Protecting user records using Exact Data Matching (Enhanced)

Prev Next

The Exact Data Matching (Enhanced) or EDM (Enhanced) feature enables you to protect sensitive user database records by matching the actual words in the defined columns within a certain proximity in a record (line or row) against the original user record.

Employee records, customer records, and patient medical records are typical examples of huge and sensitive information that needs protection. Although you can protect such records by matching patterns and dictionary terms, these methods of data matching require complex condition and rule logic, which are prone to false matching.

Matching individual fields of a sensitive record such as, name, date of birth, telephone number might not be useful and can easily result in a false match. But matching two or more fields of the same sensitive record (for example, both name and social security number) within the same text (such as, an email or a document) indicates that meaningful related information is present.

EDM (Enhanced) offers improved scanning and fingerprinting performance compared to the existing EDM feature. In order for EDM (Enhanced) to work, it is necessary to run the EDMTrain tool to train the data source file. The tool normalizes and hashes the data source file and generates the required .props file (metadata file) and .dis file (fingerprint file).

EDM (Enhanced) supports multibyte using Unicode to enable processing of data in all supported languages including Chinese, Japanese, and Korean.