Test Data Privacy

The architecture of Test Data Privacy (TDP) on z/OS comprises several key components that work together to provide data masking and transformation capabilities. The Data Masking Engine is the core component responsible for applying the masking rules to the data. It reads the data from the input datasets, applies the transformations defined in the rule files, and writes the masked data to the output datasets.

The Rule Definition Interface allows administrators to define and manage the masking rules. These rules specify which data fields should be masked and the masking techniques to be used. The Data Subset Engine enables the creation of smaller, representative data sets for testing.

It selects a subset of the data based on specified criteria. The Control Interface provides the command-line interface (CLI) for users to interact with the system. It parses the commands, validates the input, and invokes the appropriate functions within the other components.

The system uses VSAM and sequential datasets for data storage. Communication between components occurs through internal z/OS services and APIs. The system uses TCP/IP for network communication, primarily for accessing data from remote sources.

The configuration files are used to define the masking rules, data sources, and output destinations. The system supports integration with z/OS security features, such as RACF, for access control. The Data Masking Engine supports various masking techniques, including data scrambling, data substitution, and data redaction.