Method and device for the pseudonymization of digital data

A method for pseudonymizing digital data records for transmission from a source computing system to a destination computing system, the method comprising:

• receiving, by a client component of an identity protector system, person-specific data from a source computing system provided with a source identifier, wherein the person-specific data comprises unique identifiers corresponding to a person;
• generating, by the client component of the identity protector system, a pre-pseudonym (PI) based on the unique identifiers and a protected hash function;
• sending, by the client component of the identity protector system, the PI with the source identifier to the source computing system;
• erasing, by the client component of the identity protector system, the person-specific data from the client component of the identity protector system;
• receiving, by a master component of the identity protector system, the PI with the source identifier from the source computing system;
• generating, by the master component of the identity protector system, a pseudonym (PPI) based on the PI and the source ID, wherein generating the PPI is performed in response to a request for possible re-identification for a data record corresponding to the source identifier from the destination computing system;
• and
• transmitting, by the master component of the identity protector system, the PPI to the destination computing system;
• and
• storing, at a trusted database component of the identity protector system, an assignment of the PPI to the PI and the source ID to facilitate re-identification for the data record corresponding to the source identifier.