Encryption and tokenization architectures
Various embodiments of the present invention are directed to methods, systems and computer program products for conducting an online transaction on a website involving sensitive information. Such embodiments provide methods, systems and computer program products to: (a) register at least one entity with a gate keeper module, the registering comprising associating the entity with a subscription level; (b) associate a sub-string of a character string with a unique token so that a direct link does not exist between the unique token and the character string; and (c) during processing of the online transaction: (i) using the unique token for intermediate steps during the processing of the online transaction; and (ii) only accessing the character string in storage memory to complete the online transaction after receiving a request from at least one registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.
1. A method for selecting a graphical representation of a credit card to use a unique token associated with the graphical representation of the credit card on a website to control access to sensitive information of the credit card, the method comprising:
registering, by a server entity, an entity with a gate keeper module;
generating, by the server entity, graphical representations of a plurality of credit cards associated with the entity for display via an interface of a user device, wherein (a) each graphical representation is configured to convey an indication of a corresponding credit card without revealing sensitive information of the corresponding credit card and (b) the sensitive information of each corresponding credit card is stored as encrypted data in one or more memory storage devices;
for each generated graphical representation:
associating, by the server entity, the graphical representation with a unique token, and
storing, by the server entity, the graphical representation with the unique token;
providing, by the server entity for display via the interface of the user device, the graphical representations of the plurality of credit cards associated with the entity;
receiving, by the server entity, a selection of one of the plurality graphical representations; and
responsive to receiving the selection of one of the plurality of graphical representations, transmitting, by the server entity, the unique token associated with the selected graphical representation to facilitate completion of a an online transaction on a website without thereafter displaying the sensitive information of the corresponding credit card.
2. The method of claim 1 , wherein the graphical representation of a credit card comprises a sub-string of a character string associated with the credit card.
3. The method of claim 2 , wherein the character string comprises a credit card number.
4. The method of claim 2 , wherein the sub-string comprises a last four digits of the character string.
5. The method of claim 1 , further comprising:
receiving a request to view the plurality of credit cards,
wherein the step of displaying the graphical representations of the plurality of credit cards is performed in response to receiving the request to view the plurality of credit cards.
6. The method of claim 1 , wherein the sensitive information of the credit card comprises a character string associated with the credit card.
7. A data processing system for selecting a graphical representation of a credit card to use a unique token associated with the graphical representation of the credit card on a website to control access to sensitive information of the credit card, the data processing system comprising a processor and one or more storage devices embodying computer-readable program instructions that, when executed by the processor, cause the data processing system to:
register an entity with a gate keeper module;
generate graphical representations of a plurality of credit cards associated with the entity for display via an interface of a user device, wherein (a) each graphical representation is configured to convey an indication of a corresponding credit card without revealing sensitive information of the corresponding credit card and (b) the sensitive information of each corresponding credit card is stored as encrypted data in one or more memory storage devices;
for each generated graphical representation:
associate the graphical representation with a unique token, and
store the graphical representation with the unique token;
provide, for display via the interface of the user device, the graphical representations of the plurality of credit cards associated with the entity;
receive a selection of one of the plurality graphical representations; and
responsive to receiving the selection of one of the plurality of graphical representations, transmit the unique token associated with the selected graphical representation to facilitate completion of a an online transaction on a website without thereafter displaying the sensitive information of the corresponding credit card.
8. The data processing system of claim 7 , wherein the graphical representation of a credit card comprises a sub-string of a character string associated with the credit card.
9. The data processing system of claim 8 , wherein the character string comprises a credit card number.
10. The data processing system of claim 8 , wherein the sub-string comprises a last four digits of the character string.
11. The data processing system of claim 7 , wherein the computer-readable program instructions, when executed by the processor, further cause the data processing system to:
receive a request to view the plurality of credit cards,
wherein the computer-readable program instructions, when executed by the processor, cause the data processing system to display the graphical representations of the plurality of credit cards in response to receiving the request to view the plurality of credit cards.
12. The data processing system of claim 7 , wherein the sensitive information of the credit card comprises a character string associated with the credit card.
13. A computer program product for conducting an online transaction on a website involving sensitive information, the computer program product comprising a computer-readable storage embodying computer-readable program instructions that, when executed, cause a processor to:
register an entity with a gate keeper module;
generate graphical representations of a plurality of credit cards associated with the entity for display via an interface of a user device, wherein (a) each graphical representation is configured to convey an indication of a corresponding credit card without revealing sensitive information of the corresponding credit card and (b) the sensitive information of each corresponding credit card is stored as encrypted data in one or more memory storage devices;
for each generated graphical representation:
associate the graphical representation with a unique token, and
store the graphical representation with the unique token;
provide, for display via the interface of the user device, the graphical representations of the plurality of credit cards associated with the entity;
receive a selection of one of the plurality graphical representations; and
responsive to receiving the selection of one of the plurality of graphical representations, transmit the unique token associated with the selected graphical representation to facilitate completion of a an online transaction on a website without thereafter displaying the sensitive information of the corresponding credit card.
14. The computer program product of claim 13 , wherein the graphical representation of a credit card comprises a sub-string of a character string associated with the credit card.
15. The computer program product of claim 14 , wherein the character string comprises a credit card number.
16. The computer program product of claim 14 , wherein the sub-string comprises a last four digits of the character string.
17. The computer program product of claim 13 , wherein the computer-readable program instructions, when executed, further cause the processor to:
receive a request to view the plurality of credit cards,
wherein the computer-readable program instructions, when executed, cause the processor to display the graphical representations of the plurality of credit cards in response to receiving the request to view the plurality of credit cards.
18. The computer program product of claim 13 , wherein the sensitive information of the credit card comprises a character string associated with the credit card.