Enterprise Manager 10g Grid Control allows you to manage all of your Oracle E-Business Suite systems from a single console. The Application Management Pack (AMP) for Oracle E-Business Suite, Release 2.0.0 and 2.0.1 extends EM 10g Grid Control to manage Oracle Applications systems.
Data scrambling is the process of obfuscating or removing sensitive data, and can be used by functional administrators and database administrators when cloning an environment that contains sensitive information.
Data Scrambling Characteristics
The key characteristics of Data Scrambling are:
- The scrambling process is irreversible, so that the original data cannot be derived from the scrambled data.
- The scrambling process is repeatable (with the same parameters) and can be used for multiple cloning processes.
Key Data Scrambling Terms
Attribute: Group of columns in one or more tables representing a single, logical E-Business Suite-wide value such as customer name
Tables to Purge: Tables selected to be purged for rows matching user-defined criteria. This table selection allows the removal of sensitive data such as transaction histories before allowing applications to access to the system.
Policy: Functional groupings of Attributes and Tables to Purge related to one or more applications in the E-Business Suite. For example: "GL Policy" or "AR Policy".
Policy Set: Policy sets are groups of policies. Multiple policy sets can contain overlapping policies. Example: "Financial Policy Set"
Preparing for Data Scrambling
- Data scrambling is configured through the Oracle Applications Manager. To enable data scrambling, set the site-level profile option OAM: Data Scrambling Enabled to "Yes".
- Functional administrators define the attributes and map them to database columns.
- Functional administrators collect attributes together to define policies and policy sets.
Scrambling the Data
The configuration defined in Oracle Applications Manager for data scrambling can be utilized within the Apps Management Pack during the cloning process.
The Database Administrator specifies the policy sets to scramble the source data, initiates and then monitors the data scrambling process.
The source data from the original instance is sent through the data scrambling engine, which then scrambles the data.
References
- Getting Started with the Application Management Pack for Oracle E-Business Suite (Releases 2.0 and 2.0.1) (Metalink Note 394448.1)
Comments (13)
Steven,
Good stuff. I've seen another Oracle document floating around that discusses "masking" in the same manner as "scrambling" is discussed here. I understood masking to be distinct from scrambling?
Either way, good stuff. The document from Oracle is:
ORACLE ENTERPRISE MANAGER 10
DATA MASKING PACK
Hope you had a safe trip.
thx,
John
Posted by John Stouffer | March 1, 2008 11:19 AM
Posted on March 1, 2008 11:19
It is and excellent news that Data Scrambling now build in to Oracle products. For a long time this was a question for customizations. Just wonder if the Data Scrambling API is available in core EBS package (from patch delivers the code)? It might be a bit challenging to implement OEM just this features for (I know that there are a lot others). But still it might be a problem justifying OEM Apps Pack expenses to customer.
Posted by Yury Velikanov | March 3, 2008 12:53 AM
Posted on March 3, 2008 00:53
Sanchit,
What is the difference between OEM with the Data Masking Pack and OEM with AMP scrambling?
thx,
John
Posted by John Stouffer | March 11, 2008 7:59 AM
Posted on March 11, 2008 07:59
John,
The OEM Data Masking is a part of Database Management Pack whereas; OEM Data Scrambling is a part of Application Management Pack for EBS.
OEM Database scrambling can only be performed when cloning EBS using AMP.
regards,
Sanchit
Posted by Sanchit Jindal | March 17, 2008 4:51 AM
Posted on March 17, 2008 04:51
We're still in the process of certifying the pack on HP-UX and Windows. However for Unix platforms we haven't re-packaged the product and the same Unix release can be used for HP-UX platform.
For windows platform we would need to re-package the product and create a new release. That effort is currently underway.
Posted by Sanchit Jindal | March 17, 2008 5:04 AM
Posted on March 17, 2008 05:04
Is it possible to add E-biz custom tables to the data scrambling configuration? I would assume that this is schema dependent.
Thanks,
John
Posted by John Hax | December 29, 2008 12:15 PM
Posted on December 29, 2008 12:15
Dear All,
Thanks for all these info provided.
I Have a cloned EBS 12, and I need to scramle the data on it, how can I acheive that? or I should clone again, and during cloning I should scramble the data using AMP ?
Thanks in Advance,
Jamal
Posted by Jamal Mallouh | March 9, 2009 11:09 PM
Posted on March 9, 2009 23:09
Steven,
Data Masking and Scrambling state that they are irreversible. We have a need to have scrambled data in our test environments but then be able to send files to our shared systems where they need to "de-scramble" the data to validate.
Is that possible with any of the Oracle tools?
As always, thanks in advance and hope all is well.
John
Posted by John Stouffer | March 24, 2009 12:46 PM
Posted on March 24, 2009 12:46
Hi, John,
As far as I'm aware, these tools don't have a decryption or unscrambling option.
I don't think I fully understand your requirements, but here's one possible approach:
The Oracle Applications Management Pack offers a scriptable cloning process. You get to choose what happens during cloning. You might choose to include the data scrambling step for your test instances (using one particular script), but leave production cloning unscrambled (using a different cloning script).
Would that meet your requirements?
Regards,
Steven
Posted by Steven Chan | March 26, 2009 3:00 PM
Posted on March 26, 2009 15:00
I have a question about using the Data Masking feature in OEM. I found this link which explains the step-by-step process about Data Masking:
http://www.oracle.com/technology/obe/obe10gemgc_10204/datamask/datamask.htm
I tried following these steps and just realized that the OEM and Oracle Applications should be running on a Linux Server as against a Sun Solaris. Is that correct? We have our Oracle Applications system (and OEM) running on Sun Solaris so does this mean Data Masking cannot be used?
Please reply as soon as possible.
Thanks,
Shantan
Posted by Shantan | March 30, 2009 1:54 PM
Posted on March 30, 2009 13:54
I installed EBS R12.0.0 with database 10.2.0.2 .Please provide the information about " datamasking concept is applicable to DATABASE of EBS R12.0.0"
Thanks,
Thireesh.
Posted by Thireesh | June 19, 2009 2:23 AM
Posted on June 19, 2009 02:23
Does AMP require additional licensing?
Posted by Kurt | November 17, 2009 11:20 AM
Posted on November 17, 2009 11:20
Hi, Kurt,
Yes it does. I don't know what that licencing costs, though (I'm in Development not Sales). For details about AMP licencing, your best bet would be to contact your Oracle account manager.
Regards,
Steven
Posted by Steven Chan
|
November 17, 2009 11:22 AM
Posted on November 17, 2009 11:22