Facilitating queries of encrypted sensitive data via encrypted variant data objects

A method comprising:

• receiving, by a secure data processing system, sensitive data about an entity;
• creating, in an identity data repository and from the sensitive data, a searchable secure entity data object for the entity, wherein creating the searchable secure entity data object comprises:
• generating variant data having a modified version of the sensitive data,
• tokenizing the sensitive data and the variant data,
• associating a common entity identifier with the tokenized sensitive data and the tokenized variant data, and
• storing the tokenized sensitive data, the tokenized variant data, and the common entity identifier in the searchable secure entity data object;
• receiving a query regarding the entity;
• generating a transformed query parameter from a query parameter in the query;
• and
• servicing the query by matching the transformed query parameter to the tokenized variant data in the searchable secure entity data object and retrieving the tokenized sensitive data from the searchable secure entity data object.

A system comprising:

• a processing device;
• a non-transitory computer-readable memory coupled to the processing device and storing a secure identity data structure comprising:
• a tokenized sensitive data object having encrypted versions of account or transaction data regarding an entity,
• a tokenized variant data object comprising a modified version of account or transaction data, and
• a common entity identifier linking the tokenized sensitive data object and the tokenized variant data object;
• and
• a server communicatively coupled to the non-transitory computer-readable memory and configured for servicing a query regarding the entity by (i) matching a transformed version of a query parameter to the tokenized sensitive data object and (ii) retrieving the tokenized variant data object from the secure identity data structure using the common entity identifier.