Gonymizer

1 .Gonymizer A Tool to Anonymize Sensitive PostgreSQL Data Tables for Use in QA and Testing Levi Junkert 

2 .Agenda ● Introductions ● HIPAA Regulations ● SmithRx Solution: Gonymizer ● Gonymizing multiple environments using Kubernetes ● Demo ● Wrap-up 

3 .Who am I? ● Database systems 18 years ○ MySQL ○ PostgreSQL ● Software Engineering 11 years ○ Product, Infrastructure, and Automation ● DB and SE Experience ○ Facebook ○ RightNow ( Oracle) ○ OpenDNS (Cisco) ○ Get Better 

4 . Services Agreement Formulary Agreement Self-Insured Manufacturer Employer Wholesaler Payment for Product Formulary Rebates Service and Data Pass through Fees (specialty ) of rebate Product Shipment PBMs sit in the Drug Wholesaler Pharmacy Benefit Manager Serv. Contract middle of a large and Product Shipment Payer Reimbursement complex ecosystem Pharmacy Payment for Product Prescription Reimbursement to PBM Pharmacy Vendor Agreement Network Participation Dispense Prescription Copayment or Coinsurance Patient Financial Flow Contract Relationship Fein, Adam. J., The 2016 Economic Report on Retail, Mail and Specialty Pharmacies, Drug Channels Institute, January 2016 . Product Movement 

5 .

6 . HIPAA Regulations Health Insurance Portability and Accountability Act of 1996 United States Legislation 

7 .HIPAA Regulations Examples Importance Solutions © All Rights Reserved - Chris Slane 

8 .HIPAA Regulations Examples Importance Solutions 

9 .HIPAA Regulations Examples Importance Solutions 

10 .HIPAA Regulations Examples Importance Solutions 

11 .HIPAA Safe Harbor Method (164 somethin b2?) Regulations ● Name ● URL addresses ● Street ● Social Security Number Examples ● All elements of dates ● Account numbers but year ○ CC/Debit Importance ● Telephone Number ● Passwords Solutions ● Fax Number ● Email Address ● Driver Licenses and IDS ● Vehicle IDs ● Biometric IDs ● Full face photos ○ Other comparable images 

12 .HIPAA Safe Harbour Method (164 somethin b2?) Regulations ● Name ● URL addresses ● Street ● Social Security Number Examples ● All elements of dates ● Account numbers but year ○ CC/Debit Importance ● Telephone Number ● Passwords Solutions ● Fax Number ● Email Address ● Driver Licenses and IDS ● Vehicle IDs ● Biometric IDs ● Full face photos ○ Other comparable images 

13 .SmithRx Solution: Gonymizer 

14 .Gonymizer Requirements Design Mapping 

15 .Gonymizer Requirements Design Mapping 

16 .Gonymizer Requirements Design Mapping 

17 .Gonymizer ● Dump of the original PHI dataset Requirements ● Load the data set into a PSQL host Design ● Assignable scrambler function(s) Mapping ● A map to know which columns to anonymize ● Must keep relationships intact ● Must be able to be automated 

18 .Gonymizer Separated Commands ● Dump Requirements ○ Downloads SQL dump file ● Map Design ○ Build and maintain an anonymization map Mapping for ■ Schemas ■ Tables ■ Columns ● Process ○ Anonymizes columns according to map ● Load ○ Loads the anonymized file 

19 .Gonymizer DUMP Requirements Design Mapping LOAD 

20 .Gonymizer PROCESS Requirements Design Mapping MAP 

21 .Gonymizer Requirements Design Mapping 

22 .Gonymizer Requirements ? Design Mapping 

23 .Gonymizer Requirements Design Mapping 

24 .Gonymizer Requirements Design Mapping 

25 .Gonymizer Requirements Design Mapping 

26 .Gonymizer Requirements Design Person Mapping 

27 .Gonymizer Requirements Design Mapping 

28 .Gonymizer Requirements Design Mapping 

29 .Gonymizer Requirements Design Mapping