Tokenization and encryption of sensitive data
AssigneeCyral Inc.
InventorsManav Ratan Mital, Srinivas Nageswarrao Vadlamani, Pramod Chandraiah
Life of this patent
Estimating the term…
Abstract
A method and system for anonymizing data are disclosed. The method and system include receiving, at the wrapper, a request to store data in a data source. The wrapper includes a dispatcher and at least one service. The dispatcher receives the communication and is data agnostic. The method and system also include providing the request from the dispatcher to the at least one service and anonymizing, at the service(s), the data to provide anonymized data.
Claims22
A method, comprising:
- receiving, at a wrapper, a request to store data in a data source, the wrapper including a dispatcher and a plurality of services, the dispatcher receiving the request, being data agnostic, and determining at least one service of the plurality of services to provide the request to without determining whether the data is to be anonymized and without anonymizing the data, wherein the plurality of services includes a first service and a second service, wherein the first service is different from the second service, wherein the first service performs at least one of a tokenization and/or an encryption, wherein the second service performs at least one of a tokenization and/or an encryption, and wherein the at least one service includes the first service or the second service;
- providing the request from the dispatcher to the at least one service;
- determining, by the at least one service, that the data is to be anonymized;
- and
- anonymizing, by the at least one service, the data to provide anonymized data, comprising:
- determining a type of the data, wherein the type of the data includes at least one of the following:
- a social security number, and/or a credit card number;
- and
- performing an action on the data based on a first type of data or a second type of data, wherein the first type of data is different from the second type of data, and wherein the action includes at least one of a tokenization and/or an encryption.
A system, comprising:
- a processor configured to:
- receive, at a wrapper, a request to store data in a data source, the wrapper including a dispatcher and a plurality of services, the dispatcher receiving the request, being data agnostic, and determining at least one service of the plurality of services to provide the request to without determining whether the data is to be anonymized and without anonymizing the data, wherein the plurality of services includes a first service and a second service, wherein the first service is different from the second service, wherein the first service performs at least one of a tokenization and/or an encryption, wherein the second service performs at least one of a tokenization and/or an encryption, and wherein the at least one service includes the first service or the second service;
- provide the request from the dispatcher to the data source to the at least one service;
- determine, by the at least one service, that the data is to be anonymized;
- and
- anonymize, by the at least one service, the data to provide anonymized data, comprising to:
- determine a type of the data, wherein the type of the data includes at least one of the following:
- a social security number, and/or a credit card number;
- and
- perform an action on the data based on a first type of data or a second type of data, wherein the first type of data is different from the second type of data, and wherein the action includes at least one of a tokenization and/or an encryption;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- receiving, at a wrapper, a request to store data in a data source, the wrapper including a dispatcher and a plurality of services, the dispatcher receiving the request, being data agnostic, and determining at least one service of the plurality of services to provide the request to without determining whether the data is to be anonymized and without anonymizing the data, wherein the plurality of services includes a first service and a second service, wherein the first service is different from the second service, wherein the first service performs at least one of a tokenization and/or an encryption, wherein the second service performs at least one of a tokenization and/or an encryption, and wherein the at least one service includes the first service or the second service;
- providing the request from the dispatcher to the at least one service;
- determining, by the at least one service, that the data is to be anonymized;
- and
- anonymizing, at the at least one service, the data to provide anonymized data, comprising:
- determining a type of the data, wherein the type of the data includes at least one of the following:
- a social security number, and/or a credit card number;
- and
- performing an action on the data based on a first type of data or a second type of data, wherein the first type of data is different from the second type of data, and wherein the action includes at least one of a tokenization and/or an encryption.
Dependencies are inferred from the claim text.