TCS to launch data-masking tool

PUNE: Data privacy is a major concern in the wired world with identity theft and credit-card fraud becoming a global problem. Identity disclosure risk and value disclosure risk are two major issues that IT companies grappling with, when they bid for major projects.

The issue is especially critical in the health and finance sectors since software companies need to get the original data or at least data having the same characteristics as the original to implement the project.

To address the issue, Tata Research Development & Design Center (TRDDC) - the research arm of Tata Consultancy Services (TCS), is working on a data-masking tool that will enable transmission of masked data. Scientist Dr Sachin P Lodha, who is leading a 10-member team on the project, said that the masked data retains the original characteristic and thereby minimizes the disclosure risk. "Data masking is the process of removing or transforming those data elements that could be used to gain additional knowledge about sensitive information," he explained.

“By masking the data, we reduce the ability to identify an individual and predict certain confidential attributes,” he added.

According to TRDDC executive director Mathai Joseph, a simplistic solution of just releasing or using random fictitious data is no good since it reduces data utility which is essential for contract software development, forecasting trends and research requirements. “The release of general data such as medical records and economic surveys also requires actual data,” he added.

“For instance, a group of students at Massachusetts with the help of the voters list and other data discovered the health problems of the governor and put it out on the public domain,” Joseph said.

“Here, the production data never leaves the client. Instead, the data is masked using sophisticated combination of two or more techniques. Due to the realistic nature of the data, the impact on performance is positive,” said Lodha, adding that this would not only safeguard the credibility of the client but also TCS.

The TCS data-masking tool is a stand-alone application that can be used by the client. Lodha said the tool is currently in use in pilot projects and was due for its first release in October this year.
Once the tool is validated and tested by a trusted third party, TCS hopes to target the financial and pharma sectors.

The company is in the process of bagging a major project from a pharma company. Joseph believes that the data-masking tool would offer the company large opportunities in offshore projects.