System and methods for point to point encryption and tokenization in a hosted environment

A point to point encryption and tokenization method in a hosted machine payment card industry (PCI) environment implementing a data security standard, the method, comprising:

• receiving from an external computing system outside the hosted machine PCI environment, encrypted card holder data (CHD) with an internal computing system operatively coupled to a database in the hosted machine PCI environment, the internal computing system including a plurality of processing zones, each processing zone holding at least one of a plurality of processing modules, the plurality of processing modules including a decryption module, a tokenization module and an authorization module, at least two of the decryption module, tokenization module and authorization module being located in separate processing zones of the plurality of processing zones;
• decrypting the encrypted CHD with the decryption module;
• generating a token representing the decrypted CHD with the tokenization module;
• processing the decrypted CHD with the authorization module;
• transmitting, a confirmation of the processing of the CHD and a copy of the token to the external computing system;
• storing the token representing the decrypted CHD and the decrypted CHD in the database, the token used to retrieve the stored decrypted CHD in a subsequent request;
• receiving at the internal computing system in the hosted machine PCI environment a second request from the external computing system to process the CHD, the second request accompanied by the token representing the CHD;
• retrieving with the tokenization module, the decrypted CHD from the database using the token;
• processing the decrypted CHD using an authentication module based on the second request;
• and
• transmitting a confirmation of the processing of the CHD based on the second request and the token representing the CHD to the external computing system.

A non-transitory computer readable memory medium storing instructions, wherein the instructions are executable by a hardware processor to:

• receive from an external computing system outside the hosted machine PCI environment, encrypted card holder data (CHD) with an internal computing system operatively coupled to a database in the hosted machine PCI environment, the internal computing system including a plurality of processing zones, each processing zone holding at least one of a plurality of processing modules, the plurality of processing modules including a decryption module, a tokenization module and an authorization module, at least two of the decryption module, tokenization module and authorization module being located in separate processing zones of the plurality of processing zones;
• decrypt the encrypted CHD with the decryption module;
• generate a token representing the decrypted CHD with the tokenization module;
• process the decrypted CHD with the authorization module;
• transmit, a confirmation of the processing of the CHD and a copy of the token to the external computing system;
• store the token representing the decrypted CHD and the decrypted CHD in the database, the token used to retrieve the stored decrypted CHD in a subsequent request;
• receive at the internal computing system in the hosted machine PCI environment a second request from the external computing system to process the CHD, the second request accompanied by the token representing the CHD;
• retrieve with the tokenization module, the decrypted CHD from the database using the token;
• process the decrypted CHD using the an authentication module based on the second request;
• and
• transmit a confirmation of the processing of the CHD based on the second request and the token representing the CHD to the external computing system.