Manage sensitive data types

Sensitive data types help NineData identify, classify, and protect sensitive information in databases. Each data type is associated with a sensitivity level, a masking algorithm, and rules for identifying sensitive columns.

Before you begin

• You have created or joined an organization, and this organization has subscribed to either DevOps Pro or DevOps Enterprise. Please ensure that your annual or monthly subscription is still active. For more information, please refer to Manage Organizations.
• Your current account has switched to the target organization. For more information, please refer to Switching to an Organization.

Procedure

Create sensitive data types

NineData provides 27 predefined sensitive data types that cover common sensitive columns. If these data types do not meet your business needs, create custom data types.

1. Sign in to the NineData Console.

2. In the left navigation bar, click Datasource>Sensitive Data.

3. Click the Data Type tab, and then click Create Data Type.

   Alternatively, click Duplicate in the Actions column next to the target data type to customize a new data type based on the existing one.

4. Define the following parameters, and click Create Data Type.

   Parameter	Description
   Name	Enter the name of the sensitive data type.
   Data Classification	Select the category for the sensitive data type. NineData provides five predefined categories and supports custom categories. For details, see Manage data classification.
   Sensitivity Level	Select the sensitivity level of the data type. Levels range from S0 to S5. S0 is non-sensitive, and S5 is the highest sensitivity level. Different levels can use different approval processes. For details, see Manage sensitivity levels.
   Masking Algorithm	Select how to mask sensitive columns associated with this data type. NineData provides 33 predefined algorithms and supports custom masking algorithms. For details, see Manage masking algorithms.
   Description (optional)	Enter a description for future maintenance.
   Detection Rules	NineData provides two methods for identifying sensitive columns: Visual Configuration and Script Language Configuration. Visual Configuration: Configure identification rules visually without writing scripts. Match Conditions: Select Effective when any one is hit or Effective only when all are hit as required. Identification Rules: Choose Feature Type, then select or enter values under Value/Expression. For details about each feature type and value, see Appendix. Add a Feature Row: Click Add Feature. Add a Rule: Click Add Recognition Rule. Delete a Feature Row: Click Delete in the Actions column of the target feature. Delete a Rule: Click the icon for the target rule box. At least one rule must remain. Script Language Configuration: Write rules by using Java conditional statements.

Enable or disable sensitive data types

Enable or disable sensitive data types individually. During sensitive-column scans, only enabled data types take effect.

By default, all sensitive data types are enabled. Disable or re-enable them based on your business needs.

1. Sign in to the NineData Console.

2. In the left navigation bar, click Datasource>Sensitive Data.

3. On the page, click the Data Type tab, find the sensitive data type you want to enable or disable, and toggle the switch in the Status column to enable or disable it.

   tip

   To enable or disable multiple sensitive data types in bulk, select the checkboxes to the left of the target data types. Then click Batch Modify Status at the top of the page. In the dialog, turn the switch on or off, and click OK.

Edit sensitive data types

If a custom data type no longer meets your requirements, edit its parameters.

Note

Only custom-created data types can be edited. Predefined system data types cannot be edited.

Steps

1. Sign in to the NineData Console.

2. In the left navigation bar, click Datasource>Sensitive Data.

3. On the page, click the Data Type tab, and then click Edit in the Actions column next to the target data type.

4. Edit the data type and click Save.

   tip

   To edit the sensitivity levels of multiple sensitive data types in bulk, select the checkboxes to the left of the target data types. Then click Batch Modify Sensitive Level at the top of the page. In the dialog, choose the sensitivity level and click OK.

Delete sensitive data types

If a custom data type is no longer in use, delete it.

Note

• Only custom data types can be deleted. System predefined data types cannot be deleted.
• Before deleting a data type, make sure it is not associated with any table columns.

Procedure

1. Sign in to the NineData Console.

2. In the left navigation bar, click Datasource>Sensitive Data.

3. On the page, click the Data Type tab, and click Delete in the Actions column next to the target data type.

4. In the confirmation dialog, click OK.

Manage data classification

NineData uses data classification to categorize sensitive data types. It provides five predefined categories and supports custom classifications.

Note

• System predefined classifications cannot be deleted.
• Before deleting a classification, make sure it is not associated with any data type or table columns.

Create data classification

1. Sign in to the NineData Console.

2. In the left navigation bar, click Datasource>Sensitive Data.

3. Click the Data Type tab, and click Management Data Classification.

4. On the Data Classification page, click Add Data Class at the bottom of the page. In the dialog, enter the classification name and optional description, and click OK.

Delete data classification

1. Sign in to the NineData Console.

2. In the left navigation bar, click Datasource>Sensitive Data.

3. Click the Data Type tab, and then click Management Data Classification.

4. Click Delete in the Actions column next to the target classification, and click OK in the confirmation dialog.

Result

Sensitive data types and classifications are updated in the current organization. Enabled data types can be used when identifying and managing sensitive columns.

Appendix: Feature Types and Values

NineData provides several identification rule features, including Field Length, Field Type, Column, Comment, and Data Content.

Feature Type	Values	Description
Field Length	Integer	Identifies sensitive columns based on whether the field length exceeds a certain value. For example, if the value is 32, columns with lengths greater than 32 are flagged.
Field Type	Data Types	Initially filters fields likely to store sensitive information based on their data types. Multiple values are separated by commas (e.g., char, varchar).
Column	String	Identifies sensitive columns using keywords in column names. Multiple keywords are separated by commas (e.g., mobile, phone).
Comment	String	Identifies sensitive data fields based on keywords in column comments. Multiple keywords are separated by commas (e.g., mobile, phone).
Data Content	Selection Rule	Identifies sensitive columns based on predefined rules, including: Chinese ID number Gender Nation E-mail Political outlook IP address, IPV4 MAC address Chinese plate number

Related Documents

• Manage sensitive data
• Manage sensitivity levels
• Manage masking algorithms