Data Masking and Referential Integrity

DATA MASKING AND REFERENTIAL INTEGRITY

The Substitution Preserving Referential Integrity algorithm is a proprietary substitution algorithm that substitutes a given input value with the same value consistently and repeatedly across the enterprise, no matter the source of data.

This algorithm adequately secures sensitive data from re-identification efforts. At the same time, it both maintains the uniqueness of such elements as social security and credit cards (which are unique per individual) and allows for disturbances of the statistical distribution of the zip codes, names, cities, and other elements with existing known statistical distributions.

DYNAMIC DATA MASKING

Dynamic components retain referential integrity without any additional structures and require significantly less development. However, the algorithmic strength of algorithms used in dynamic components, while very satisfactory, is a little bit less random. Therefore, the decision is up to the practitioner on whether to use the “Dynamic” or the “Random” components and should come with appropriate risk analysis.

Both algorithms are significantly more secure than regular mapping tables used in custom mapping and satisfy industry standards. Changes of the key the algorithms are based on improves the strength of the algorithms upon industry standards.