Column-level Data Security in Kyvos Reporting

Applies to: Kyvos Reporting

Kyvos Reporting supports data masking as a data protection feature to hide sensitive data from unauthorized users. With data masking enabled, users can view only masked values instead of the original sensitive information in query result sets.

You can configure complete masking (e.g., salary fields) or partial masking (e.g., credit card numbers).

Accessing the Data Masking Configuration

To configure data masking:

1. Go to Navigate > Administration > Secure Data > Data Masking

2. The Secure Data – Data Masking screen appears.

   Open

   

Steps to Mask a Column

1. Select a database connection from the Connection dropdown.

2. Choose a database object type: Table, View, Procedure, or Synonym.

3. Select an entity from the list. Use Prev/Next to browse if the entity is not visible.

4. Get the list of columns:

   Open

   

   • For Tables or Views: Columns appear automatically upon selection.

   • For Procedures or Synonyms: Click Get Columns, provide input parameters, and click OK to fetch the result set columns.

5. Select columns to mask by selecting the respective checkboxes. These will be masked for all users by default.

6. Specify a mask character in the Mask Character field.

7. Click Save.

Exception Handling for Specific Users and Roles

To disable masking for specific users or roles:

1. Select the masked column from the list.

2. In the Exceptional Users and Roles section:

   • Choose an organization.

   • Select specific users and/or roles.

3. Click Save.

Masking Options

1. Mask Completely

To completely hide the data in a column:

1. Select the column.

2. Select Mask for All Connections (optional).

3. Select Mask Completely.

4. Enter a Mask Character (any database-supported character except <, >, ", ', &).

5. Click Save.

   Open

   

2. Mask Partially

To mask part of the data (e.g., mask the first 8 digits of a credit card number):

1. Select the column.

2. Select Mask for All Connections (optional).

3. Select Mask Partially.

4. In Mask Format, define the pattern using:

   • Mask character (e.g., *) for masked positions.

   • A placeholder (e.g., a) for unmasked characters.

5. In Format Char for Unmasked Data Char, enter the placeholder (e.g., a).

   Open

   

Example:

• Mask Format: ********aaaa

• Format Char for Unmasked Data Char: a

This configuration masks the first 8 characters and reveals the last 4 characters.

Connection-Specific Masking

By default, masking is applied to all connections. To restrict masking to specific connections:

• Clear the Mask for All Connections checkbox.

• Click Save.

Viewing and Managing Masked Columns

You can manage and review masking configurations via Column View:

1. Go to the Column View tab on the Data Masking screen.

2. Review the following details:

   • Entity name

   • Masked columns

   • Applicable connections

   • Mask type (Partial or Complete)

     Open

     

Deleting a Mask

1. Select a connection.

2. Click the X icon next to the masked entry.

3. Confirm the deletion in the prompt.

4. Click OK.