Data protection system for online data

A server computing device that implements a web service for securing online purchase data subject to security compliance requirements for an online purchase, the server computing device comprising:

• one or more processors;
• and
• memory, communicatively coupled to the one or more processors, storing instructions that, responsive to execution by the one or more processors, causes the web service to implement operations comprising:
• intercepting the online purchase data communicated from a client application that initiates the online purchase;
• removing sensitive information to sanitize the online purchase data prior to the online purchase data being communicated to a content provider involved in the online purchase;
• storing the sensitive information in a volatile memory of the server computing device to reincorporate the sensitive information with the online purchase data in a communication to a third party service;
• communicating the sanitized online purchase data to the content provider;
• providing payment authorization for the online purchase data based, at least in part, on receiving a response from the third party service, the payment authorization being provided without requiring that the content provider or the third party service be reconfigured to meet the security compliance requirements for the online purchase data;
• and
• removing the sensitive information from the volatile memory of the server computing device after the payment authorization is received from the third party service.

A method implemented by a data protection system to remove sensitive information associated with an online purchase, the method comprising:

• intercepting online purchase data from a client application;
• removing the sensitive information of the online purchase data to sanitize the online purchase data;
• maintaining the sensitive information in a volatile memory of the data protection system to reincorporate the sensitive information with the online purchase data in a communication to a payment service provider;
• communicating the sanitized online purchase data to a eCommerce server that then communicates with a payment service provider for payment authorization of the online purchase, the sanitized online purchase data relieving security compliance requirements at the eCommerce server;
• and
• removing the sensitive information from the volatile memory of the data protection system after the payment authorization is received from the payment service provider.