InfoSphere Optim

InfoSphere Optim

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  Decrypt and Mask the data on the FLY

    Posted Thu May 02, 2019 03:21 PM

    Hello All,

     

    We have some tables with Encrypted PII data. So we can't extract and move the data to the test regions, unless the REAL data is Masked.

    If we mask the encrypted data, during decryption, it wont give expected results.

     

    Is there a way to decrypt the data from DB and Mask it, on the FLY.

     

    We have the workaround like Decrypt the data to another DB of same structure and then use OPTIM on that table to extract an mask.

    Is there another way to do this on the FLY ?

     

    Suggestions/Comments are much appreciated.

     

    Regards,

    Joseph Ravindran

    American Express made the following annotations




    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information

    included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you."


    American Express a ajouté le commentaire suivant le

    Ce courrier et toute pièce jointe qu'il contient sont réservés au seul destinataire indiqué et peuvent renfermer des renseignements confidentiels et privilégiés. Si vous n'êtes pas le destinataire prévu, toute divulgation, duplication, utilisation ou distribution du courrier ou de toute pièce jointe est interdite. Si vous avez reçu cette communication par erreur, veuillez nous en aviser par courrier et détruire immédiatement le courrier et les pièces jointes. Merci.



    #InfoSphereOptim
    #Optim


  • 2.  RE: Decrypt and Mask the data on the FLY

    Posted Tue May 14, 2019 04:06 PM
    Hello,

    If I understand your question, you are asking to mask data while it is moving from an encrypted database to another test region.  The answer is Optim can likely do this but it will depend on where and how the data is being encrypted.  If the encryption is done at the database level, it should be decrypted by the time Optim gets the data in an extract.  If done by an external program, the data would have to be passed through the decryption routine prior to Optim receiving it.

    I could be wrong on this but it seems to be the correct answer.

    Jimmy

    ------------------------------
    JIMMY WILSON
    ------------------------------



  • 3.  RE: Decrypt and Mask the data on the FLY

    Posted Tue May 14, 2019 05:05 PM
    Hi Jimmy, 
    Thanks for your response. Yes I Understand that there should be an interim process to decrypt the data from DB before OPTIM extracts it.
    How can we use that interim process / routine / Decryption API, to decrypt the data before OPTIM process extracts, as we connect directly with DB.

    Thanks,
    Joseph Ravindran

    ------------------------------
    TDMTeam AMEX
    ------------------------------



  • 4.  RE: Decrypt and Mask the data on the FLY

    Posted Tue May 14, 2019 06:12 PM
    Hi Jimmy, 
    Thanks for your response. yes, you completly understood my question.
    "the data would have to be passed through the decryption routine prior to Optim receiving it."

    Since OPTIM connect directly with DB, how can we use the decryption routine or decryption API, in between the DB and OPTIM Extract process ?

    please enlighten me.

    Thanks, 
    Joseph Ravindran

    ------------------------------
    TDMTeam AMEX
    ------------------------------



  • 5.  RE: Decrypt and Mask the data on the FLY

    Posted Wed May 15, 2019 03:36 PM
    It sounds like you're asking how to decrypt DB data, which is not something related to Optim nor this user board. How data gets decrypted will vary entirely upon the DBMS used and what method was employed to encrypt the data. This is a conversation you should be having with your DBA and the team whom owns the database as they hold the keys (literally) to decrypting the data you desire.



    ------------------------------
    Keith Tidball
    Progressive Insurance
    ------------------------------



  • 6.  RE: Decrypt and Mask the data on the FLY

    Posted Wed May 15, 2019 03:55 PM

    Hi Keith,

     

    My Question is not about " How to Decrypt ". Its about how to use it, in between the OPTIM server to DB connection, as OPTIM connects directly with the Database.

     

    Thanks,

    Joseph Ravindran

    American Express made the following annotations




    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information

    included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you."


    American Express a ajouté le commentaire suivant le

    Ce courrier et toute pièce jointe qu'il contient sont réservés au seul destinataire indiqué et peuvent renfermer des renseignements confidentiels et privilégiés. Si vous n'êtes pas le destinataire prévu, toute divulgation, duplication, utilisation ou distribution du courrier ou de toute pièce jointe est interdite. Si vous avez reçu cette communication par erreur, veuillez nous en aviser par courrier et détruire immédiatement le courrier et les pièces jointes. Merci.







  • 7.  RE: Decrypt and Mask the data on the FLY

    Posted Wed May 15, 2019 04:38 PM
    Hi Joseph, 

    Optim's connection to the DB is no different than any other software tool that connects to a database. You'd have the same question if you were trying to run a report using the table data and needed the column data decrypted.

    This still gets back to you having a discussion with your DBA regarding how a user can select this table data as decrypted. There are so many variants to making encryption/decryption work based upon DBMS, native encryption vs. 3rd party, etc. that only the people whom administer and own the data can answer your question and help you configure the connection to deliver decrypted data.

    ------------------------------
    Keith Tidball
    Progressive Insurance
    ------------------------------