PROTECTION OF DATA PRIVACY IN AN ENTERPRISE SYSTEM
Various embodiments of systems and methods for protection of data privacy in an enterprise system are described herein. A request to access data stored in an electronic database is received. The data comprises restricted and unrestricted entities. A restricted entity is replaced with one or more masked attributes that protect privacy of the restricted entity. A mask layout comprising the one or more masked attributes is defined for the restricted entity. The one or more masked attributes are then provided to a user in response to the request.
1 . A computer implemented method for protecting data privacy, the method comprising:
a computer receiving a request to access data stored in an electronic database, wherein the data comprises restricted and unrestricted entities;
based on a mask layout, the computer replacing a restricted entity with one or more masked attributes that protect privacy of the restricted entity, wherein the mask layout comprises the one or more masked attributes defined for the restricted entity and a status indicating a blocking period for the restricted entity; and
the computer providing the one or more masked attributes to a user in response to the request.
2 . The method of claim 1 , further comprising:
providing one or more of the unrestricted entities along with the one or more masked attributes when the request corresponds to the restricted and unrestricted entities.
3 . The method of claim 1 , wherein the mask layout is defined based on a data privacy policy.
4 . The method of claim 3 , wherein the mask layout is defined for attributes of the restricted entity.
5 . The method of claim 4 , wherein the attributes of the restricted entity comprise a name and dependent data.
6 . (canceled)
7 . The method of claim 1 , further comprising:
receiving the request in response to a user operation in an enterprise system.
8 . An article of manufacture including a non-transitory computer readable storage medium to tangibly store instructions, which when executed by a computer, cause the computer to:
receive a request to access data stored in a database, wherein the data comprises restricted and unrestricted entities;
based on a mask layout, replace a restricted entity with one or more masked attributes that protect privacy of the restricted entity, wherein the mask layout comprises the one or more masked attributes defined for the restricted entity and a status indicating a blocking period for the restricted entity; and
provide the one or more masked attributes to a user in response to the request.
9 . The article of manufacture of claim 8 , further comprising instructions which when executed by the computer further causes the computer to:
provide one or more of the unrestricted entities along with the one or more masked attributes when the request corresponds to the restricted and unrestricted entities.
10 . The article of manufacture of claim 8 , wherein the mask layout is defined based on a data privacy policy.
11 . The article of manufacture of claim 10 , wherein the mask layout is defined for attributes of the restricted entity.
12 . The article of manufacture of claim 11 , wherein the attributes of the restricted entity comprise a name and dependent data.
13 . (canceled)
14 . The article of manufacture of claim 8 , further comprising instructions which when executed by the computer further causes the computer to:
receive the request in response to a user operation in an enterprise system.
15 . A computer system for protecting data privacy, comprising:
a computer memory to store program code; and
a processor to execute the program code to:
receive a request to access data stored in a database, wherein the data comprises restricted and unrestricted entities;
based on a mask layout, replace a restricted entity with one or more masked attributes that protect privacy of the restricted entity, wherein a mask layout comprises the one or more masked attributes defined for the restricted entity and a status indicating a blocking period for the restricted entity; and
provide the one or more masked attributes to a user in response to the request
16 . The system of claim 15 , wherein the processor further executes the program code to:
provide one or more of the unrestricted entities along with the one or more masked attributes when the request corresponds to the restricted and unrestricted entities
17 . The system of claim 15 , wherein the mask layout is defined based on a data privacy policy.
18 . The system of claim 17 , wherein the mask layout is defined for attributes of the restricted entity.
19 . The system of claim 18 , wherein the attributes of the restricted entity comprise a name and dependent data.
20 . (canceled)