Method and apparatus for third-party managed data transference and corroboration via tokenization
A protocol that is managed by a coordinating network element or third-party intermediary or peer network elements and utilizes tokens prohibits any subset of a union of the coordinating network element or third-party intermediary, if any, and a proper subset of the processors involved in token generation from substantively accessing underlying data. By one approach, processors utilize uniquely-held secrets. By one approach, an audit capability involves a plurality of processors. By one approach, the protocol enables data transference and/or corroboration. By one approach, transferred data is hosted independently of the coordinating network element. By one approach, the coordinating network element or third-party intermediary or a second requesting network element is at least partially blinded from access to tokens submitted by a first requesting network element. By one approach, a third-party intermediary uses a single- or consortium-sourced database. By one approach, network elements provisioned with tokens jointly manage the protocol.
1. A method for data corroboration via tokenization, as a process resulting in at least one token, invoking a protocol jointly managed by a first control circuit configured as a first network element and a second control circuit configured as a second network element, the method comprising:
the first network element provisioned with a first set of tokens representing a first set of entities;
the second network element provisioned with a second set of tokens representing a second set of entities;
establishment between the first network element and the second network element of at least one key;
transmission by the first network element to the second network element of a first message comprised, at least in part, of a first set of transformed tokens derived by transforming, as a first transformation process, using a first key of the at least one key each token of a first subset of tokens as a subset of the first set of tokens; and
comparison by the second network element of at least one of the transformed tokens of the first message to at least one transformed token of a second set of transformed tokens derived by transforming, as a second transformation process, using the first key a second subset of tokens as a subset of the second set of tokens.
2. The method of claim 1 further comprising:
transmission by the second network element to the first network element of a second message comprised, at least in part, of a third set of transformed tokens transformed, as a third transformation process, by using a second key of the at least one key each token of a third subset of tokens as a subset of the second set of tokens; and
comparison by the first network element of at least one of the transformed tokens of the second message to at least one transformed token of a fourth set of transformed tokens derived by transforming, as a fourth transformation process, using the second key a fourth subset of tokens as a subset of the first set of tokens.
3. The method of claim 1 wherein the establishment between the first network element and the second network element of the at least one key comprises, at least in part, at least one of:
transfer of a key generated by the first network element to the second network element;
transfer of a key generated by the second network element to the first network element; and
agreement on a key derived jointly by the first network element and the second network element.
4. The method of claim 1 wherein at least one of the first transformation process and the second transformation process comprises, at least in part, a one-way function as a keyed one-way function using the first key.
5. The method of claim 1 further comprising provisioning of at least one of the first set of tokens and the second set of tokens via a sponsoring organization as sponsor of at least one of:
a first network user of the first network element; and
a second network user of the second network element.
6. The method of claim 5 further comprising at least one of:
association via a first association of the first network user with the first set of entities; and
association via a second association of the second network user with the second set of entities.
7. The method of claim 5 further comprising at least one of:
authorization of the sponsoring organization, as a first requesting entity, to request that tokens be generated by one or more tokenization processors; and
authorization of the sponsoring organization, as a delegated entity, to receive tokens wherein a second requesting entity is authorized to request that the tokens be generated by one or more tokenization processors.
8. The method of claim 7 further comprising:
storing of tokens resulting in storage of the tokens generated by the one or more tokenization processors in a database; and
the provisioning comprising, at least in part, drawing from the database at least one of the first set of tokens and the second set of tokens.
9. The method of claim 1 further comprising at least one of:
generation, via a generation process, of an integrity check by the first network element, over a first set of values comprised of the first set of transformed tokens, using a third key of the at least one key; and
verification for authenticity, via a verification process that comprises regeneration of the integrity check using the third key over a second set of values as received by the second network element.
10. The method of claim 9 wherein the generation process and the verification process each comprises at least one of:
a one-way function as a keyed one-way function using the third key;
an encryption function as a reversible encryption function using the third key;
a decryption function using the third key;
a hash function;
concatenation of the first set of values; and
concatenation of the second set of values.
11. An apparatus for data corroboration via tokenization, as a process resulting in at least one token, the apparatus comprising:
a first network interface;
a second network interface;
a first control circuit operably coupled to the first network interface and configured as a first network element that manages a protocol to communicate with, at least, a second network element;
a second control circuit operably coupled to the second network interface and configured as the second network element that manages a protocol to communicate with, at least, the first network element; and wherein the first control circuit and the second control circuit are further configured to comprise:
the first network element provisioned with a first set of tokens representing a first set of entities;
the second network element provisioned with a second set of tokens representing a second set of entities;
establishment between the first network element and the second network element of at least one key;
transmission by the first network element to the second network element of a first message comprised, at least in part, of a first set of transformed tokens derived by transforming, as a first transformation process, using a first key of the at least one key each token of a first subset of tokens as a subset of the first set of tokens; and
comparison by the second network element of at least one of the transformed tokens of the first message to at least one transformed token of a second set of transformed tokens derived by transforming, as a second transformation process, using the first key a second subset of tokens as a subset of the second set of tokens.
12. The apparatus of claim 11 wherein the first control circuit and the second control circuit are further configured to comprise:
transmission by the second network element to the first network element of a second message comprised, at least in part, of a third set of transformed tokens transformed, as a third transformation process, by using a second key of the at least one key each token of a third subset of tokens as a subset of the second set of tokens; and
comparison by the first network element of at least one of the transformed tokens of the second message to at least one transformed token of a fourth set of transformed tokens derived by transforming, as a fourth transformation process, using the second key a fourth subset of tokens as a subset of the first set of tokens.
13. The apparatus of claim 11 wherein the first control circuit and the second control circuit are further configured to comprise the establishment between the first network element and the second network element of the at least one key comprising, at least in part, at least one of:
transfer of a key generated by the first network element to the second network element;
transfer of a key generated by the second network element to the first network element; and
agreement on a key derived jointly by the first network element and the second network element.
14. The apparatus of claim 11 wherein the first control circuit and the second control circuit are further configured to comprise:
at least one of the first transformation process and the second transformation process comprising, at least in part, a one-way function as a keyed one-way function using the first key.
15. The apparatus of claim 11 wherein the process resulting in at least one token is further configured to comprise provisioning of at least one of the first set of tokens and the second set of tokens via a sponsoring organization as sponsor of at least one of:
a first network user of the first network element; and
a second network user of the second network element.
16. The apparatus of claim 15 wherein the first control circuit and the second control circuit are further configured to comprise at least one of:
association via a first association of the first network user of the first network element with the first set of entities; and
association via a second association of the second network user of the second network element with the second set of entities.
17. The apparatus of claim 15 wherein the process resulting in at least one token is further configured to comprise at least one of:
authorization of the sponsoring organization, as a first requesting entity, to request that tokens be generated by one or more tokenization processors; and
authorization of the sponsoring organization, as a delegated entity, to receive tokens wherein a second requesting entity is authorized to request that the tokens be generated by one or more tokenization processors.
18. The apparatus of claim 17 wherein the process resulting in at least one token is further configured to comprise:
storing of tokens resulting in storage of the tokens generated by the one or more tokenization processors in a database; and
the provisioning comprising, at least in part, drawing from the database at least one of the first set of tokens and the second set of tokens.
19. The apparatus of claim 11 wherein the first control circuit and the second control circuit are further configured to comprise at least one of:
generation, via a generation process, of an integrity check by the first network element, over a first set of values comprised of the first set of transformed tokens, using a third key of the at least one key; and
verification for authenticity, via a verification process that comprises regeneration of the integrity check using the third key over a second set of values as received by the second network element.
20. The apparatus of claim 19 wherein the first control circuit and the second control circuit are further configured to comprise the generation process and the verification process each comprising at least one of:
a one-way function as a keyed one-way function using the third key;
an encryption function as a reversible encryption function using the third key;
a decryption function using the third key;
a hash function;
concatenation of the first set of values; and
concatenation of the second set of values.