Systems and methods for data tracing
The disclosed embodiments include systems and methods for tracing data. A disclosed tracing system can receive a request to access original data. The request can be associated with access request metadata. The tracing system can generate a tracer based at least in part on the access request metadata and can generate an altered version of the first data by inserting the tracer into the original data. The tracing system can update a database or log file associated with the first data to include association information based on the access request metadata. The tracing system can then provide the altered version of the first data in response to the request.
1. A system for tracing data, comprising:
at least one processor; and
at least one non-transitory computer-readable medium containing instructions that, when executed by the system, cause the system to perform operations comprising:
receiving a request to access first data;
generating a tracer corresponding to the request;
generating an altered version of the first data, comprising reversibly modifying a value of the first data to include the tracer; and
providing the altered version of the first data in response to the request.
2. The system of claim 1 , wherein:
the value comprises:
an element of a table;
a value of a key-value pair;
a value of a field; or
an instance of an object.
3. The system of claim 1 , wherein:
the value comprises:
a column name of a table;
a key name of a key-value pair;
a field name of a field; or
an object name of an object.
4. The system of claim 1 , wherein:
the value being a first numeric value;
the tracer being expressed as a second numeric value; and
reversibly modifying the value comprises generating a combined value using the value and the tracer, insignificant figures of the combined value representing the tracer.
5. The system of claim 1 , wherein:
the value of the data is a text value; and
reversibly modifying the value comprises:
embedding the tracer into the value; or
concatenating the tracer and the value.
6. The system of claim 1 , wherein:
generating the altered version of the first data further comprises:
adding at least one field, key, or column to the first data, the at least one field, key, or column added to the first data including instances of a tracer token.
7. The system of claim 6 , wherein:
wherein the at least one field, key, or column added to the first data further includes obfuscation values.
8. The system of claim 1 , wherein the operations further comprise:
updating a database or log file associated with the first data to include:
association information based on access request metadata associated with the request; or
the association information and a tracer token.
9. The system of claim 1 , wherein:
the request is associated with access request metadata including at least one of:
date or time information; or
requesting user information.
10. The system of claim 1 , wherein:
the tracer corresponds to a portion of the first data; and
the tracer is generated based at least in part on at least some of the portion of the first data.
11. The system of claim 1 ,
wherein the operations further comprise:
receiving a provision request to provide original data;
generating a second tracer corresponding to the provision request;
receiving the original data;
generating the first data, comprising:
reversibly modifying a value of the original data to include the second tracer; or
adding at least one field, key, or column to the original data, the at least one field, key, or column added to the original data including instances of the second tracer; and
storing the first data.
12. The system of claim 1 ,
wherein the operations further comprise:
obtaining suspect data, the suspect data including the tracer; and
identifying the request to access the first data using the tracer that associates the request and the first data.
13. The system of claim 1 ,
wherein generating the altered version of the first data comprises:
reversibly modifying a predetermined number or proportion of values of the data to include the tracer; or
reversibly modifying the values to include the tracer with a predetermined probability.
14. A method for tracing data, comprising:
receiving a request to access first data;
generating a tracer corresponding to the request;
generating an altered version of the first data, comprising adding at least one field, key, or column to the data, the at least one field, key, or column added to the first data including obfuscation values and instances of the tracer; and
providing the altered version of the first data in response to the request.
15. The method of claim 14 , wherein:
wherein generating the altered version of the first data comprises:
reversibly modifying a predetermined number or proportion of values of the data to include the tracer; or
reversibly modifying the values to include the tracer with a predetermined probability.
16. The method of claim 14 , wherein:
generating the altered version of the first data further comprises reversibly modifying a value of the first data to include the tracer; and
the value includes an element of a table, a value of a key-value pair, a value of a field, or an instance of an object; or the value includes a column name of the table, a key name of the key-value pair, a field name of the field, or an object name of the object.
17. The method of claim 16 , wherein:
the value comprises a text value; and
reversibly modifying the value comprises:
embedding a tracer token into the value; or
concatenating the tracer and the value.
18. The method of claim 14 , wherein:
the tracer corresponds to a portion of the first data; and
the tracer is generated based at least in part on at least some of the portion of the first data.
19. The method of claim 14 , the method further comprising:
receiving a provision request to provide original data;
generating a second tracer corresponding to the provision request;
receiving the original data;
generating the first data, comprising:
reversibly modifying a value of the original data to include the second tracer; or
adding at least one field, key, or column to the original data, the at least one field, key, or column added to the original data including instances of the second tracer; and
storing the first data.
20. The method of claim 14 , the method further comprising:
obtaining suspect data, the suspect data including the tracer; and
identifying the request to access the data using the tracer that associates the request and the first data.