Encryption and tokenization architectures

A data processing system for using a unique token in online transactions involving sensitive information to control access to the sensitive information, the data processing system comprising a processor and one or more storage devices embodying computer-readable program instructions that, when executed by the processor, cause the data processing system to:

• register at least one entity, the registering comprising associating the at least one entity with a subscription level;
• in response to receipt of the sensitive information from a merchant device, generate a unique token for use in place of the sensitive information, wherein the sensitive information comprises a character string stores as encrypted data;
• directly associate a sub-string of a character string with the unique token so that a direct association does not exist between the unique token and the character string, the character string comprising the sensitive information and the sub-string being configured to identify the character string without revealing the sensitive information;
• and
• access the character string stored as encrypted data in storage memory using the unique token and the sub-string to retrieve the sensitive information after transmission of a request for the sensitive information from a registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.

A computer program product for using a unique token in an online transaction on a website involving sensitive information to control access to the sensitive information, the computer program product comprising a computer-readable storage embodying computer-readable program instructions that, when executed, cause a processor to:

• register at least one entity, the registering comprising associating the at least one entity with a subscription level;
• in response to receipt of the sensitive information from a merchant device, generate a unique token for use in place of the sensitive information, wherein the sensitive information comprises a character string stored as encrypted data;
• directly associate a sub-string of a character string with the unique token so that a direct association does not exist between the unique token and the character string, the character string comprising the sensitive information and the sub-string being configured to identify the character string without revealing the sensitive information;
• and
• access the character string stored as encrypted data in storage memory using the unique token and the sub-string to retrieve the sensitive information after transmission of a request for the sensitive information from a registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.