Format-preserving tokenization
AssigneeVisa International Service Association
InventorThiruvarun Ganesan
Life of this patent
Estimating the term…
Abstract
A computer system according to embodiments can retrieve untokenized data and identify tokenizing data elements and non-tokenizing data elements. The computer system can generate dummy data and a cryptographic key using the untokenized data. The computer system can then generate a format-preserving token by encrypting the dummy data using the cryptographic key. The computer system can insert the non-tokenizing characters into the format-preserving token. The computer system can perform further processing on the format-preserving token, including storing the format-preserving token in a token vault.
Claims20
A method comprising:
- retrieving, by a computer system, untokenized data;
- generating, by the computer system, dummy data corresponding to the untokenized data;
- generating, by the computer system, a cryptographic key using the untokenized data and a key generation method;
- encrypting, by the computer system, the dummy data using the cryptographic key and a format-preserving encryption method, thereby generating a format-preserving token corresponding to the untokenized data;
- and
- performing additional processing using the format-preserving token, the additional processing comprising one or more of (a) storing the format-preserving token in a token vault, (b) transmitting the format-preserving token to a client computer or another external entity, or (c) performing a private data analysis using the format-preserving token.
A computer system comprising:
- one or more processors;
- and
- a non-transitory computer readable medium coupled to the one or more processors, the non-transitory computer readable medium comprising instructions that, when executed by the one or more processors, cause the computer system to perform a method comprising:
- retrieving untokenized data;
- generating dummy data corresponding to the untokenized data;
- generating a cryptographic key using the untokenized data and a key generation method;
- encrypting the dummy data using the cryptographic key and a format-preserving encryption method, thereby generating a format-preserving token corresponding to the untokenized data;
- and
- performing additional processing using the format-preserving token, the additional processing comprising one or more of (a) storing the format-preserving token in a token vault. (b) transmitting the format-preserving token to a client computer or another external entity, or (c) performing a private data analysis using the format-preserving token.
Dependencies are inferred from the claim text.