller;communicating the watermark table containing the at least a portion of the one or more metadata between the first security controller and the second security controller;setting the second security controller to access the pointer table in the datastore; andwherein the one or more metadata are selected from the group consisting of a masking status of at least a part of the one or more data elements, a time of performing the masking operation, a type of masking algorithm corresponding to the masking operation, a degree of the masking operation, an identity of an application performing the masking operation, and a context of the masking operation. 2. The method of claim 1 further comprising: copying at least a part of the one or more data elements to a destination; andcopying the one or more metadata associated with the at least a part of the one or more data elements to the destination. 3. The method of claim 1 further comprising storing one or more source identifiers in the watermark table, wherein the one or more source identifiers are associated with an original source corresponding to the one or more data elements. 4. The method of claim 3 wherein, the recording comprises storing the watermark table within the datastore. 5. The method of claim 1 further comprising performing one or more of an update operation on the watermark table and a read operation on the watermark table, wherein one or more of the update operation and the read operation are performed through an Application Programming Interface (API). 6. A system for tracking masking of one or more data elements in a datastore of a server, the system comprising: a monitoring unit configured to monitor one or more masking operations associated with the one or more data elements;an identification unit configured to identify one or more metadata corresponding to the one or more masking operations;a watermark table creation unit configured to generate a watermark table comprising at least a portion of the one or more metadata at a first security controller;a pointer table in the datastore, the pointer table comprising one or more pointers to the one or more metadata in the watermark table;a propagation unit to generate a copy of at least a part of the one or more data elements in the datastore and a copy of at least a portion of the pointer table at a destination having security operations controlled by a second security controller;a communication unit to send the watermark table containing the at least a portion of the one or more metadata between the first security controller and the second security controller, the second security controller set to access the pointer table in the datastore; andwherein the one or more metadata are selected from the group consisting of a masking status of at least a part of the one or more data elements, a time of performing the masking operation, a type of masking algorithm corresponding to the masking operation, a degree of the masking operation, an identity of an application performing the masking operation, and a context of the masking operation. 7. The system of claim 6 further comprising the watermark table creation unit configured to store one or more source identifiers in the watermark table, wherein the one or more source identifiers are associated with an original source corresponding to the one or more data elements. 8. The system of claim 6 further comprising one or more of an updating unit configured to perform an update operation on the watermark table and a reading unit configured to perform a read operation on the watermark table, wherein one or more of the update operation and the read operation are performed through an Application Programming Interface (API). 9. A computer-readable medium comprising computer-executable instructions for tracking masking of one or more data elements in a datastore of a server, the computer-executable instructions when executed by at least one processor, cause the at least one processor to: monitor one or more masking operations associated with the one or more data elements;identify one or more metadata corresponding to the one or more masking operations;generate a watermark table comprising at least a portion of the one or more metadata at a first security controller;create a pointer table in the datastore, the pointer table comprising one or more pointers to the one or more metadata in the watermark table;generate a copy of at least a part of the one or more data elements in the datastore and a copy of at least a portion of the pointer table at a destination having security operations controlled by a second security controller;communicate the watermark table containing the at least a portion of the one or more metadata between the first security controller and the second security controller;set the second security controller to access the pointer table in the datastore; andwherein the one or more metadata are selected from the group consisting of a masking status of at least a part of the one or more data elements, a time of performing the masking operation, a type of masking algorithm corresponding to the masking operation, a degree of the masking operation, an identity of an application performing the masking operation, and a context of the masking operation. 10. A computer readable medium of claim 9 comprising computer-executable instructions, the computer executable instructions when executed by the at least one processor, cause the at least one processor to store one or more source identifiers in the watermark table, wherein the one or more source identifiers are associated with an original source corresponding to the one or more data elements. 11. A computer readable medium of claim 9 comprising computer-executable instructions, the computer executable instructions when executed by the at least one processor, cause the at least one processor to perform one or more of an update operation on the watermark table and a read operation on the watermark table, wherein one or more of the update operation and the read operation through an Application Programming Interface (API).