System for improving data security when redeeming data

1. A system for retrieving personally identifiable information, the system comprising:

a token handler configured to:

receive, from a data originator, a token representing personally identifiable information; and

in response to receiving the token from the data originator, insert into a first queue a request to redeem personally identifiable information of a user corresponding to the personally identifiable information; and

a device of the user separate from the token handler, the device configured to:

store the personally identifiable information encrypted using a public encryption key of the token handler;

establish a connection with the token handler, the token handler further configured to update a status of the request to redeem in a second queue in response to determining that the device has established the connection;

in response to the updated status in the second queue and after establishing the connection, present a notification message to the user seeking consent to redeem the personally identifiable information;

in response to receiving the consent from the user:

encrypt, using a public encryption key of the data originator, the personally identifiable information encrypted using the public encryption key of the token handler to produce the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator; and

communicate the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator to the token handler.

2. The system of claim 1 , wherein:

the data originator is configured to:

retrieve, from the token handler, the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator;

decrypt, using a private encryption key of the data originator, the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator, to produce the personally identifiable information encrypted using the public encryption key of the token handler; and

communicate, to the token handler, the personally identifiable information encrypted using the public encryption key of the token handler; and

the token handler further configured to:

decrypt, using a private encryption key of the token handler, the personally identifiable information encrypted using the public encryption key of the token handler to produce the personally identifiable information; and

provide the personally identifiable information to the data originator.

3. The system of claim 2 , wherein the token handler is further configured to provide the personally identifiable information to the data originator through a phone call.

4. The system of claim 1 , wherein the token handler is configured to further update the status of the request in the second queue in response to receiving the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator, the data originator retrieves the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator from a cache of the token handler in response to the further updated status.

5. The system of claim 1 , wherein:

the device of the user is further configured to generate a salted passphrase of the user by:

receiving a passphrase from the user; and

hashing the passphrase with a phone number and an email address of the user to produce the salted passphrase; and

the token handler is further configured to generate the public encryption key for the token handler using a public encryption key for the device.

6. The system of claim 1 , wherein the token handler is further configured to, in response to receiving the token, wait for the device to establish the connection with the token handler.

7. The system of claim 1 , wherein the token handler is further configured to:

receive, from the data originator, a request for a portion of the personally identifiable information;

in response to receiving the request for the portion of the personally identifiable information, retrieve, from a repository in a cloud, the portion of the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator;

decrypt, using the private encryption of the token handler, the portion of the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator to produce the portion of the personally identifiable information encrypted using the public encryption key of the data originator.

8. The system of claim 1 , wherein the device is further configured to communicate the token to the token handler.

9. The system of claim 1 , wherein the token handler is further configured to:

retrieve, based on the token, the public encryption key for the data originator; and

communicate the public encryption key for the data originator to the device.

10. The system of claim 1 , wherein the data originator is further configured to retrieve the token from a database of the data originator.

11. A method for retrieving personally identifiable information, the method comprising:

receiving, by a token handler, from a data originator, a token representing personally identifiable information;

in response to receiving the token from the data originator, inserting, by the token handler, into a first queue a request to redeem personally identifiable information of a user corresponding to the personally identifiable information;

storing, by a device separate from the token handler, the personally identifiable information encrypted using a public encryption key of the token handler;

establishing, by the device, a connection with the token handler, the token handler further configured to update a status of the request to redeem in a second queue in response to determining that the device has established the connection;

in response to the updated status in the second queue and after establishing the connection, presenting, by the device, a notification message to the user seeking consent to redeem the personally identifiable information;

in response to receiving the consent from the user:

encrypting, by the device, using a public encryption key of the data originator, the personally identifiable information encrypted using the public encryption key of the token handler to produce the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator; and

communicating, by the device, the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator to the token handler.

12. The method of claim 11 , further comprising:

retrieving, by the data originator, from the token handler, the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator;

decrypting, by the data originator, using a private encryption key of the data originator, the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator, to produce the personally identifiable information encrypted using the public encryption key of the token handler;

communicating, by the data originator, to the token handler, the personally identifiable information encrypted using the public encryption key of the token handler;

decrypting, by the token handler, using a private encryption key of the token handler, the personally identifiable information encrypted using the public encryption key of the token handler to produce the personally identifiable information; and

providing, by the token handler the personally identifiable information to the data originator.

13. The method of claim 12 , further comprising providing, by the token handler, the personally identifiable information to the data originator through a phone call.

14. The method of claim 11 , further comprising:

further updating, by the token handler, the status of the request in the second queue in response to receiving the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator; and

retrieving, by the data originator, the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator from a cache of the token handler in response to the further updated status.

15. The method of claim 11 , further comprising:

generating, by the device of the user, a salted passphrase of the user by:

receiving a passphrase from the user; and

hashing the passphrase with a phone number and an email address of the user to produce the salted passphrase; and

generating, by the token handler, the public encryption key for the token handler using a public encryption key for the device.

16. The method of claim 11 , further comprising waiting, by the token handler, in response to receiving the token, for the device to establish the connection with the token handler.

17. The method of claim 11 , further comprising:

receiving, by the token handler, from the data originator, a request for a portion of the personally identifiable information;

in response to receiving the request for the portion of the personally identifiable information, retrieving, by the token handler, from a repository in a cloud, the portion of the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator;

decrypting, by the token handler, using the private encryption of the token handler, the portion of the personally identifiable information encrypted using the public encryption key of the token handler and the public encryption key of the data originator to produce the portion of the personally identifiable information encrypted using the public encryption key of the data originator.

18. The method of claim 11 , further comprising communicating, by the device, the token to the token handler.

19. The method of claim 11 , further comprising:

retrieving, by the token handler, based on the token, the public encryption key for the data originator; and

communicating, by the token handler, the public encryption key for the data originator to the device.

20. The method of claim 11 , further comprising retrieving, by the data originator, the token from a database of the data originator.