Masking Credit Card Number Using Algorithms (KBA4212)
KBA
KBA# 4212
How to mask a Credit Card?
There is an Out-of-the-Box algorithm for this, which will mask a Credit Card number with a random valid Credit Card number. If the requirements are Referential Integrity or that specific Credit Card numbers are needed, then other algorithms options are needed.
Answer
Below are four different methods presented for masking a Credit Card:
Option 1 | Option 2 | Option 3 | Option 4 | |
---|---|---|---|---|
Algorithm | 'Credit Card' | 'Secure Lookup' | 'Mapping Algorithm' | Custom Algorithm |
Masking Properties: |
Ref.Int: No 1:1 Map: Random |
Ref.Int: Yes 1:1 Map: No |
Ref.Int: Yes 1:1 Map: Yes |
Ref.Int: Custom 1:1 Map: Custom |
Engine Sync: | Yes (OotB) | Yes | No | - |
Input / Masked Size: |
Unlimited Unlimited |
Unlimited < 500,000 |
< 5,000,000 < 5,000,000 |
Custom Custom |
Pros: | Fast, valid credit card numbers, Out-of-the-Box, very secure. | User-defined. Set and forget. Syncable. | User-defined. Unique 1:1 Mapping. | User-defined. Custom rules possible. |
Cons: | Random. Only Credit Card numbers. | Not suitable for a large pool of values to mask. Mapping not unique. | Not suitable for a large pool of values to mask. Slower load time. Require maintenance. Not syncable. | Requires Tech Services or Partner to develop alg. |
Procedure: | Steps:
|
Steps:
|
Steps:
|
Contact Tech Services or Partner. |
More info: | Credit Card (KBA4068) | Secure Lookup (KBA1243) | Mapping Algorithm (KBA1328) | Contact Delphix |
How to redact a Credit Card?
The easiest way to redact a Credit Card number is to redact a select part of the numbers to a number, say '5'.
Examples
+----+---------------------+---------------------+ | ID | Orig | Mask | +----+---------------------+---------------------+ | 1 | 3088 0000 0000 0009 | 3088 5555 5555 5555 | | 2 | 5500-0001-3227-3057 | 5500-5555-5555-5555 | | 3 | 5500000132273057 | 5500555555555555 | | 4 | 6011000089940682 | 6011555555555555 | | 5 | 3088000886065290 | 3088555555555555 | | 6 | 340000151134979 | 340055555555555 | | 7 | 30000723589523 | 30005555555555 | +----+---------------------+---------------------+
Answer
To create an algorithm that redacts a Credit Card number:
This algorithm uses Number in two segments to improve performance and Alpha-Numeric in the last segment to handle different Credit Card length.
- Create a new Segment Mapping algorithm.
- Define 3 Segments:
- Segment 1: Numeric, 4 digits, Masked Values: Min: '5555', Max: '5555'.
- Segment 2: Numeric, 4 digits, Masked Values: Min: '5555', Max: '5555'.
- Segment 3: Alpha-Numeric: 4 chars: Range # '5' (in each sub segment).
- Ignore Characters: "-, " (add as needed, don't add the quotes).
- Preserve Original Values: Starting Position 1: Length 4.