What Is Dynamic Data Masking

This module is primarily designed for dynamic data masking in business systems. It enables business users to view business data in real time through their browsers, with specific sensitive data displayed either in plaintext or masked on the page, depending on the user's permissions and role. For example, when a customer service representative with low-level access views a customer's personal information in the CRM system, the customer's phone number is masked as, e.g., 186****5636.

This module is developed to implement the aforementioned functionality.

Desensitization strategy management includes the following functions:

• View desensitization Strategy
• Add new desensitization strategy
• Edit Desensitization Strategy
• Delete Desensitization Strategy
• Enable desensitization Strategy

From a technical architecture perspective, this module supports implementation using either the Application-Plugin or Proxy patterns; therefore, after configuration is complete, the plugin must also be deployed.

To configure dynamic data masking for a business system (e.g., a CRM system), the following steps must be followed:

1. To determine which users should be desensitized and to configure application users, please refer to App Users.
2. Configure a data masking Strategy for the project.
3. Download the plugin (skip this step for the Proxy Mode).
4. Deploy the plugin (this step is skipped for the Proxy Mode).
5. System test.
6. Desensitization deployment.