Systems and methods for tokenization to support pseudonymization of sensitive data
Systems and methods for tokenization to support pseudonymization are provided herein. An example method includes receiving an input set, seeding a random number generator with one or more secret data, transposing the input set using a first random number/transposition parameter generated by the random number generator to create a transposed input set, transposing a token set using a second random number/transposition parameter generated by the random number generator to create a transposed token set, and generating a token by substituting transposed input set values with transposed token set values.
1. A polyalphabetic ciphering method for tokenizing data, comprising:
transposing an input set using a first random number generated by a random number generator to create a transposed input set by seeding the random number generator with one or more secret data or non-secret data and a hash of the transposed input set generates the first random number that is used to transpose the input set;
transposing a token set using a second random number generated by the random number generator to create a transposed token set;
generating a token by substituting transposed input set values with transposed token set values; and
performing a transaction using sensitive information, where a portion of the sensitive information has been replaced with the token.
2. The method according to claim 1 , wherein the one or more secret data comprises an identifier for an entity, wherein sensitive information that is used to seed the random number generator is indicative of the entity.
3. The method according to claim 2 , wherein the sensitive information comprises any of at least a portion of a social security number and at least a portion of a credit card number.
4. The method according to claim 1 , wherein the first random number is generated using any of the one or more secret data and data associated with the input set.
5. The method according to claim 1 , further comprising pseudonymizing an object in a document by replacing the input set included in the document with the token.
6. The method according to claim 1 , further comprising encoding the input set prior to transposing.
7. The method according to claim 1 , wherein the first and second random numbers and other subsequently generated random numbers are deterministically generated.
8. The method according to claim 1 , further comprising:
receiving a detokenization request that comprises the token and the one or more secret or non-secret data sets;
calculating the first random number using the one or more secret or non-secret data sets;
regenerating the transposed token set;
recovering the transposed input set using the transposed token set and the one or more secret or non-secret data sets and the first random number; and
recovering the input using the transposed input set.
9. A system comprising:
a processor; and
a memory for storing instructions, the processor executing the instructions to:
transpose an input set using a first random number generated by a random number generator to create a transposed input set by seeding the random number generator with one or more secret data or non-secret data and a hash of the transposed input set generates the first random number that is used to transpose the input set;
transpose a token set using a second random number generated by the random number generator to create a transposed token set;
generate a token by substituting transposed input set values with transposed token set values; and
performing a transaction using sensitive information, where a portion of the sensitive information has been replaced with the token.