Systems and methods for maintaining data security across multiple active domains
View Patent ↗Systems and methods for maintaining data security across multiple active domains are presented. Each domain includes a token generator that can generate tokens associated with sensitive data such as credit card numbers. The primary domain includes a centralized key manager. In one embodiment, each domain includes its own local data vault and a replica of each data vault associated with every remote domain. Any domain can access the data vaults (local and replica) and retrieve a token created by any other domain. The possibility of token collision is eliminated by a token generation algorithm that embeds a domain designator corresponding to the active domain where the token was created. When multiple tokens represent the same sensitive data, the token manager returns a set of all such tokens found in the data vaults.
1. A method of eliminating token collision in a multiple domain environment, said method comprising the computer-implemented steps of:
establishing a first data vault located at a first domain;
establishing a plurality of second data vaults, each located at one of a plurality of second domains;
receiving at said first domain a sensitive data string for tokenization;
generating a new token according to a token generation algorithm wherein said new token is independent of at least a portion of the data in said sensitive data string, and wherein said token generation algorithm is configured to embed within said new token a domain designator corresponding to said first domain;
storing said token in said first data vault;
creating a replica of said first data vault at each of said plurality of second domains; and
creating a replica of each of a said plurality of second data vaults at said first domain.
2. The method of claim 1 , wherein said data in said sensitive data string comprises leading digits, middle digits, and trailing digits, wherein said token comprises a head, a body, and a tail, and wherein said step of generating a new token further comprises the step of:
executing a token generation algorithm that is configured to preserve a subset of said leading digits in said head, to preserve a subset of said trailing digits in said tail, to generate in said body a set of surrogate digits independent of said middle digits, and to embed said domain designator within said body of said token.
3. The method of claim 1 , wherein said domain designator comprises a single digit selected from the ten numerals, zero through nine.
4. The method of claim 1 , wherein said domain designator comprises a single alphabetic character selected from the fifty-two upper-case and lower-case letters of the English alphabet.
5. A method of protecting sensitive data in a multiple domain environment, said method comprising the computer-implemented steps of:
establishing a first data vault located at a first domain, and a replica of said first data vault at each of a plurality of second domains;
establishing a plurality of second data vaults, each located at one of said plurality of second domains, and establishing a replica of each said plurality of second data vaults at said first domain;
receiving at said first domain a sensitive data string for tokenization from a client process;
searching said first data vault to determine if a first token corresponding to said sensitive data string exists therein and, if found, returning said first token to said client process and, if not found:
searching each said replica of each of said plurality of second data vaults to determine if a second token corresponding to said sensitive data string exists therein and, if found, returning said second token to said client process and, if not found:
generating a new token according to a token generation algorithm wherein said new token is independent of at least a portion of the data in said sensitive data string, and wherein said token generation algorithm is configured to embed within said new token a domain designator corresponding to said first domain;
storing said new token in said first data vault;
returning said new token to said client process; and
updating said replica of said first data vault at each of said plurality of second domains.
6. The method of claim 5 , wherein said data in said sensitive data string comprises leading digits, middle digits, and trailing digits, wherein said token comprises a head, a body, and a tail, and wherein said step of generating a new token further comprises the step of:
executing a token generation algorithm that is configured to preserve a subset of said leading digits in said head, to preserve a subset of said trailing digits in said tail, to generate in said body a set of surrogate digits independent of said middle digits, and to embed said domain designator within said body of said token.
7. The method of claim 5 , wherein said domain designator comprises a single digit selected from the ten numerals, zero through nine.
8. The method of claim 5 , wherein said domain designator comprises a single alphabetic character selected from the fifty-two upper-case and lower-case letters of the English alphabet.
9. A method of identifying multiple tokens associated with the same sensitive data string in a multiple domain environment, said method comprising the computer-implemented steps of:
establishing a primary data vault located at a primary domain, and a replica of said primary data vault at each of a plurality of secondary domains;
establishing a plurality of secondary data vaults, each located at one of said plurality of secondary domains, and establishing a replica of each said plurality of secondary data vaults at said primary domain;
receiving at said primary domain a sensitive data string for tokenization;
generating a token according to a token generation algorithm wherein said token is independent of at least a portion of the data in said sensitive data string, and wherein said token generation algorithm is configured to embed within said token a domain designator corresponding to said primary domain;
receiving at said primary domain a token lookup request from a client process;
searching said primary data vault, which optionally contains a primary token including a primary domain designator wherein said primary token is associated with said sensitive data string;
searching said replica of each said plurality of secondary data vaults, which optionally contains a secondary token including a secondary domain designator wherein said secondary token is associated with said sensitive data string; and
returning to said client process a set of tokens including said primary token and said secondary token.
10. The method of claim 9 , wherein said client process selects for its use a token from said set of tokens.