Token Mapping Security via Intermediary Digest Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing tokenization techniques fail to adequately enhance the security of token mapping data, which is crucial for protecting sensitive information from unauthorized access.
Innovation Solution
A system and method that involves generating a sensitive data digest, submitting it to a database with relational elements mapped to both sensitive and token digests, and using invertible operations or encryption to securely associate tokens with sensitive data, thereby enhancing the security of token mapping data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If traditional tokenization is used to replace sensitive data with tokens, then sensitive data exposure is reduced, but token mapping data security remains vulnerable
Solution Approach 1:
The patent introduces an intermediary encryption layer for token mapping data. Instead of storing plain text mappings, the system encrypts the mapping data using encryption keys. This intermediary encryption mechanism protects the token mapping data while still allowing authorized retrieval, thus resolving the contradiction between reducing sensitive data exposure and maintaining token mapping security.
Solution Approach 2:
The patent transforms the storage format of token mapping data by applying encryption transformations. The mapping data is converted from a readable format to an encrypted format using cryptographic parameters and keys. This parameter change ensures that even if the database is compromised, the mapping data remains unintelligible without the encryption keys, thereby enhancing security while maintaining functionality.
2Ease of operation
If token mapping data is stored in plain text for easy retrieval, then system operation is simplified, but security of the mapping data is compromised
Solution Approach 1:
The patent introduces encryption keys as intermediaries between the stored mapping data and the retrieval process. The encryption keys enable authorized decryption and retrieval of mapping data without exposing the data in plain text during storage. This maintains ease of operation for authorized users while protecting against unauthorized access.
Solution Approach 2:
The patent applies preliminary encryption action to the token mapping data before storage. By encrypting the data in advance using encryption keys, the system prepares the data in a secure state for storage. This preliminary security measure ensures that even if the storage is compromised, the data remains protected, while authorized retrieval is facilitated through the decryption process.
Data Source
AI summary
Systems and methods for processing tokenization requests to facilitate safe storage of tokens. A tokenization request comprising sensitive data is received. A sensitive data digest is generated based on the sensitive data and a query comprising the sensitive data digest is submitted to a database. The database stores a plurality of relational elements. Each relational element being mapped to: (i) a given sensitive data digest stored in the database and (ii) a given token digest stored in the database. A token associated with the sensitive data is generated based on a response to the query received from the database.