Granted Patent B2

US 10,904,001 · App. 16/421,658 · Granted Jan 26, 2021

Inventors: Justin Stanley (Bixby, OK); Jacob Burcham (Brooklyn, NY); Ulf Mattsson (Westport, CT)

Assignee: TOKENEX, INC.

H04L9/3213H04L9/0618G06F3/0619

Abstract

Claims (49)

1. A method, comprising:

receiving a cleartext input;

encoding a first data set to produce encoded input data, wherein the first data set is a part of the cleartext input, wherein the first data set is encoded into the encoded input data using a first lookup table, the first lookup table being unique to an entity that provided the cleartext input;

generating a secure tweak for the encoded input data based on a token format schema by:

encoding a tweak input using a second lookup table to produce an encoded tweak input, wherein the tweak input comprises another part of the cleartext input; and

hashing the encoded tweak input along with a unique hashing key to generate the secure tweak, the secure tweak being created from one or more portions of the cleartext input that are not tokenized which are a value provided by the entity;

applying a format preserving encryption algorithm that utilizes the encoded input data, the secure tweak, and a unique encryption key to generate ciphertext output; and

encoding the ciphertext output into token.

2. The method according to claim 1 , wherein generating the token from the ciphertext output includes using a third lookup table to convert the ciphertext output into the token.

3. The method according to claim 2 , wherein generating the token from the ciphertext output further comprises assembling an assembled token as a concatenation of the one or more portions of the cleartext input that are not tokenized and the token, as specified in the token format schema.

4. The method according to claim 2 , wherein the third lookup table comprises alphabetic characters, whereas the first lookup table and the second lookup table comprise numeric characters.

5. The method according to claim 1 , further comprising:

decoding the ciphertext output from the token;

regenerating the encoded tweak input;

recovering the secure tweak by hashing the encoded tweak input along with the unique hashing key;

decrypting the encoded input data by applying the format preserving encryption algorithm that utilizes the ciphertext output, the secure tweak, and the unique encryption key;

decoding the first data set from the encoded input data; and

reassembling the cleartext input using the first data set.

6. A system, comprising:

a processor; and

memory for storing executable instructions, the processor being configured to execute the instructions to:

receive a cleartext input;

encode a first data set to produce encoded input data, wherein the first data set is a part of the cleartext input, wherein the first data set is encoded into the encoded input data using a first lookup table, the first lookup table being unique to an entity that provided the cleartext input;

generate a secure tweak for the encoded input data based on a token format schema by:

encode a tweak input using a second lookup table to produce an encoded tweak input, wherein the tweak input comprises another part of the cleartext input; and

hash the encoded tweak input along with a unique hashing key to generate the secure tweak, the secure tweak being created from one or more portions of the cleartext input that are not tokenized which are a value provided by the entity;

apply a format preserving encryption algorithm that utilizes the encoded input data, the secure tweak, and a unique encryption key to generate ciphertext output;

generate a token from the ciphertext output; and

discard the first data set or a cleartext input that comprises the first data set.

7. The system according to claim 6 , wherein the processor is further configured to

decode the ciphertext output from the token using the lookup table;

regenerate the encoded tweak input;

recover the secure tweak by hashing the encoded tweak input along with the unique hashing key;

decrypt the encoded input data by applying the format preserving encryption algorithm that utilizes the ciphertext output, the secure tweak, and the unique encryption key;

decode the first data set from the encoded input data; and

reassemble the cleartext input using the first data set.

8. A method, comprising:

encoding a first data set of a cleartext input to produce encoded input data, wherein the first data set is encoded into the encoded input data using a first lookup table, the first lookup table being unique to an entity that provided the cleartext input;

encoding a tweak input using a second lookup table to produce an encoded tweak input, wherein the tweak input comprises another part of the cleartext input;

hashing the encoded tweak input along with a unique hashing key to generate a secure tweak, the secure tweak being created from one or more portions of the cleartext input that are not tokenized which are a value provided by the entity;

applying a format preserving encryption algorithm that utilizes the encoded input data, the secure tweak, and a unique encryption key to generate ciphertext output;

generating a token from the ciphertext output;

receiving a request to obtain the cleartext input;

decoding the ciphertext output from the token;

regenerating the encoded tweak input;

recovering the secure tweak by hashing the encoded tweak input along with the unique hashing key;

decrypting the encoded input data by applying the format preserving encryption algorithm that utilizes the ciphertext output, the secure tweak, and the unique encryption key;

decoding the first data set from the encoded input data; and

reassembling the cleartext input using the first data set.

Assignments (8)

Continuity (1)