Tokenization Gatekeeper for Credit Card Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption and decryption processes for credit card information are inefficient, leading to increased processing complexity and risk of data breaches, particularly in online transactions, due to the need for frequent encryption and decryption of sensitive data.
Innovation Solution
Implementing a gatekeeper module that stores credit card numbers encrypted and associates them with unique tokens, allowing access and transmission only through these tokens, reducing the need for direct encryption and decryption and enhancing security by minimizing sensitive information exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption and decryption processes are performed frequently for credit card information, then data security is improved, but processing complexity and time increase
Solution Approach 1:
The system performs encryption in advance when credit card data is initially stored, creating an encrypted version that is then used for all subsequent transactions. This preliminary encryption action eliminates the need for repeated encryption operations during normal processing, reducing complexity while maintaining security.
Solution Approach 2:
The invention creates a copy of the encrypted credit card data that can be used multiple times without requiring re-encryption. The encrypted copy serves as a reusable artifact that maintains security while simplifying subsequent processing operations.
2Reliability
If encryption and decryption processes are performed frequently for credit card information, then data security is improved, but processing time increases
Solution Approach 1:
Encryption is performed once in advance when the credit card number is first received and stored. This preliminary action creates a permanently encrypted version that eliminates the need for time-consuming encryption operations during subsequent transactions, significantly reducing processing time while maintaining security.
Solution Approach 2:
The system uses a disposable encrypted copy of the credit card data that can be freely distributed and used without requiring the original unencrypted data. This encrypted copy acts as a temporary but sufficient artifact for processing, eliminating repeated encryption time costs.
3Productivity
If credit card numbers are transmitted frequently, then transaction processing is improved, but risk of data breaches increases
Solution Approach 1:
The system creates and transmits copies of encrypted credit card data instead of the original unencrypted numbers. These encrypted copies can be freely transmitted for transaction processing without increasing breach risk, as they cannot be easily converted back to usable credit card numbers without the decryption key.
Solution Approach 2:
The encrypted version of the credit card data serves as an intermediary that enables transaction processing without exposing the actual credit card number. This intermediary form allows productivity improvement while maintaining security by preventing direct access to the sensitive original data.
4Reliability
If encryption keys are maintained and securely stored, then data security is improved, but device complexity increases
Solution Approach 1:
The invention extracts the security requirement from the transaction processing flow by maintaining encryption keys in a separate, secure location (key safe). This separation removes the complexity of key management from the main processing system, allowing transactions to proceed using only the encrypted data without requiring complex key handling in the transaction path.
Data Source
AI summary
Various embodiments of the present invention are directed to methods, systems and computer program products for conducting an online transaction on a website involving sensitive information. Such embodiments provide methods, systems and computer program products to: (a) register at least one entity with a gate keeper module, the registering comprising associating the entity with a subscription level; (b) associate a sub-string of a character string with a unique token so that a direct link does not exist between the unique token and the character string; and (c) during processing of the online transaction: (i) using the unique token for intermediate steps during the processing of the online transaction; and (ii) only accessing the character string in storage memory to complete the online transaction after receiving a request from at least one registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.


