System and method for securing identity identifiers for data engineering processing
Aspects of the subject disclosure may include, for example, a processing system including a processor with a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving an identity bridge file comprising records from a service provider, wherein each record includes one or more encrypted service identifiers for a customer, a customer location code of the customer, and an address location code of the customer; determining whether a tokenized identifier exists in a cross-reference table; responsive to a determination that the tokenized identifier does not exist in the cross-reference table: a) generating a new tokenized identifier; and b) adding a record to the cross-reference table comprising the new tokenized identifier, the customer location code, the address location code, and the one or more encrypted service identifiers; securing a usage record of a data usage log, wherein the usage record includes a unique usage identifier, wherein the securing comprises replacing the unique usage identifier with a matching tokenized identifier from the cross-reference table, resulting in secured usage records; and providing the secured usage records to data engineering. Other embodiments are disclosed.
1. A device, comprising:
a processing system including a processor; and
a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:
receiving an identity bridge file comprising records from a service provider, wherein each record includes one or more encrypted service identifiers for a customer, a customer location code of a household of the customer, and an address location code of an address of the customer, wherein either code does not yield underlying respective information, and wherein a service identifier of the one or more encrypted service identifiers comprises an international mobile equipment identity (IMEI), a customer telephone number (CTN), a set top box identifier, a media access control address for a router, a billing account number, or an advertising identifier;
determining whether the one or more encrypted service identifiers, the customer location code, or the address location code of a record of the identity bridge file and a corresponding tokenized identifier exists in a cross-reference table;
responsive to a determination that the corresponding tokenized identifier does not exist in the cross-reference table:
a) generating a new tokenized identifier for the customer; and
b) adding a new record for the customer to the cross-reference table comprising the new tokenized identifier, the customer location code, the address location code, and the one or more encrypted service identifiers;
securing a usage record of a data usage log, wherein the usage record includes a unique usage identifier, wherein the securing comprises replacing the unique usage identifier found in the cross-reference table with a matching tokenized identifier, resulting in a secured usage record;
providing the secured usage record to a data engineering data processing center;
receiving reprocessed usage records from the data engineering data processing center;
replacing the matching tokenized identifier in each of the reprocessed usage records with a destination identifier; and
providing the reprocessed usage records to the service provider.
2. The device of claim 1 , wherein the customer location code comprises an encrypted identifier for the household of the customer.
3. The device of claim 1 , wherein the address location code comprises an encrypted identifier for an address of the customer.
4. The device of claim 1 , wherein the secured usage record comprises no service identifiers.
5. The device of claim 4 , wherein the unique usage identifier comprises an encrypted service identifier.
6. The device of claim 1 , wherein the new tokenized identifier is generated from a household identifier, a device identifier, or a person identifier.
7. The device of claim 1 , wherein the determining comprises searching for an encrypted billing number in each row of the cross-reference table.
8. The device of claim 7 , wherein the determining further comprises searching for the customer location code and the address location code in each row of the cross-reference table.
9. The device of claim 1 , wherein the processing system comprises a plurality of processors operating in a distributed processing environment.
10. A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
receiving an identity bridge file comprising records from a first service provider, wherein each record includes one or more encrypted service identifiers for a customer, a customer location code of the customer, and an address location code of the customer, wherein a service identifier of the one or more encrypted service identifiers comprises an international mobile equipment identity (IMEI), a customer telephone number (CTN), a set top box identifier, a media access control address for a router, a billing account number, or an advertising identifier;
determining whether the one or more encrypted service identifiers, the customer location code, or the address location code of a record of the identity bridge file and a corresponding tokenized identifier exists in a cross-reference table;
responsive to a determination that the corresponding tokenized identifier does not exist in the cross-reference table:
a) generating a new tokenized identifier; and
b) adding a new record for the customer to the cross-reference table comprising the new tokenized identifier, the customer location code, the address location code, and the one or more encrypted service identifiers;
securing usage records of a data usage log of the first service provider, wherein the usage records include a unique usage identifier, wherein the securing comprises replacing the unique usage identifier found in the cross-reference table with a matching tokenized identifier, resulting in a plurality of secured usage record tables;
providing the secured usage record tables to a data engineering data processing center;
receiving reprocessed usage records from the data engineering data processing center;
replacing the matching tokenized identifier in each of the reprocessed usage records with a destination identifier; and
providing the reprocessed usage records to the first service provider.
11. The non-transitory, machine-readable medium of claim 10 , wherein the operations further comprise: searching for the customer location code and the address location code in each row of the cross-reference table.
12. The non-transitory, machine-readable medium of claim 10 , wherein the operations further comprise:
joining one or more of the plurality of secured usage record tables to create a joined secured usage record table.
13. The non-transitory, machine-readable medium of claim 12 , wherein the operations further comprise:
replacing the matching tokenized identifier in each record of the joined secured usage record table with the destination identifier; and
providing the joined secured usage record table to a second service provider.
14. The non-transitory, machine-readable medium of claim 10 , wherein the corresponding tokenized identifier represents a household, a device, or a person.
15. The non-transitory, machine-readable medium of claim 10 , wherein the processing system comprises a plurality of processors operating in a distributed processing environment.
16. A method, comprising:
receiving, by a processing system including a processor, an identity bridge file comprising records from a service provider, wherein each record includes one or more encrypted service identifiers, wherein a service identifier of the one or more encrypted service identifiers comprises an international mobile equipment identity (IMEI), a customer telephone number (CTN), a set top box identifier, a media access control address for a router, a billing account number, or an advertising identifier;
generating, by the processing system, a new tokenized identifier for an unknown customer of a record in the identity bridge file, wherein corresponding one or more encrypted service identifiers for the unknown customer cannot be found in a cross-reference table;
adding, by the processing system, a new record to the cross-reference table comprising the new tokenized identifier and the one or more encrypted service identifiers;
securing, by the processing system, usage records of a data usage log of the service provider, wherein the usage records include a unique usage identifier, wherein the securing comprises replacing the unique usage identifier found in the cross-reference table with a matching tokenized identifier, resulting in a plurality of secured usage record tables.
17. The method of claim 16 , comprising:
joining, by the processing system, one or more of the plurality of secured usage record tables to create a joined secured usage record table.
18. The method of claim 16 , wherein the new tokenized identifier represents a household, a device, or a person.
19. The method of claim 16 , further comprising searching, by the processing system, for an encrypted billing number in each row of the cross-reference table.
20. The method of claim 19 , further comprising searching, by the processing system, for a customer location code and an address location code in each row of the cross-reference table.