Vaultless Tokenization with Iterative Transposition for Sensitive Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing tokenization methods require maintaining a vault or repository of tokens and mappings, which increases compliance burdens and data privacy risks, particularly for sensitive data like credit card information.

Innovation Solution

A stateless and vaultless tokenization method using polyalphabetic ciphering, involving iterative transposition and substitution of input data with a shuffled token set, optionally with checksum encoding, to generate tokens without storing pairs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional tokenization methods are used with vault storage, then token mapping and recovery are enabled, but compliance burdens and data privacy risks increase

Engineering Contradiction:

Improvetoken recovery capabilityVSAvoidcompliance burden and data privacy risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the mapping capability from centralized vault storage and embeds it directly into the token structure itself. Each token contains embedded mapping information that enables recovery without requiring external storage, thereby eliminating the compliance and security risks associated with centralized token vaults while maintaining token recovery functionality

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a hash-based intermediary mechanism that enables token recovery without storing plain-text mappings. The hash function acts as a mediator that allows verification and recovery of token mappings through cryptographic operations, eliminating the need for secure vault storage while maintaining reliability

Inventive Principle:

Principle #24Intermediary (Mediator)

2Loss of information

If token vaults are maintained for sensitive data, then data mapping is preserved, but security risks and compliance requirements increase

Engineering Contradiction:

Improvedata mapping preservationVSAvoidsecurity risk

Core Design Contradiction:

Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the mapping information from centralized vault storage and embeds it directly within the token structure. This eliminates the security risks associated with centralized storage of sensitive data mappings while preserving the ability to recover and verify token mappings through embedded cryptographic references

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent employs disposable, single-use token mappings that are embedded within individual tokens rather than stored centrally. Each token contains its own mapping information that can be used once for recovery and then discarded, eliminating the need for long-term secure storage of sensitive mapping data

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS12406092B2Systems and methods for tokenization to support pseudonymization of sensitive data

Publication Date: 2025.09.02 IXOPAY INC

AI summary

Systems and methods for tokenization to support pseudonymization are provided herein. An example method includes receiving an input set, seeding a random number generator with one or more secret data, transposing the input set using a first random number/transposition parameter generated by the random number generator to create a transposed input set, transposing a token set using a second random number/transposition parameter generated by the random number generator to create a transposed token set, and generating a token by substituting transposed input set values with transposed token set values.