Systems and methods for tokenization to support pseudonymization of sensitive data
AssigneeTokenex, Inc.
InventorsJerald Dawkins, Michael Ray Oglesby, Justin Stanley
Life of this patent
Estimating the term…
Abstract
Systems and methods for tokenization to support pseudonymization are provided herein. An example method includes receiving an input set, seeding a random number generator with one or more secret data, transposing the input set using a first random number/transposition parameter generated by the random number generator to create a transposed input set, transposing a token set using a second random number/transposition parameter generated by the random number generator to create a transposed token set, and generating a token by substituting transposed input set values with transposed token set values.
Claims19
A polyalphabetic ciphering method for tokenizing data, comprising:
- receiving an input set;
- seeding a random number generator with one or more secret or non-secret data sets;
- transposing the input set using a first random number generated by the random number generator to create a transposed input set;
- transposing a token set using a second random number generated by the random number generator to create a transposed token set;
- and
- generating a token by substituting transposed input set values with transposed token set values.
A polyalphabetic ciphering method for tokenizing data, comprising:
- generating a hash of an input set;
- seeding a random number generator with any of the hash and secret or non-secret data;
- transposing the input set using a random number generated by the random number generator;
- extending a token set to generate an extended token set;
- transposing the extended token set using another random number to create an extended, transposed token set;
- generating a token by substituting transposed input set values with transposed token set values;
- repeating the prior steps a plurality of rounds to generate a final token, wherein in each round the input set is replaced with a newly generated token from a prior round;
- wherein during generation of the final token, encoding a validation value into the final token that is used to validate the token during a detokenizing process;
- receiving a document that includes the input set in at least one field of the document;
- replacing the input set in the at least one field with the final token to pseudonymize the document;
- receiving a detokenization request;
- calculating the random number using the one or more secret or non-secret data sets;
- regenerating the transposed token set;
- recovering the transposed input set using the transposed token set and the one or more secret or non-secret data sets and the random number;
- and
- recovering the input set using the transposed input set.
Dependencies are inferred from the claim text.