Decentralized Token Table Generation via Local Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods, such as encryption, can be overcome by hacking methods, and do not effectively prevent unauthorized access to sensitive data after storage security measures are bypassed.
Innovation Solution
Tokenization of sensitive data using a token table, with new token tables generated at regular intervals through a shuffle algorithm based on a pseudo-random number generator and seed value, ensuring that only tokenized data is transmitted and limiting the use of any one token table.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to protect sensitive data during transmission and storage, then data security is improved, but encryption can be overcome by hacking methods and is subject to resource-intensive audit requirements
Solution Approach 1:
The patent extracts the sensitive data from its original form and replaces it with tokenized data. Instead of encrypting the actual sensitive data, the system creates tokens that represent the data, separating the sensitive information from its usable form. This extraction approach eliminates the need for complex encryption audits while maintaining security, as tokens cannot be reverse-engineered to reveal the original sensitive data.
Solution Approach 2:
The patent introduces token tables as an intermediary layer between the sensitive data and its representation during transmission. The token table acts as a mediator that maps sensitive data to tokens, allowing secure transmission without direct encryption of the original data. This intermediary mechanism simplifies security requirements compared to traditional encryption methods.
2Reliability
If token tables are regenerated frequently to increase security, then unauthorized access is limited, but the complexity of maintaining synchronized token tables across endpoints increases
Solution Approach 1:
The patent implements periodic regeneration of token tables at predetermined intervals. This periodic action ensures that even if one token table is compromised, the window of vulnerability is limited to the regeneration interval. The systematic, time-based regeneration approach maintains security while providing a predictable and manageable synchronization process across endpoints.
Solution Approach 2:
The patent performs preliminary distribution of regeneration parameters (such as random seeds or key material) to all endpoints before token table regeneration is needed. This preliminary action ensures that all endpoints can independently regenerate identical token tables without requiring complex real-time synchronization, reducing the complexity of maintaining consistency across distributed systems.
3Productivity
If the same token table is used across multiple transmissions, then transmission efficiency is improved, but the risk of data compromise increases if the token table is intercepted
Solution Approach 1:
The patent applies periodic regeneration of token tables to balance transmission efficiency with security. Token tables are reused for multiple transmissions during their validity period, maintaining efficiency, but are regenerated at predetermined intervals to limit the impact of potential interception. This periodic rotation ensures that even if one token table is compromised, only transmissions within that specific interval are at risk.
4Adaptability or versatility
If token tables are transmitted to endpoints for security management, then centralized control is improved, but the token table itself becomes vulnerable to interception
Solution Approach 1:
The patent extracts the sensitive token table data from the transmission process entirely. Instead of transmitting the actual token tables to endpoints, the system transmits only regeneration parameters (such as seeds or key material) that allow endpoints to independently regenerate the same token tables. This extraction eliminates the interception vulnerability while maintaining centralized control over the regeneration process.
Solution Approach 2:
The patent introduces regeneration parameters as an intermediary representation of the token table. These parameters serve as a safe substitute for transmitting actual token tables, allowing centralized management and distribution without exposing the sensitive token mapping data to interception risks during transmission.
Data Source
AI summary
New tokenization tables are derived at intervals in order to increase the security of tokenized data that is transferred between two endpoints. Generation of the new tokenization tables is based on previous tokenization tables, which advantageously allows the generation process to be performed locally at the two endpoints independently of an external tokenization table provider. New tokenization tables can periodically be distributed to the endpoints as a new starting point for derivation.