IP Library Granted Patent US 12,287,902
Granted Patent B2
US 12,287,902 · App. 17/901,575 · Granted Apr 29, 2025

Vaultless tokenization

Inventors: Rohit Joshi (Glen Allen, VA); Hao Cheng (Oakton, VA); Michael James Caughey (Glen Allen, VA)
G06F21/6245G06F21/31G06F21/602
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,287,902
App. No.
17/901,575
Granted
Apr 29, 2025
Kind
B2
Abstract

Disclosed herein are system, method, and computer program product embodiments for vaultless tokenization. Alphanumeric values may be determined based on numeric values generated from a hash of numeric user information shuffled through a plurality of randomly generated alphanumeric tables. The numeric user information and the alphanumeric values may be used to generate a table index. Shuffled numeric user information may be generated based on the table index and a plurality of randomly generated numeric tables, and transformed to alphanumeric user information (e.g., via format-preserving encryption, additive cipher, etc.). Each character of the alphanumeric user information may be shuffled through a different alphanumeric table of the plurality of alphanumeric tables identified for the character based on the table index. Moreover, an alphanumeric token may be generated based on the shuffled characters of the alphanumeric user information.

Claims (49)

1. A computer-implemented method comprising:

determining alphanumeric values based on numeric values that are generated from a hash of numeric user information then shuffled through a plurality of randomly generated alphanumeric tables;

generating a table index based on at least a portion of the numeric user information and the alphanumeric values;

generating shuffled numeric user information based on the table index and a plurality of randomly generated numeric tables;

transforming the shuffled numeric user information to alphanumeric user information based on additive cipher information applied to the shuffled numeric user information;

shuffling each character of the alphanumeric user information through a different alphanumeric table of the plurality of randomly generated alphanumeric tables, wherein each different alphanumeric table is identified for each character based on the table index; and

generating an alphanumeric token based on the shuffled characters of the alphanumeric user information;

determining a numeric value indicative of an amount of numeric characters of the numeric user information; and

modifying the generated alphanumeric token to include an alphabetic value, wherein the alphabetic value is determined based on an alphabetic representation of the numeric value that is shuffled through a plurality of randomly generated alphabetic tables.

2. The computer-implemented method of claim 1 , further comprising padding the alphanumeric token with a randomly generated numeric character based on an indication that a numeric character of the numeric user information is removed according to the numeric user information being shuffled through the plurality of randomly generated numeric tables.

3. The computer-implemented method of claim 1 , further comprising padding the alphanumeric token with the alphanumeric values.

4. The computer-implemented method of claim 1 , further comprising:

hashing the numeric user information and a secret key to output the hashed numeric user information; and

encrypting the hashed numeric user information to output the numeric values.

5. The computer-implemented method of claim 1 , wherein the generating the shuffled numeric user information comprises shuffling the numeric user information through the plurality of randomly generated numeric tables, wherein each numeric character of the numeric user information is shuffled through a different numeric table of the plurality of randomly generated numeric tables identified for the numeric character based on the table index.

6. The computer-implemented method of claim 1 , further comprising sending the alphanumeric token to at least one of a user device associated with the numeric user information, a storage medium, or an application to facilitate access to a resource.

7. A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:

determining alphanumeric values based on numeric values that are generated from a hash of numeric user information then shuffled through a plurality of randomly generated alphanumeric tables;

generating a table index based on at least a portion of the numeric user information and the alphanumeric values;

generating shuffled numeric user information based on the table index and a plurality of randomly generated numeric tables;

transforming the shuffled numeric user information to alphanumeric user information based on additive cipher information being applied to the shuffled numeric user information;

shuffling each character of the alphanumeric user information through a different alphanumeric table of the plurality of randomly generated alphanumeric tables, wherein each different alphanumeric table is identified for each character based on the table index;

generating an alphanumeric token based on the shuffled characters of the alphanumeric user information;

determining a numeric value indicative of an amount of numeric characters of the numeric user information; and

modifying the generated alphanumeric token to include an alphabetic value, wherein the alphabetic value is determined based on an alphabetic representation of the numeric value that is shuffled through a plurality of randomly generated alphabetic tables.

8. The non-transitory computer-readable medium of claim 7 , the operations further comprising padding the alphanumeric token with a randomly generated numeric character based on an indication that a numeric character of the numeric user information is removed according to the numeric user information being shuffled through the plurality of randomly generated numeric tables.

9. The non-transitory computer-readable medium of claim 7 , the operations further comprising padding the alphanumeric token with the alphanumeric values.

10. The non-transitory computer-readable medium of claim 7 , the operations further comprising:

hashing the numeric user information and a secret key to output the hashed numeric user information; and

encrypting the hashed numeric user information to output the numeric values.

11. The non-transitory computer-readable medium of claim 10 , wherein the generating the shuffled numeric user information comprises shuffling the numeric user information through the plurality of randomly generated numeric tables, wherein each numeric character of the numeric user information is shuffled through a different numeric table of the plurality of randomly generated numeric tables identified for the numeric character based on the table index.

12. The non-transitory computer-readable medium of claim 7 , the operations further comprising sending the alphanumeric token to at least one of a user device associated with the numeric user information, a storage medium, or an application to facilitate access to a resource.

13. A system comprising:

a memory; and

at least one processor coupled to the memory and configured to perform operations comprising:

determining alphanumeric values based on numeric values that are generated from a hash of numeric user information then shuffled through a plurality of randomly generated alphanumeric tables;

generating a table index based on at least a portion of the numeric user information and the alphanumeric values;

generating shuffled numeric user information based on the table index and a plurality of randomly generated numeric tables;

transforming the shuffled numeric user information to alphanumeric user information based on additive cipher information being applied to the shuffled numeric user information;

shuffling each character of the alphanumeric user information through a different alphanumeric table of the plurality of randomly generated alphanumeric tables, wherein each different alphanumeric table is identified for each character based on the table index;

generating an alphanumeric token based on the shuffled characters of the alphanumeric user information;

determining a numeric value indicative of an amount of numeric characters of the numeric user information; and

modifying the generated alphanumeric token to include an alphabetic value, wherein the alphabetic value is determined based on an alphabetic representation of the numeric value that is shuffled through a plurality of randomly generated alphabetic tables.

14. The system of claim 13 , the operations further comprising padding, based on an indication that a numeric character of the numeric user information is removed according to the numeric user information being shuffled through the plurality of randomly generated numeric tables, the alphanumeric token with a randomly generated numeric character.

15. The system of claim 13 , the operations further comprising padding the alphanumeric token with the alphanumeric values.

16. The system of claim 13 , the operations further comprising:

hashing the numeric user information and a secret key to output the hashed numeric user information; and

encrypting the hashed numeric user information to output the numeric values.

17. The system of claim 16 , wherein the generating the shuffled numeric user information comprises shuffling the numeric user information through the plurality of randomly generated numeric tables, wherein each numeric character of the numeric user information is shuffled through a different numeric table of the plurality of randomly generated numeric tables identified for the numeric character based on the table index.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 7, 2022
From: JOSHI, ROHIT; CHENG, HAO; CAUGHEY, MICHAEL JAMES
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 061010/0516 →
Continuity (1)
Related Publication 20240078334A1 · Mar 7, 2024
References Cited (12)
US 9779220B1 · Kronrod et al. · 2017 [cited by applicant]
US 10885222B2 · Mattsson · 2021 [cited by applicant]
US 11030341B2 · LaFever et al. · 2021 [cited by applicant]
US 11163907B2 · Rozenberg et al. · 2021 [cited by applicant]
US 11250157B2 · Apsingekar et al. · 2022 [cited by applicant]
US 20170061403A1 · Reisgies et al. · 2017 [cited by applicant]
US 20180062832A1 · Hatcher · 2018 [cited by applicant]
US 20190207754A1 · Iyer · 2019 [cited by examiner]
US 20200366656A1 · Barnett · 2020 [cited by examiner]
US 20200374120A1 · Stanley · 2020 [cited by examiner]
US 20210144005A1 · Stanley et al. · 2021 [cited by applicant]
International Search Report and Written Opinion directed to related application No. PCT/US2023/31876, mailed Dec. 20, 2023, 14 pages. [cited by applicant]