Mobile Request Detokenization via Routing Rules and Token Replacement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implementing a detokenization process through a dedicated interface with a detokenization service is resource-intensive and costly, and the process of interacting with such services is time-consuming.
Innovation Solution
Utilizing network routing rules to communicate between a computing system and a detokenization service, eliminating the need for a dedicated interface, thereby conserving computing resources and reducing costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dedicated interfaces are used to interact with detokenization services, then data security and validation accuracy are improved, but computing resource consumption and operational costs increase
Solution Approach 1:
The patent introduces a messaging service as an intermediary component that receives detokenization requests from the computing system and forwards them to the detokenization service. This mediator abstracts the communication interface, allowing the system to use standardized messaging protocols instead of dedicated interfaces, thereby reducing computing resource consumption while maintaining security through controlled access via the messaging service
Solution Approach 2:
The messaging service is designed to handle multiple types of requests (detokenization, validation, authentication) through a universal interface. By making the messaging service multi-functional, the system eliminates the need for separate dedicated interfaces for each service interaction, reducing overall computing resource consumption and operational complexity while maintaining reliable secure communication
2Measurement precision
If dedicated interfaces are implemented for detokenization services, then entity validation accuracy is improved, but implementation complexity and development time increase
Solution Approach 1:
The messaging service acts as a simplified intermediary that handles the complexity of interfacing with the detokenization service. Instead of implementing complex dedicated interfaces, the system uses standardized message formats and protocols through the messaging service, reducing implementation complexity and development time while maintaining validation accuracy through proper message validation and processing
3Reliability
If token substitution is used to protect sensitive data, then data privacy is improved, but processing efficiency and system performance deteriorate
Solution Approach 1:
The system performs token substitution in advance when sensitive data is initially stored or transmitted, replacing it with a token that references the original data. This preliminary action ensures data privacy is maintained throughout subsequent processing operations without requiring real-time decryption or access to sensitive data, thereby maintaining processing efficiency while protecting data privacy
Solution Approach 2:
Instead of processing the original sensitive data, the system processes a copy in the form of a token that contains only the necessary reference information. This copying approach allows the system to maintain data privacy by never exposing the original sensitive data during processing, while maintaining efficiency by working with the smaller, simpler token structure rather than the full sensitive data
Data Source
AI summary
A system includes a processing device and a memory device that includes instructions executable by the processing device for causing the processing device to perform operations. The operations include receiving a validation request to validate an identity of an entity initiating the validation request. The operations further include validating the identity of the entity using a detokenization service based on the validation request. The detokenization service can match an entity identifier to a token of the validation request prior to validating the identity of the entity. Additionally, the operations include, in response to validating the identity of the entity, generating an interaction request in response to the entity selecting a particular request option provided via a user interface. The interaction request can include the token of the validation request. Further, the operations include replacing the token of the interaction request with the entity identifier prior to processing the interaction request.