topic Re: How to mask/encrypt a column and be able to unmask/decrypt it later? in SAS Programming

How to mask/encrypt a column and be able to unmask/decrypt it later?

Dontik — Fri, 08 Nov 2019 07:36:48 GMT

Hi

As stated in the title, how to mask/encrypt (using a certain pattern/set of rules) a column and be able to unmask/decrypt it later?

For example:

Name - needs to contains letters and no special characters like !@'j etc. So I would like to change a name like John to something that could possibly be a name, i.e. a set of letters.

Postal code - needs to follow a certain pattern NN-NNN, so 2 digits, a dash and 4 more digits.

Document numer - needs to follow a certain pattern LLNNNNN, so 2 letters and 5 digits. Masked value also needs to be unique.

But that's just the beginning, there should also be a way to reverse it, unmask it.

Any ideas?

Thank you in advance!

Re: How to mask/encrypt a column and be able to unmask/decrypt it later?

sridhar_m — Fri, 08 Nov 2019 08:02:45 GMT

Hi,

You can use Proc PWENCODE to encrypt

Syntax:

proc pwencode in='my password';
run;

Result Ex: {SAS002}DBCC571245AD0B31433834F80BD2B99E16B3C969

Re: How to mask/encrypt a column and be able to unmask/decrypt it later?

Dontik — Fri, 08 Nov 2019 08:15:48 GMT

Thank you, but it's not exactly what I want. Your result isn't following a pattern for a column, it's just a random set of digits, letters and special characters. Look at my examples.

Re: How to mask/encrypt a column and be able to unmask/decrypt it later?

PeterClemmensen — Fri, 08 Nov 2019 08:19:35 GMT

You have three examples:

1) The name John. What could that be changed into for example? What logic should it follow? Just 4 random letters?

2) Postal code should follow a certain pattern. This is hardly a masking task. What if it does not follow this pattern?

3) Same issue as (2).

For (2) and (3), take a look at Picture Formats. If you want a usable code answer, be more precise in your question.

Regards.

Re: How to mask/encrypt a column and be able to unmask/decrypt it later?

ballardw — Fri, 08 Nov 2019 15:53:18 GMT

@Dontik wrote:
Hi

As stated in the title, how to mask/encrypt (using a certain pattern/set of rules) a column and be able to unmask/decrypt it later?

For example:

Name - needs to contains letters and no special characters like !@'j etc. So I would like to change a name like John to something that could possibly be a name, i.e. a set of letters.

Postal code - needs to follow a certain pattern NN-NNN, so 2 digits, a dash and 4 more digits.

Document numer - needs to follow a certain pattern LLNNNNN, so 2 letters and 5 digits. Masked value also needs to be unique.

But that's just the beginning, there should also be a way to reverse it, unmask it.

Any ideas?

Thank you in advance!

And WHERE is this to be masked?

If in output report pages then possibly formats could work. But if you want to limit other users of your data sets you may have significant issues if this is for security purposes.

I think you may be looking to make a series of formats but some issues arise such as is the data static or changing periodically. A one time use is not that difficult but details will arise if you will be continuing to add to the document number or postal codes.

Does the "name" masking need to create a "unique" value? How many characters? Minimum or Maximum length?