Multi-tenant data protection in a centralized network environment

A non-transitory computer-readable storage medium storing executable computer instructions that, when executed by a processor, cause the processor to perform steps comprising:

• receiving, by a central server from a client device associated with a user account, a security value, the client device configured to access the security value from a hardware security device separate from and coupled to the client device;
• accessing, by the central server, a static token table corresponding to the user account, the static token table mapping each of a plurality of input values to a different token value;
• generating, by the central server, a reshuffled static token table by reshuffling the token values within the static token table based at least in part on the security value such that at least one input value is mapped by the reshuffled static token table to a different token value than by the static token table;
• receiving, by the central server from the client device, data to be protected;
• tokenizing, by the central server, the received data using the reshuffled static token table by querying the reshuffled static token table with a value of a portion of the received data to identify a token value mapped to the value of the portion of the accessed data and replacing the portion of the received data with the identified token value;
• and
• providing, by the server, the tokenized data to a database for storage in conjunction with tokenized data corresponding to other user accounts such that an unauthorized access to tokenized data corresponding to a first user account does not compromise tokenized data corresponding to a second user account.

A system for securing data in a centralized environment comprising:

• a non-transitory computer-readable storage medium storing executable computer instructions for:
• receiving, by a central server from a client device associated with a user account, a security value, the client device configured to access the security value from a hardware security device separate from and coupled to the client device;
• accessing, by the central server, a static token table corresponding to the user account, the static token table mapping each of a plurality of input values to a different token value;
• generating, by the central server, a reshuffled static token table by reshuffling the token values within the static token table based at least in part on the security value such that at least one input value is mapped by the reshuffled static token table to a different token value than by the static token table;
• receiving, by the central server from the client device, data to be protected;
• tokenizing, by the central server, the received data using the reshuffled static token table by querying the reshuffled static token table with a value of a portion of the received data to identify a token value mapped to the value of the portion of the accessed data and replacing the portion of the received data with the identified token value;
• and
• providing, by the server, the tokenized data to a database for storage in conjunction with tokenized data corresponding to other user accounts such that an unauthorized access to tokenized data corresponding to a first user account does not compromise tokenized data corresponding to a second user account;
• and
• a processor to execute the instructions.