Which data masking function to use to mask bank account numbers? - Cloud

Which data masking function to use to mask bank account numbers? - Cloud - 8.0

Data privacy

Version

Cloud

8.0

Language

English

Product

Talend Big Data Platform

Talend Data Fabric

Talend Data Management Platform

Talend Data Services Platform

Talend MDM Platform

Talend Real-Time Big Data Platform

Module

Talend Studio

Content

Data Governance > Third-party systems > Data Quality components > Data privacy components

Data Quality and Preparation > Third-party systems > Data Quality components > Data privacy components

Design and Development > Third-party systems > Data Quality components > Data privacy components

Last publication date

2024-03-28

An IBAN number is composed of several elements. Here is the terminology used for the data masking functions:

Example of the different elements in French and German IBAN numbers.

Black: Country code
Coral: Check digits
Light blue: Bank/branch code
Dark blue: Account number
Gray: National check digits. Their position in the IBAN number depends on the country.
Some countries do not use national check digits.

To mask bank account numbers by other bank account numbers, you can use different data masking functions. To help you decide which function is the most suitable, the following table sums them up.

Function	Generate account number and keep original country	Mask bank code and account number and keep original country	Mask account number and keep original country and bank code
Behavior	Input valid: Generates bank account numbers conform to the corresponding country. Input not valid: Generates French IBAN numbers.	Uses the format-preserving encryption. Input valid: Masks the bank account number. Input not valid: Sends the input data to the "Invalid" flow or returns `null` in the main flow.	Uses the format-preserving encryption. Input valid: Masks the bank account number and keeps the bank/branch code. Input not valid: Sends the input data to the "Invalid" flow or returns `null` in the main flow.

Function

Generate account number and keep original country

Mask bank code and account number and keep original country

Mask account number and keep original country and bank code

Behavior

Input valid: Generates bank account numbers conform to the corresponding country.

Input not valid: Generates French IBAN numbers.

Uses the format-preserving encryption.

Input valid: Masks the bank account number.

Input not valid: Sends the input data to the "Invalid" flow or returns null in the main flow.

Uses the format-preserving encryption.

Input valid: Masks the bank account number and keeps the bank/branch code.

Input not valid: Sends the input data to the "Invalid" flow or returns null in the main flow.

Note: To determine if an input is valid, the functions verify different criteria. See the table below.

This table lists the criteria that are verified for each data masking function to determine if an input is valid. The input is validated according to the country code.

Input validation	Generate account number and keep original country	Mask bank code and account number and keep original country	Mask account number and keep original country and bank code
Validate country code	Yes	Yes	Yes
Validate format	No	Yes	Yes
Validate IBAN check digits	No	Yes	Yes
Validate national check digits	No	Yes Only for some countries (see the list below). For the other countries, the national check digits may not be valid.	Yes Only for some countries (see the list below). For the other countries, the national check digits may not be valid.
Validate bank/branch code	No	No	No

This table lists the criteria that are verified for each data masking function to make the output valid according to the country code.

Output validity	Generate account number and keep original country	Mask bank code and account number and keep original country	Mask account number and keep original country and bank code
Validate country code	Yes	Yes	Yes
Validate format	Yes	Yes	Yes
Validate IBAN check digits	Yes	Yes	Yes
Validate national check digits	Yes Only for some countries (see the list below). For the other countries, the national check digits may not be valid.	Yes Only for some countries (see the list below). For the other countries, the national check digits may not be valid.	Yes Only for some countries (see the list below). For the other countries, the national check digits may not be valid.
Validate bank/branch code	No	No	Yes When the input bank/branch code is valid.

Which national check digits are handled?

The national check digits of the following countries are handled:

Belgium
Bosnia
Croatia
Czech Republic
Estonia
France
Hungary
Italy
Mauritania
Monaco
Montenegro
Norway
Portugal
San Marino
Serbia
Slovakia
Slovenia
Spain
Timor-Leste
Tunisia

National check digits from other countries are supported but not handled. This means that the functions cannot determine whether the national check digits are conform to the corresponding country or not.

Some countries do not use national check digits.