Vaultless Tokenization for Secure Sensitive Data Pseudonymization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing tokenization methods require maintaining a vault or repository of tokens and mappings, which increases compliance burdens and security risks, particularly in handling sensitive data like credit card information.
Innovation Solution
A stateless and vaultless tokenization method using polyalphabetic ciphering, involving iterative transposition and substitution of input data with a shuffled token set, optionally with checksum encoding, to generate tokens without storing token-data pairs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a vault or repository of tokens and mappings is maintained, then tokenization can be performed, but compliance burdens and security risks increase
Solution Approach 1:
The patent extracts the mapping functionality from a centralized vault/repository and embeds it directly into the tokenization system. Each token contains embedded mapping information that allows deterministic generation of the same token for the same input data without requiring external storage, thereby eliminating the vault while maintaining tokenization functionality
Solution Approach 2:
The patent creates self-contained token copies that include all necessary mapping information within the token structure itself. Instead of storing mappings externally in a vault, the system copies the essential mapping relationships into each token, enabling autonomous token generation without external repository dependencies
2Loss of information
If token-data pairs are stored in a central repository, then token mapping is enabled, but security risks and compliance requirements increase
Solution Approach 1:
The patent segments the token mapping capability from centralized storage and distributes it across individual token structures. Each token is self-contained with embedded mapping information, eliminating the need for a central repository and reducing security risks associated with集中ized data storage
Solution Approach 2:
The patent enables tokens to be self-sufficient by embedding all necessary mapping information within each token structure. Tokens can independently generate deterministic outputs without requiring external assistance from a central vault,实现ing self-service functionality that eliminates security vulnerabilities associated with centralized storage
Data Source
AI summary
Systems and methods for tokenization to support pseudonymization are provided herein. An example method includes receiving an input set, seeding a random number generator with one or more secret data, transposing the input set using a first random number/transposition parameter generated by the random number generator to create a transposed input set, transposing a token set using a second random number/transposition parameter generated by the random number generator to create a transposed token set, and generating a token by substituting transposed input set values with transposed token set values.