Mapping between tokenization domains
View Patent ↗A tokenization environment includes a first tokenization system in a first token domain and a second tokenization system in a second token domain. A token mapper accesses a first token from the first tokenization system and maps it to a second token from the second tokenization system. The first token can be a single-use or SLT token mapped to a clear text value within a single-use token table in the first tokenization system. The token mapper can identify the clear text value, and can query a multi-use token table in the second tokenization system with the clear text value to identify a multi-use token (the second token) mapped to the same clear text value. The token mapper can store the association between the first token and the second token in a token map.
1. A computer-implemented method for retokenizing data, comprising:
accessing, by an input module of a tokenization system, tokenized data comprising data tokenized using a single-use token value such that a portion of the tokenized data comprises the single-use token value;
accessing, by a token mapping module of the tokenization system, a tokenization domain table mapping each of a plurality of single-use token values to an associated multi-use token value, wherein for each single-use token value mapped to a multi-use token value, a single-use token table maps the single-use token value to a clear text value, and a multi-use token table maps the multi-use token value to the same clear text value;
querying, by a tokenization engine of the tokenization system, the accessed tokenization domain table using the single-use token value to identify a multi-use token value mapped to the single-use token value;
retokenizing, by the tokenization engine of the tokenization system, the tokenized data by replacing the portion of the tokenized data comprising the single-use token value with the multi-use token value; and
outputting, by an output module of the tokenization system, the retokenized data to a target entity.
2. The method of claim 1 , wherein the tokenized data comprises the data tokenized by generating a single-use token value, and by replacing a portion of the data with the single-use token value to create the tokenized data.
3. The method of claim 2 , further comprising storing the single-use token value in the single-use token table such that the single-use token table maps the single-use token value to a value of the portion of the data value.
4. The method of claim 3 , wherein the tokenization system is further configured to delete the single-use token value from the single-use token table after a pre-determined amount of time.
5. The method of claim 1 , further comprising:
accessing, by the tokenization system, second tokenized data comprising second data tokenized using a second single-use token value such that a portion of the second tokenized data comprises the second single-use token value;
querying, by the tokenized system, the accessed tokenization domain table using the second single-use token value to identifying a second multi-use token value mapped to the second single-use token value;
retokenizing, by the tokenization system, the second tokenized data by replacing the portion of the second tokenized data with the second multi-use token value; and
outputting the retokenized second data to a second target entity.
6. The method of claim 5 , wherein the second single-use token value is different than the single-use token value.
7. The method of claim 5 , wherein the second target entity is the same as the target entity.
8. A tokenization system for retokenizing tokenized data, comprising:
a non-transitory computer-readable storage medium storing executable instructions that, when executed by a processor, perform steps comprising:
accessing, by an input module of the tokenization system, tokenized data comprising data tokenized using a single-use token value such that a portion of the tokenized data comprises the single-use token value;
accessing, by a token mapping module of the tokenization system, a tokenization domain table mapping each of a plurality of single-use token values to an associated multi-use token value, wherein for each single-use token value mapped to a multi-use token value, a single-use token table maps the single-use token value to a clear text value, and a multi-use token table maps the multi-use token value to the same clear text value;
querying, by a tokenization engine of the tokenization system, the accessed tokenization domain table using the single-use token value to identify a multi-use token value mapped to the single-use token value;
retokenizing, by the tokenization engine of the tokenization system, the tokenized data by replacing the portion of the tokenized data comprising the single-use token value with the multi-use token value; and
outputting, by an output module of the tokenization system, the retokenized data to a target entity; and
a hardware processor configured to execute the instructions.
9. The tokenization system of claim 8 , wherein the tokenized data comprises the data tokenized by generating a single-use token value, and by replacing a portion of the data with the single-use token value to create the tokenized data.
10. The tokenization system of claim 9 , wherein the single-use token value is stored in the single-use token table such that the single-use token table maps the single-use token value to a value of the portion of the data value.
11. The tokenization system of claim 10 , wherein the single-use token value is deleted from the single-use token table after a pre-determined amount of time.
12. The tokenization system of claim 8 , wherein the instructions, when executed by the processor, perform further steps comprising:
accessing second tokenized data comprising second data tokenized using a second single-use token value such that a portion of the second tokenized data comprises the second single-use token value;
querying the accessed tokenization domain table using the second single-use token value to identifying a second multi-use token value mapped to the second single-use token value;
retokenizing the second tokenized data by replacing the portion of the second tokenized data with the second multi-use token value; and
outputting the retokenized second data to a second target entity.
13. The tokenization system of claim 12 , wherein the second single-use token value is different than the single-use token value.
14. The tokenization system of claim 12 , wherein the second target entity is the same as the target entity.
15. A non-transitory computer-readable storage medium storing executable instructions that, when executed by a processor, perform steps comprising:
accessing, by an input module of a tokenization system, tokenized data comprising data tokenized using a single-use token value such that a portion of the tokenized data comprises the single-use token value;
accessing, by a token mapping module of the tokenization system, a tokenization domain table mapping each of a plurality of single-use token values to an associated multi-use token value, wherein for each single-use token value mapped to a multi-use token value, a single-use token table maps the single-use token value to a clear text value, and a multi-use token table maps the multi-use token value to the same clear text value;
querying, by a tokenization engine of the tokenization system, the accessed tokenization domain table using the single-use token value to identify a multi-use token value mapped to the single-use token value;
retokenizing, by the tokenization engine of the tokenization system, the tokenized data by replacing the portion of the tokenized data comprising the single-use token value with the multi-use token value; and
outputting, by an output module of the tokenization system, the retokenized data to a target entity.
16. The non-transitory computer-readable storage medium of claim 15 , wherein the tokenized data comprises the data tokenized by generating a single-use token value, and by replacing a portion of the data with the single-use token value to create the tokenized data.
17. The non-transitory computer-readable storage medium of claim 16 , wherein the single-use token value is stored in the single-use token table such that the single-use token table maps the single-use token value to a value of the portion of the data value.
18. The non-transitory computer-readable storage medium of claim 17 , wherein the single-use token value is deleted from the single-use token table after a pre-determined amount of time.
19. The non-transitory computer-readable storage medium of claim 15 , wherein the instructions, when executed by the processor, perform further steps comprising:
accessing second tokenized data comprising second data tokenized using a second single-use token value such that a portion of the second tokenized data comprises the second single-use token value;
querying the accessed tokenization domain table using the second single-use token value to identifying a second multi-use token value mapped to the second single-use token value;
retokenizing the second tokenized data by replacing the portion of the second tokenized data with the second multi-use token value; and
outputting the retokenized second data to a second target entity.
20. The non-transitory computer-readable storage medium of claim 19 , wherein the second single-use token value is different than the single-use token value.