Data Masking Data Masking¶
This feature is Experimental quality.
This feature was implemented in Percona Server for MySQL version 8.0.17-8.
The Percona Data Masking plugin is a free and Open Source implementation of the MySQL‘s data masking plugin. Data Masking provides a set of functions to hide sensitive data with modified content.
Installing the plugin
The following command installs the plugin:
INSTALL PLUGIN data_masking SONAME 'data_masking.so';
The data masking functions are the following:
| Type | Description | Sample |
|---|---|---|
| mask_inner() | Masks the inner part of a string. The string ends are not masked. | mysql> SELECT mask_inner('123456789', 1, 1);
+-----------------------------------+
| mask_inner("123456789", 1, 1) |
+-----------------------------------+
|1XXXXXXX9 |
+-----------------------------------+
|
| mask_outer() | Masks the outer part of the string. The inner section is not masked. | mysql> SELECT mask_outer('123456789', 2, 2);
+------------------------------------+
| mask_outer("123456789", 2, 2). |
+------------------------------------+
| XX34567XX |
+------------------------------------+
|
| mask_pan() | Masks the Primary Account Number (PAN) by replacing the string with an “X” except for the last four characters. Note The PAN string must be 15 characters or 16 characters in length. |
mysql> SELECT mask_pan ('123456789012345');
+------------------------------------+
| mask_pan("123456789012345"). |
+------------------------------------+
| XXXXXXXXXXX2345 |
+------------------------------------+
|
| mask_pan_relaxed() | Returns the first six numbers and the last four numbers. The rest of the string is replaced by “X”. | mysql> SELECT mask_pan_relaxed(gen_rnd_pan());
+------------------------------------------+
| mask_pan_relaxed(gen_rnd_pan()) |
+------------------------------------------+
| 520754XXXXXX4848 |
+------------------------------------------+
|
| mask_ssn() | Returns a string with only the last four numbers visible. The rest of the string is replaced by “X”. | mysql> SELECT mask_ssn('555-55-5555');
+-------------------------+
| mask_ssn('555-55-5555') |
+-------------------------+
| XXX-XX-5555 |
+-------------------------+
|
| gen_range() | Generates a random number based on a selected range. | mysql> SELECT gen_range(10, 100);
+--------------------------------------+
| gen_range(10,100) |
+--------------------------------------+
| 56 |
+--------------------------------------+
|
| gen_rnd_email() | Generates a random email address. The domain is example.com. |
mysql> SELECT gen_rnd_email();
+---------------------------------------+
| gen_rnd_email() |
+---------------------------------------+
| sma.jrts@example.com |
+---------------------------------------+
|
| gen_rnd_pan() | Generates a random primary account number. | mysql> SELECT mask_pan(gen_rnd_pan());
+-------------------------------------+
| mask_pan(gen_rnd_pan()) |
+-------------------------------------+
| XXXXXXXXXXXX4444 |
+-------------------------------------+
|
| gen_rnd_us_phone() | Generates a random U.S. phone number. The generated number adds the 1 dialiing code and is in the 555 area code. The 555 area code is not valid for any U.S. phone number. | mysql> SELECT gen_rnd_us_phone();
+-------------------------------+
| gen_rnd_us_phone() |
+-------------------------------+
| 1-555635-5709 |
+-------------------------------+
|
| gen_blacklist(str, dictionary_name, replacement_dictionary_name) |
|
mysql> SELECT gen_blacklist('apple', 'fruit', 'nut');
+-----------------------------------------+
| gen_blacklist('apple', 'fruit', 'nut') |
+-----------------------------------------+
| walnut |
+-----------------------------------------+
|
| gen_dictionary(dictionary_name) | Returns a random term from the selected dictionary. | mysql> SELECT gen_dictionary(dictionary_name);
+--------------------------------------------------+
| gen_dictionary('trees') |
+--------------------------------------------------+
| Norway spruce |
+--------------------------------------------------+
|
Uninstalling the plugin
The UNINSTALL PLUGIN statement disables and uninstalls the plugin.
See also
MySQL Documentation https://dev.mysql.com/doc/refman/8.0/en/data-masking-reference.html
