Real-time masking in a standby database
Disclosed is a system, method, and computer program product that generates masked data from within a database infrastructure. Instead of requiring an external tool to generate masked data, a database generates masked data using its internal processing mechanisms.
1. A method for implementing a masked database, comprising:
identifying a change to a primary database comprising a relational database table, wherein the change modifies an entry in the relational database table;
generating a redo record for the change, wherein the redo record comprises a masked version of the change to the primary database;
copying the redo record to a standby database; and
generating a masked version of the standby database at least by applying the masked version of the change in the redo record to the standby database.
2. The method of claim 1 , wherein the redo record comprises both the masked portion and an un-masked portion.
3. The method of claim 1 , wherein the redo record comprises two separate redo portions, where a first redo portion corresponds to a masked redo and a second redo portion corresponds to an unmasked redo.
4. The method of claim 1 , wherein the redo record further comprises an un-masked portion, and the un-masked portion of the redo record is removed before the redo record is copied to the standby database.
5. The method of claim 1 , wherein a masking criterion is applied to un-masked data for the change to generate the redo record having the masked portion.
6. The method of claim 5 , wherein the masking criterion includes a masking expression that is directed to one or more columns of the relational database table, the masking expression corresponding to a regular expression.
7. The method of claim 1 , wherein both an un-masked version of the standby database and the masked version of the standby database are maintained, the un-masked version of the standby database generated by applying one or more redo records having one or more corresponding un-masked versions of one or more changes, and the masked version of the standby database generated by applying the redo record having the masked version of the change in the redo record.
8. The method of claim 1 , wherein physical replication is performed between the primary database and the standby database such that the redo record for the change is applied to the standby database on a block-by-block basis.
9. A system for implementing a masked database, comprising:
a processor; and
a memory for holding programmable code, wherein the programmable code includes instructions which, when executed by the processor, cause the processor to perform a set of acts that comprises:
identifying a change to a primary database, comprising a relational database table, wherein the change modifies an entry in the relational database table;
generating a redo record for the change, wherein the redo record comprises a masked version of the change to the primary database;
copying the redo record to a standby database; and
generating a masked version of the standby database at least by applying the masked version of the change in the redo record to the standby database.
10. The system of claim 9 , wherein the redo record comprises both the masked portion and an un-masked portion.
11. The system of claim 9 , wherein the redo record comprises two separate redo portions, where a first redo portion corresponds to a masked redo and a second redo portion corresponds to an unmasked redo.
12. The system of claim 9 , wherein the redo record further comprises an un-mask portion, and the un-masked portion of the redo record is removed before the redo record is copied to the standby database.
13. The system of claim 9 , wherein a masking criterion is applied to un-masked data for the change record to generate the redo record having the masked portion.
14. The system of claim 13 , wherein the masking criterion includes a masking expression that is directed to one or more columns of the relational database table, the masking expression corresponding to a regular expression.
15. The system of claim 9 , wherein both an un-masked version of the standby database and the masked version of the standby database are maintained, the un-masked version of the standby database generated by applying one or more redo records having one or more corresponding un-masked versions of one or more changes, and the masked version of the standby database generated by applying the redo record having the masked version of the change in the redo record.
16. The system of claim 9 , wherein physical replication is performed between the primary database and the standby database such that the redo record for the change is applied to the standby data base on a block-by-block basis.
17. A computer program product embodied on a non-transitory computer readable medium, the non-transitory computer readable medium having stored thereon a sequence of instructions which, when executed by a processor, causes the processor to perform a set of acts for implementing a masked database, the set of acts comprising:
identifying a change to a primary database-comprising a relational database table, wherein the change modifies an entry in the relational database table;
generating a redo record for the change, wherein the redo record comprises a masked version of the change to the primary database;
copying the redo record to a standby database; and
generating a masked version of the standby database at least by applying the masked version of the change in the redo record to the standby database.
18. The computer program product of claim 17 , wherein the redo record comprises both the masked portion and an un-masked portion.
19. The computer program product of claim 17 , wherein the redo record comprises two separate redo portions, where a first redo portion corresponds to a masked redo and a second redo portion corresponds to an unmasked redo.
20. The computer program product of claim 17 , wherein the redo record further comprises an un-masked portion, and the un-masked portion of the redo record is removed before the redo record is copied to the standby database.
21. The computer program product of claim 17 , wherein a masking criterion is applied to un-masked data for the change to generate the redo record having the masked portion.
22. The computer program product of claim 21 , wherein the masking criterion includes a masking expression that is directed to one or more columns of the relational database table, the masking expression corresponding to a regular expression.
23. The computer program product of claim 17 , wherein both an un-masked version of the standby version of the database and the masked version of the standby database are maintained, the un-masked version of the standby database generated by applying one or more redo records having one or more corresponding un-masked versions of one or more change, and the masked version of the standby database generated by applying the redo record having the masked version of the change in the redo record.
24. The computer program product of claim 17 , wherein physical replication is performed between the primary database and the standby database such that the redo record for the change is applied to the standby database on a block-by-block basis.