RDBMS Anonymization

Key Features

• This utility replaces all values of text attributes (string or varchar) with lorem ipsum text of the same length.
• There is no way to revert the data back.

Requirements

• SQL SERVER

Dependencies

• NA

Documentation

Important

This is the step by step process to anonymize a database.

• Do not try to launch the process without reading this first.
• The process of anonymization is irreversible.
• Never, ever, launch it on your actual environment but on a copy of it.
• Do not launch the anonymization on the system database, it will be anonymized in the process of the data database anonymization.

STEP 1: MICROSOFT SQL Server user account server role and permission

The utility uses a bulk to add attribute that you want to include or exclude on top of the list already made.
The login has to have a server role allowing it : bulkadmin or sysadmin

Because the utility will overwrite a good part of your database, it only works if the database name's end with '_ANONYME'.
You must be able to modify your database name. you will work on a copy of your original database.

1. Backup the Data Database and the system Database.
2. Restore them with a name that ends with '_ANONYME'

STEP 2: FILE ACCESS Permissions

• Create a Anonymization folder in C:\temp
• Unzip the files from the module in C:\temp\Anonymisation

File Name	Comment	File Status
Rand.sql	In case you do not have a random function implemented	Do not modify
Lipsum.sql	This is a function that lorem ipsum a given text	Do not modify
Anonymisation.sql	The script that will anonymize you database	Do not modify
ExclusionInclusion.txt	list of attributes to exclude (0) or include (1)
Settings.txt	see description below

Settings.txt

• 1st line: Name of the System database. Put the correct systemDBName (with '_ANONYME'at the end) before going to step 4
• 2nd line: write CLEAN if you want the macro to launch the CLEAN and CONSOLIDATE procedure

STEP 3: Adding functions

Add he needed function to your SQL Sever.

• Open a command
• If the function Rand() wasn’t integrated write:

C:\>SQLCMD -S ServerName -U Login -P password -i C:\temp\Anonymisation\Rand.sql

• If the function Lipsum wasn’t integrated write:

C:\>SQLCMD -S ServerName -U Login -P password -i C:\temp\Anonymisation\lipsum.sql

STEP 4: Launching anonymization

You are going to launch the Anonymisation procedure

• Still in your command, write

 C:\>SQLCMD -S ServerName -U Login -P password -d DATABASE_ANONYME -i C:\temp\Anonymisation\Anonymisation.sql

Note
Do not launch the anonymization on the system database, it will be anonymized in the process of the data database anonymization.
If you didn’t rename the databases you wanted to anonymize with a name ending by _ANONYME as said in step 1, the script will do nothing

The anonymization is finished. congratulation

How to check the anonymization of my databases was a success?

Remove the _anonyme name from it and add it on the administration.exe in your HOPEX file like any other database.
You can now open Hopex and see lorem ipsu text took the place of relevant information.

Release Notes

New

• Initial delivery

Changed

• NA

Fixed

• NA

Removed

• NA