Data management system and data management method
Provided is a data management system capable of properly managing data to undergo masking processing in the secondary use of data. This data storage management system is equipped with a storage unit which stores masked data of real data at a first point in time, and a data control unit which extracts data of a storage area that has not been masked from update data based on first information representing a masked storage area in the masked data and second information representing a masked storage area in the masked data of update data, which is data obtained by updating the real data from the first point in time to a second point in time, extracts data of the masked storage area, from which the same masked data has been removed, from the masked data of the update data, and generates the extracted data as difference data.
1. A data management system, comprising:
a storage unit which stores first masked data of real data at a first point in time; and
a data control unit which
extracts, first information representing a masked storage area in the first masked data and second data of update data obtained by updating the real data from the first point in time to a second point in time,
determines if the second data is second information representing a second masked storage area in second masked data of the update data,
on a condition that the second data is not second information, determine that the second data is data of a storage area that has not been masked from the update data, and generate the second data as difference data, and
on a condition that the second data is second information, determine whether the first masked data and the second masked data are identical, extracts identical data of the first masked storage area from the second masked data, and generates remaining data in the second masked data after the identical data is extracted as the difference data.
2. The data management system according to claim 1 , further comprising:
a masking information management unit which generates in block units, as the first information, information representing whether or not masking has been performed in the first masked data, and generates in block units, as the second information, information representing whether or not masking has been performed in the second masked data.
3. The data management system according to claim 1 ,
wherein the data control unit which extracts data that has been updated from the first masked data and generates the second masked data based on a data source of the real data from the first point in time to the second point in time and information representing whether the masked data of the data source has been updated, which are sent from a production system.
4. The data management system according to claim 1 ,
wherein the data control unit applies the difference data to the first masked data and generates data at the second point in time according to a request for using the data at the second point in time.
5. The data management system according to claim 1 ,
wherein the data control unit generates the difference data based on a change in a masking processing rule.
6. The data management system according to claim 1 ,
wherein the data control unit determines whether a capacity of the generated difference data has exceeded a capacity of the first masked data, and, upon determining that the capacity of the generated difference data has exceeded the capacity of the first masked data, generates new masked data of real data at a predetermined future point in time, and, from the predetermined future point in time onward, generates difference data from the new masked data of the real data at the predetermined point in time.
7. A data management method, comprising:
storing, via a storage unit, first masked data of real data at a first point in time;
extracting, via a data control unit, first information representing a masked storage area in the first masked data and second data of update data obtained by updating the real data from the first point in time to a second point in time;
determining, if the second data is second information representing a second masked storage area in second masked data of the update data,
determining, on a condition that the second data is not second information, that the second data is data of a storage area that has not been masked from the update data, and generating the second data as difference data; and
determining, on a condition that the second data is second information, whether the first masked data and the second masked data are identical, extracting identical data of the first masked storage area from the second masked data, and generating remaining data in the second masked data after the identical data is extracted as the difference data.