Systems and methods for tokenization to support pseudononymization of sensitive data

1. A polyalphabetic ciphering method for tokenizing data, comprising:

receiving an input set;

seeding a random number generator with one or more secret or non-secret data sets;

transposing the input set using a first random number generated by the random number generator to create a transposed input set;

extending a token set to create an extended token set, wherein when a digit of the transposed input set equals one, a token value position is determined by adding a value of a character of the transposed input set with an input size of the input;

locating the token value by counting through the extended transposed token set using the token value position;

substituting a position of the transposed input set with the located token value;

transposing the extended token set using a second random number generated by the random number generator to create a transposed token set;

generating a token by substituting transposed input set values with transposed token set values;

hashing the transposed input set values to create a validation value, the validation value represented as a binary value set;

encoding the validation value into the token; and

pseudonymizing an object in a document by replacing the input set included in the document with the token.

2. The method according to claim 1 , further comprising repeating part or all of the method of claim 1 a plurality of times creating additional transposed input sets and transposed token sets.

3. The method according to claim 1 , wherein substituting further comprises:

wherein when a digit of the input set equals zero, the token value position is equal to the value of the character of the transposed input set;

locating the token value by counting through the extended transposed token set using the token value position; and

substituting a position of the transposed input set with the located token value.

4. The method according to claim 3 , wherein the extended token set has a number of token values that is at least twice a number of input characters in the input set.

5. The method according to claim 4 , further comprising validating the token by recovering the validation value using the token and the transposed token set.

6. The method according to claim 1 , wherein the one or more secret data comprises an identifier for an entity, the one or more secret data being indicative of the entity.

7. The method according to claim 6 , wherein the one or more secret data comprises any of at least a portion of a social security number and at least a portion of a credit card number.

8. The method according to claim 1 , further comprising encoding the input set prior to transposing.

9. The method according to claim 1 , wherein the first and second random numbers and other subsequently generated random numbers are deterministically generated.

10. The method according to claim 1 , further comprising:

receiving a detokenization request that comprises the token and the one or more secret or non-secret data sets;

calculating the first random number using the one or more secret or non-secret data sets;

regenerating the transposed token set;

recovering the transposed input set using the transposed token set and the one or more secret or non-secret data sets and the first random number; and

recovering the input using the transposed input set.

11. A polyalphabetic ciphering method for tokenizing data, comprising:

generating a hash of an input set;

seeding a random number generator with any of the hash and secret or non-secret data, wherein seeding the random number generator with one or more secret data or non-secret data and a hash of the transposed input set generates the first random number that is used to transpose the input set;

transposing the input set using a random number generated by the random number generator;

extending a token set to generate an extended token set;

transposing the extended token set using another random number to create an extended, transposed token set;

generating a token by substituting transposed input set values with transposed token set values;

repeating the prior steps a plurality of rounds to generate a final token, wherein in each round the input set is replaced with a newly generated token from a prior round;

wherein during generation of the final token, encoding a validation value into the final token that is used to validate the token during a detokenizing process;

receiving a document that includes the input set in at least one field of the document;

replacing the input set in the at least one field with the final token to pseudonymize the document;

receiving a detokenization request;

calculating the random number using the one or more secret or non-secret data sets;

regenerating the transposed token set;

recovering the transposed input set using the transposed token set and the one or more secret or non-secret data sets and the random number; and

recovering the input set using the transposed input set.

12. The method according to claim 11 , further comprising encoding the final token as a readable object.