Help Center/ Data Security Center/ User Guide/ Security Management/ Data Masking/ Data Masking Overview
Updated on 2026-07-27 GMT+08:00
View PDF
Share

Data Masking Overview

DSC supports static data masking and dynamic data masking. You can configure masking rules for specified data assets to implement static masking or use APIs for data masking to implement dynamic data masking, ensuring that sensitive information is not disclosed. Masking Algorithms and Application Scenarios lists the data masking algorithms supported by DSC.

Static data masking: DSC enables bulk data masking based on rules (DSC built-in rules or custom rules). Static data masking is typically applied when transferring production data to non-production environments (such as development and testing) or sharing data for research purposes. You can create a data masking task on the DSC console to quickly mask sensitive data in database, OBS, and big data assets.

API-based masking: Data accessed by external systems can be masked in real time. This masking type applies to scenarios where data is queried from the external system, such as production applications, data exchange, O&M applications, and marketing. For details, see APIs for data masking.

Procedure

Figure 1 Static data masking flowchart

Figure 2 API-based data masking flowchart

Data Sources Supported by Data Masking

Table 1 describes the data sources supported by static data masking. API-based dynamic masking is used to mask structured JSON data.

Table 1 Data sources supported by static data masking

Masking Type

Data Source

Data masking

SQLServer, MySQL, TDSQL, PostgreSQL, KingBase, DMDBMS, GaussDB, Oracle, DWS, and Greenplum

Elasticsearch masking

Elasticsearch

Hive masking

Hive

HBase masking

HBase

MRS masking

MRS_HIVE

OBS masking

OBS bucket files (text, images, and LeRobot datasets)

  • Text: .txt, .log, .xml, .ini, .sql, .inf, .java and .json or files whose mime type starts with text
  • Images of the following types can be anonymized: ID cards, passports, driving licenses, vehicle licenses, and social security cards for Chinese mainland, as well as bank card photos and photos containing faces and license plates.
  • Supported LeRobot datasets: text (JSON/JSONL files) and videos (faces and license plates).
Parent Topic: Data Masking