Tokenizing sensitive data
AssigneeWorldpay, LLC
InventorsBryan T. BAILEY, John ROMER, Chris DOYLE, Jeremy GIFFORD, Kevin ZIBART
Life of this patent
Estimating the term…
Abstract
Included are embodiments for tokenizing sensitive data. Some embodiments of systems and/or methods are configured to receive sensitive data from a vendor, determine a token key for the vendor, and utilize a proprietary algorithm, based on the token key to generate a vendor-specific token that is associated with the sensitive data. Some embodiments include creating a token identifier that comprises data related to the token key sending the vendor-specific token and the token identifier to the vendor.
Claims20
1-20. (canceled)
A method for tokenization of sensitive data, comprising:
- receiving, by a tokenization computing device, sensitive data from a vendor computing device associated with a vendor;
- generating, by the tokenization computing device, a vendor-specific token that is associated with the sensitive data;
- receiving, by the tokenization computing device, a request to change the vendor-specific token;
- generating, by the tokenization computing device, a new token for associating with the sensitive data;
- and
- sending, by the tokenization computing device, a token identifier and the new token to the vendor computing device, wherein the token identifier is configured to provide token generation data and a sanity value.
A system for tokenization of sensitive data, comprising:
- a processor;
- and
- a memory component that is coupled to the computing device and stores logic that when executed by the processor, causes the system to perform at least the following:
- receive, from a vendor computing device, a request to change a vendor-specific token that is associated with sensitive data, wherein the vendor computing device is associated with a vendor, wherein the request is accompanied by a token identifier that is associated with the vendor-specific token, and wherein the vendor-specific token and the token identifier are linked in a database, wherein the token identifier is configured to provide token generation data and a sanity value;
- utilize the token identifier to determine a location of the sensitive data;
- retrieve the sensitive data;
- generate a new token for associating with the sensitive data;
- and
- send the new token and the token identifier to the vendor computing device.
A non-transitory computer-readable medium for tokenization of sensitive data that stores a program that when executed by a computing device, causes the computing device to perform at least the following:
- receive a request to change a token that is associated with sensitive data, wherein the token is generated based at least in part on a token key that is unique to a vendor, wherein the request is accompanied by a token identifier that is associated with the token, and wherein the token and the token identifier are linked in a database, and the token identifier is configured to provide token generation data and a sanity value;
- identify the token key and a version for the token from the token identifier;
- generate a new token for associating with the sensitive data;
- and
- send the new token and the token identifier to a vendor computing device.
Dependencies are inferred from the claim text.