Granted Patent B2

US 8,943,574 · App. 13/117,599 · Granted Jan 27, 2015

Abstract

Claims (59)

1. A method for tokenization of sensitive data, comprising:

receiving, by a computing device, sensitive data from a vendor;

determining, by the computing device, a token key for the vendor, wherein the token key is unique to the vendor;

linking, by the computing device, the token and the token identifier to provide token generation data, token version data, token key data, and a sanity value;

utilizing, by the computing device, a proprietary algorithm, selected based on the token key, to generate a vendor-specific token that is associated with the sensitive data;

creating, by the computing device, a token identifier that comprises data related to the token key;

sending, by the computing device, the vendor-specific token and the token identifier to the vendor;

receiving, by the computing device, a request to cancel a transaction with the vendor, wherein the request comprises the vendor-specific token and the token identifier;

determining, by the computing device, from the token identifier, the token key;

utilizing, by the computing device, the token key to generate the sensitive data; and

utilizing, by the computing device, the sensitive data to cancel the transaction, wherein the data related to the token key includes an identification of a token key version and wherein the token key includes the sanity value for determining accuracy of the vendor-specific token.

2. The method of claim 1 , further comprising decrypting the sensitive data from the vendor.

3. The method of claim 1 , wherein the sensitive data includes at least one of the following: a credit card number, a debit card number, a prepaid card number, a bank account number, a social security number, a telephone number, and an address.

4. The method of claim 1 , further comprising:

receiving a request to change the vendor-specific token, wherein the request is accompanied by the vendor-specific token and the token identifier;

identifying from the token identifier, the token key for the vendor-specific token;

utilizing the token key to generate an updated token; and

updating the token identifier to reflect the updated token.

5. The method of claim 1 , further comprising generating a rollup identifier associated with the vendor-specific token, wherein the rollup identifier provides a pointer to a common token key for a plurality of entities.

6. A system for tokenization of sensitive data, comprising:

a computing device; and

a memory component that is coupled to the computing device and stores logic that when executed by the system, causes the system to perform at least the following:

receive sensitive data from a vendor;

determine a token key for the vendor, the token key identifying a proprietary algorithm for generating a token;

utilize the proprietary algorithm, selected based on the token key, to generate a vendor-specific token that is associated with the sensitive data;

create a token identifier that comprises data related to the token key, the token identifier further providing token version data and a sanity value, wherein the sanity value is utilized for determining accuracy of the vendor-specific token;

send the vendor-specific token and the token identifier to the vendor;

receive a request to cancel a transaction with the vendor, wherein the request comprises the vendor-specific token and the token identifier;

determine from the token identifier, the token key;

utilize the token key to generate the sensitive data; and

utilize the sensitive data to cancel the transaction.

7. The system of claim 6 , wherein the logic further causes the system to decrypt the sensitive data from the vendor.

8. The system of claim 6 , wherein the sensitive data includes at least one of the following: a credit card number, a debit card number, a prepaid card number, a social security number, a bank account number, a telephone number, and an address.

9. The system of claim 6 , wherein the logic further causes the system to perform at least the following:

receive a request to change the vendor-specific token, wherein the request is accompanied by the vendor-specific token and the token identifier;

identify from the token identifier, the token key for the vendor-specific token;

utilize the token key to generate an updated token; and

update the token identifier to reflect the updated token.

10. The system of claim 6 , wherein the logic further causes the system to generate a rollup identifier associated with the vendor-specific token, wherein the rollup identifier provides a pointer to a common token key for a plurality of entities.

11. A non-transitory computer-readable medium for tokenization of sensitive data that stores a program that when executed by a computing device, causes the computing device to perform at least the following:

receive sensitive data from a vendor;

determine whether the sensitive data has previously been tokenized;

in response to determining that the sensitive data has previously been tokenized, retrieve a stored token and a stored token identifier from a data storage component and send the stored token and the stored token identifier to the vendor;

in response to determining that the sensitive data has not previously been tokenized:

determine a token key for the vendor;

utilize a proprietary algorithm, based on the token key to generate a generated token that is associated with the sensitive data;

create a token identifier that comprises data related to the token key, wherein the token identifier additionally comprises token generation data, token version data, and a sanity value, wherein the sanity value is utilized for determining accuracy of the vendor-specific token, and wherein the data related to the token key includes an identification of a token key version;

send the generated token and the token identifier to the vendor;

receive a request to cancel a transaction with the vendor, wherein the request comprises the generated token and the token identifier;

determine from the token identifier, the token key;

utilize the token key to generate the sensitive data; and

utilize the sensitive data to cancel the transaction.

12. The non-transitory computer-readable medium of claim 11 , wherein the program further causes the computing device to decrypt the sensitive data from the vendor.

13. The non-transitory computer-readable medium of claim 11 , wherein the sensitive data includes at least one of the following: a credit card number, a debit card number, a prepaid card number, a bank account number, a social security number, a telephone number, and an address.

14. The non-transitory computer-readable medium of claim 11 , wherein the program further causes the computing device to perform at least the following:

receive a request to change the generated token, wherein the request is accompanied by the generated token and the token identifier;

identify from the token identifier, the token key for the generated token;

utilize the token key to generate an updated token; and

update the token identifier to reflect the updated token.

Assignments (10)