Table-Connected Tokenization for Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods are vulnerable to hacking due to the reuse of encryption keys and require extensive computing resources, failing to effectively utilize data format advantages and providing inadequate security against unauthorized access.
Innovation Solution
A tokenization system that tokenizes sensitive data before transmission by using initialization vectors (IVs) and token tables, where IVs are used to modify the data and tokens are retrieved from token tables, with the system employing multiple servers to store token tables and IVs, enhancing security through table-connected tokenization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encryption keys and algorithms are reused for data protection, then the data protection process becomes efficient and simple, but the system becomes vulnerable to hacking and compromise
Solution Approach 1:
The patent segments the data protection process into multiple independent stages: tokenization using token tables, initialization vector generation using IV tables, and modification operations. Each stage uses separate tables and operations, preventing the reuse of single secrets while maintaining operational efficiency. The sensitive data is divided into portions that are processed independently through different tables.
Solution Approach 2:
The system performs preliminary tokenization of sensitive data before transmission or storage. Token tables are pre-populated with token mappings, and IV tables are pre-generated with initialization vectors. This preliminary preparation eliminates the need to reuse encryption keys during actual data protection operations, as each operation uses pre-computed tokens and IVs specific to that data.
2Reliability
If traditional encryption methods are used to protect data, then data security is provided, but extensive computing resources are required for encoding and decoding
Solution Approach 1:
Instead of performing computationally intensive encryption and decryption operations, the system uses token tables that contain pre-computed token mappings. The tokenization process simply looks up values in these tables rather than performing complex mathematical transformations, dramatically reducing computing resource requirements while maintaining security through the use of secure token tables and IVs.
Solution Approach 2:
The patent replaces the mechanical encryption/decryption process with a table-lookup-based tokenization system. Rather than using cryptographic algorithms that require extensive CPU cycles for encoding and decoding, the system substitutes this with efficient table queries and data modification operations using pre-computed tokens and initialization vectors.
3Device complexity
If data protection secrets are reused across multiple operations, then the system operates efficiently with fewer unique secrets, but the system becomes particularly vulnerable to compromise
Solution Approach 1:
The system dynamically changes parameters for each data protection operation by generating unique initialization vectors from IV tables and selecting different token tables based on the specific data being protected. Each operation uses a unique combination of tokens and IVs, eliminating secret reuse while managing complexity through structured table selections and parameter variations.
Data Source
AI summary
A tokenization system tokenizes sensitive data to prevent unauthorized entities from accessing the sensitive data. The tokenization system accesses sensitive data, and retrieves an initialization vector (IV) from an IV table using a first portion of the sensitive data. A second portion of the sensitive data is modified using the accessed initialization vector. A token table is selected from a set of token tables using a third portion of the sensitive data. The modified second portion of data is used to query the selected token table, and a token associated with the value of the modified second portion of data is accessed. The second portion of the sensitive data is replaced with the accessed token to form tokenized data.