Tokenization Gatekeeper for Credit Card Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current encryption and decryption processes for credit card information are inefficient, leading to increased processing complexity and risk of data breaches, particularly in online transactions, due to the need for frequent encryption and decryption of sensitive data.

Innovation Solution

Implementing a gatekeeper module that stores credit card numbers encrypted and associates them with unique tokens, allowing access and transmission only through these tokens, reducing the need for direct encryption and decryption and enhancing security by minimizing sensitive information exposure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption and decryption processes are performed frequently for credit card information, then data security is improved, but processing complexity and time increase

Engineering Contradiction:
Improvedata securityVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs encryption in advance when credit card data is initially stored, creating an encrypted version that is then used for all subsequent transactions. This preliminary encryption action eliminates the need for repeated encryption operations during normal processing, reducing complexity while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The invention creates a copy of the encrypted credit card data that can be used multiple times without requiring re-encryption. The encrypted copy serves as a reusable artifact that maintains security while simplifying subsequent processing operations.

Inventive Principle:
Principle #26Copying

2Reliability

If encryption and decryption processes are performed frequently for credit card information, then data security is improved, but processing time increases

Engineering Contradiction:
Improvedata securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

Encryption is performed once in advance when the credit card number is first received and stored. This preliminary action creates a permanently encrypted version that eliminates the need for time-consuming encryption operations during subsequent transactions, significantly reducing processing time while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system uses a disposable encrypted copy of the credit card data that can be freely distributed and used without requiring the original unencrypted data. This encrypted copy acts as a temporary but sufficient artifact for processing, eliminating repeated encryption time costs.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Productivity

If credit card numbers are transmitted frequently, then transaction processing is improved, but risk of data breaches increases

Engineering Contradiction:
Improvetransaction processingVSAvoidrisk of data breaches
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system creates and transmits copies of encrypted credit card data instead of the original unencrypted numbers. These encrypted copies can be freely transmitted for transaction processing without increasing breach risk, as they cannot be easily converted back to usable credit card numbers without the decryption key.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The encrypted version of the credit card data serves as an intermediary that enables transaction processing without exposing the actual credit card number. This intermediary form allows productivity improvement while maintaining security by preventing direct access to the sensitive original data.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If encryption keys are maintained and securely stored, then data security is improved, but device complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The invention extracts the security requirement from the transaction processing flow by maintaining encryption keys in a separate, secure location (key safe). This separation removes the complexity of key management from the main processing system, allowing transactions to proceed using only the encrypted data without requiring complex key handling in the transaction path.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11935039B2Encryption and tokenization architectures
Publication Date: 2024.03.19 UNITED PARCEL SERVICE OF AMERICAN INC
  • US11935039B2 patent drawing
  • US11935039B2 patent drawing
  • US11935039B2 patent drawing

AI summary

Various embodiments of the present invention are directed to methods, systems and computer program products for conducting an online transaction on a website involving sensitive information. Such embodiments provide methods, systems and computer program products to: (a) register at least one entity with a gate keeper module, the registering comprising associating the entity with a subscription level; (b) associate a sub-string of a character string with a unique token so that a direct link does not exist between the unique token and the character string; and (c) during processing of the online transaction: (i) using the unique token for intermediate steps during the processing of the online transaction; and (ii) only accessing the character string in storage memory to complete the online transaction after receiving a request from at least one registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.