6 results about "Format-preserving encryption" patented technology

A plaintext is received. For example, a plaintext may be a text record that is to be encrypted and then stored in a database. A determination is made to see if a size of the plaintext is above a threshold. The threshold is based on an efficiency of a Format Preserving Encryption (FPE) algorithm. In response to the size of the plaintext being above the threshold: the plaintext is divided into a plurality of blocks based on a block size; each of the blocks are individually encrypted using the FPE algorithm; and each of the blocks are stored as a single FPE cyphertext. This makes the FPE encryption process much more effacement than has previously been achieved. For example, the FPE process may be 30% more efficient depending on the size of the plain text.

The present invention provides a robust and effective solution to an organization by enabling them to implement a system (110) for facilitating format preserving encryption capability such that the encrypted data will not be available with its original value in a big data system and render sensitive field data as non-sensitive. Thus, sensitive data may be hidden from data-stores / warehouses without worrying about downstream access to the data. The system (110) proposed may also preserve the data type and format of datasets but not limited to the like. The system encrypts a dataset with a unique key (404) and then allows a privileged user (902) to decrypt the encrypted dataset with the unique key (404) and view the decrypted values without getting access to the sensitive original dataset.

Disclosed herein are system, method, and computer program product embodiments for tokenization by obfuscating a length of personal information through addition of one or more digits and modifying a base of the input string before encryption. In one process, a security string is added to a user information input string of a first length and first base to generate a second string of a longer length, a format preserving encryption (FPE) is performed to generate a new string of the another length and base, and converted into a token of the first length but different base.

The invention discloses a reserved format encryption and decryption method based on a national secret ZUC algorithm and an identifiable mechanism, and relates to the field of Chinese and English mixed reserved format encryption, and the method comprises the steps: carrying out the multi-field structured analysis of an original message space, generating a high-randomness key stream through the national secret ZUC algorithm, carrying out the symmetric encryption, and finally mapping a ciphertext back to the original message space. And the ciphertext format is completely consistent with the original text. The method has high security guarantee, is designed based on the correlation of fields in the format space, and designs a universal format-preserving encryption method and system. Personal sensitive information safety can be effectively guaranteed, and meanwhile the requirements of various databases for data format consistency are met.

A computer-implemented method of tokenisation is described. A first value for a data field is provided, which is determined in accordance with a set of data field rules - this is carried out for a set of first values which are or represent account numbers for payment devices. These are stored in a secure database. For each of this set of first values, some or all places in the data field of the first value are encrypted using format preserving encryption to provide an encrypted first token also complying with the set of data field rules. The set of encrypted first tokens is used in place of the set of first values in one or more operations associated with the data field in performance or authorisation of a digital transaction in a computing environment, within a transaction processing system, that is directly accessible to human operators. A computing device adapted to implement such a method is also described.

The application discloses a reserved format encryption and decryption method based on a national secret ZUC algorithm and a distinguishable mechanism, relates to the field of mixed English and Chinese reserved format encryption, and achieves complete consistency between a ciphertext format and an original text through the following steps: performing multi-field structured analysis on an original message space, generating a high-randomness key stream by using the national secret ZUC algorithm to perform symmetric encryption, and finally mapping the ciphertext into the original message space, thereby achieving complete consistency between a ciphertext format and an original text. The method has high security guarantee, is designed based on the correlation of fields in a format space, and designs a general reserved format encryption method and system. The method can effectively guarantee the safety of personal sensitive information and simultaneously supports the requirement of various databases on data format consistency.