US 2014/0177825 A1 · Asymmetric Tokenization

Abstract

An asymmetric encoding environment includes a plurality of secure computer systems, each configured to perform one or more encoding operations on received data using one or more encoding components inaccessible to the other secure computer systems. A first secure computer system receives sensitive data and tokenizes the sensitive data using a first token table inaccessible to a second secure computer system to produce first tokenized data. The second secure computer system receives the first tokenized data and tokenizes the sensitive data using a second token table inaccessible to the first secure computer system to produce second tokenized data. The second secure computer system can store the second tokenized data for subsequent access. The first and second secure computer systems can perform additional data protection techniques, such as encryption and data modification using initialization vectors. In such embodiments, each secure computer system uses an encryption key and/or initialization vector inaccessible to the other secure computer system.

Claims20

Dependent claims

A computer-implemented method for asymmetric encoding comprising:

receiving, at a first secure computing system, sensitive data to be encoded;
encoding, by the first secure computer system, the received sensitive data to produce first encoded data, wherein the first secure computer system is configured to:
encrypt data using a first encryption key;
and
tokenize data using a first token table;
receiving, at a second secure computing system, the first encoded data;
encoding, by the second secure computer system, the first encoded data to produce second encoded data, wherein the second secure computer system is configured to:
encrypt data using a second encryption key;
and
tokenize data using a second token table, wherein the first secure computer system does not have access to the second encryption key and the second token table and wherein the second secure computer system does not have access to the first encryption key and the first encryption table;
and
storing the second encoded data.

9 more elements

A system for asymmetric encoding comprising:

an input configured to receive sensitive data to be encoded;
a first secure computer system configured to encode the received sensitive data to produce first encoded data, wherein the first secure computer system is additionally configured to:
encrypt data using a first encryption key;
and
tokenize data using a first token table;
a second secure computer system configured to encode the first encoded data to produce second encoded data, wherein the second secure computer system is additionally configured to:
encrypt data using a second encryption key;
and
tokenize data using a second token table;
and
a memory configured to store second encoded data;
wherein the first secure computer system does not have access to the second encryption key and the second token table, and wherein the second secure computer system does not have access to the first encryption key and the first encryption table.

9 more elements

Dependencies are inferred from the claim text.

Asymmetric Tokenization

Life of this patent

Asymmetric Tokenization

Life of this patent

Abstract

Claims20