DEPERSONALIZATION OF USER DATA IN BUSINESS INTELLIGENCE SYSTEMS

Ladikov Andrey Vladimirovich

The article considered the types of data processing systems in organizations, typical scenarios for using data in business intelligence systems, the essence and methods of depersonalization of user data, approaches to depersonalization of user data focused on business intelligence systems. Based on the results of the study, a method for depersonalizing personal data in the business intelligence system is proposed, based on a combination of methods recommended by Roskomnadzor and allowing to reduce the limitations of each of the methods considered separately. In the proposed approach, the depersonalization system is endowed with business logic, which obliges it to recognize all incoming data formats and be able to process them. This allows you to increase the level of control over data entering the business intelligence system: unknown data structures and formats will be discarded when processed by the depersonalization system, which reduces the risk of uncontrolled ingress of user data into business intelligence systems. The separation of depersonalization and depersonalization systems allows to increase the degree of protection of users' personal data, while using asymmetric encryption algorithms allows you to store the private key in hardware security systems, which minimizes the risk of decrypting the entire database with personal identifiers when an attacker gets unauthorized access to the depersonalization system.

Keywords:data protection, confidentiality, depersonalization of data, personal data, business analytics