Tokenizing sensitive data
AssigneeWorldpay, LLC
InventorsBryan T. BAILEY, John ROMER, Chris DOYLE, Jeremy GIFFORD, Kevin ZIBART
Life of this patent
Estimating the term…
Abstract
Included are embodiments for tokenizing sensitive data. Some embodiments of systems and/or methods are configured to receive sensitive data from a vendor, determine a token key for the vendor, and utilize a proprietary algorithm, based on the token key to generate a vendor-specific token that is associated with the sensitive data. Some embodiments include creating a token identifier that comprises data related to the token key sending the vendor-specific token and the token identifier to the vendor.
Claims21
1-20. (canceled)
A method for tokenization of sensitive data, comprising:
- receiving, by a tokenization computing device, sensitive data from a vendor computing device associated with a vendor;
- determining, by the tokenization computing device, a token key based on the vendor associated with the sensitive data;
- generating, by the tokenization computing device, a vendor-specific token associated with the sensitive data;
- generating, by the tokenization computing device, a token identifier associated with the sensitive data, wherein the token identifier identifies at least one of:
- the token key or a sanity value;
- receiving, by the tokenization computing device, a request to cancel an electronic transaction, the request including the vendor-specific token and the token identifier;
- determining, by the tokenization computing device, the token key based on the token identifier;
- generating, by the tokenization computing device, sensitive data associated with the electronic transaction based on the token key;
- and
- verifying, by the tokenization computing device, an accuracy of the generated sensitive data using the token identifier.
A system for tokenization of sensitive data, comprising:
- one or more processors;
- and
- a memory storing instructions which, when executed by the one or more processors, cause the one or more processors to perform operations for tokenization of sensitive data, the operations comprising:
- receiving, by a tokenization computing device, sensitive data from a vendor computing device associated with a vendor;
- determining, by the tokenization computing device, a token key based on the vendor associated with the sensitive data;
- generating, by the tokenization computing device, a vendor-specific token associated with the sensitive data;
- generating, by the tokenization computing device, a token identifier associated with the sensitive data, wherein the token identifier identifies at least one of:
- the token key or a sanity value;
- receiving, by the tokenization computing device, a request to cancel an electronic transaction, the request including the vendor-specific token and the token identifier;
- determining, by the tokenization computing device, the token key based on the token identifier;
- generating, by the tokenization computing device, sensitive data associated with the electronic transaction based on the token key;
- and
- verifying, by the tokenization computing device, an accuracy of the generated sensitive data using the token identifier.
A non-transitory computer-readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations for tokenization of sensitive data, the operations comprising:
- receiving, by a tokenization computing device, sensitive data from a vendor computing device associated with a vendor;
- determining, by the tokenization computing device, a token key based on the vendor associated with the sensitive data;
- generating, by the tokenization computing device, a vendor-specific token associated with the sensitive data;
- generating, by the tokenization computing device, a token identifier associated with the sensitive data, wherein the token identifier identifies at least one of:
- the token key or a sanity value;
- receiving, by the tokenization computing device, a request to cancel an electronic transaction, the request including the vendor-specific token and the token identifier;
- determining, by the tokenization computing device, the token key based on the token identifier;
- generating, by the tokenization computing device, sensitive data associated with the electronic transaction based on the token key;
- and
- verifying, by the tokenization computing device, an accuracy of the generated sensitive data using the token identifier.
Dependencies are inferred from the claim text.