Batch tokenization service
AssigneeCapital One Services, LLC
InventorsNaveen Teja Koduru, Kishore Doppalapudi, Ramesh Parvataneni
Life of this patent
Estimating the term…
Abstract
Methods and systems of data tokenization are described herein to provide protection for sensitive data. A tokenization service controller may extract sensitive data by determining a schema, the schema identifying which fields contain sensitive data. A token may be generated corresponding to each instance of the extracted sensitive data. The tokenization service controller may then generate a tokenized data set comprising a plurality of tokenized records arranged according to the same format as the original records, wherein the tokenized records use the generated tokens in place of the corresponding sensitive data.
Claims20
A method comprising:
- receiving, by a computing device, a data set and a schema identifying which portions of the data set contain sensitive data;
- identifying, by the computing device and based on the schema, a plurality of portions of sensitive data from the data set;
- extracting, by the computing device, the identified plurality of portions of sensitive data from the data set;
- validating, by the computing device, the extracted sensitive data values of the plurality of portions of sensitive data by determining that formats of the sensitive data values match with one or more known sensitive data formats;
- encrypting, by the computing device and based on the validating, the plurality of portions of sensitive data to generate a plurality of tokenized portions corresponding to the plurality of portions of sensitive data;
- and
- generating, by the computing device and from the data set, a tokenized data set by replacing each of the plurality of portions of sensitive data in the data set with a corresponding tokenized portion from the plurality of tokenized portions.
An apparatus, comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
- receive a data set and a schema identifying which portions of the data set contain sensitive data;
- identify, based on the schema, a plurality of portions of sensitive data from the data
- extract the identified plurality of portions of sensitive data from the data set;
- validate extracted sensitive data values of the plurality of portions of sensitive data by determining that formats of the sensitive data values match with one or more known sensitive data formats;
- encrypt, based on validating the sensitive data values of the plurality of portions of sensitive data, the plurality of portions of sensitive data to generate a plurality of tokenized portions corresponding to the plurality of portions of sensitive data;
- and
- generate, from the data set, a tokenized data set by replacing each of the plurality of portions of sensitive data in the data set with a corresponding tokenized portion from the plurality of tokenized portions.
A non-transitory machine-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform steps comprising:
- receiving a data set and a schema identifying which portions of the data set contain sensitive data;
- identifying, based on the schema, a plurality of portions of sensitive data from the data set;
- extracting the identified plurality of portions of sensitive data from the data set;
- validating sensitive data values of the extracted plurality of portions of sensitive data by determining that formats of the sensitive data values match with one or more known sensitive data formats;
- encrypting, based on the validating, the plurality of portions of sensitive data to generate a plurality of tokenized portions corresponding to the plurality of portions of sensitive data;
- and
- generating, from the data set, a tokenized data set by replacing each of the plurality of portions of sensitive data in the data set with a corresponding tokenized portion from the plurality of tokenized portions.
Dependencies are inferred from the claim text.