POST QUANTUM UNIQUE KEY PER TOKEN SYSTEM
Various arrangements relate to a method performed by a processor of a computing system. An example method includes tokenizing a first value using a tokenization algorithm to generate a first token. The first value and first key are inputs of the tokenization algorithm. A message is generated. The message includes a first value identifier associated with the first value and a first key generation identifier associated with the generation of the first key. The message is associated with the first token. A second key is generated. A second value is tokenized using a tokenization algorithm to generate a second token. The second value and second key are inputs of the tokenization algorithm.
1 . A method, comprising:
requesting, by a computing system, a key for a token, the token corresponding to output of a tokenization algorithm receiving as input a value and a key, the message comprising a key generation identifier associated with the key and a value identifier, the value identifier associated with the value;
retrieving, by the computing system, the key; and
detokenizing, by the computing system, the token using the key to retrieve the value.
2 . The method of claim 1 , further comprising:
regenerating the key using a key derivation function identifier associated with the key derivation function, a base derivation key identifier associated with the base derivation key, and the value,
wherein the key generation identifier comprises the key derivation function identifier and the base derivation key identifier.
3 . The method of claim 2 , further comprising:
generating, by the computing system, a second message comprising a second value identifier associated with a second value,
wherein the second message is associated with a second token.
4 . The method of claim 1 , further comprising:
determining, by the computing system, a random character string;
generating, by the computing system, the first key using the random character string; and
generating, by the computing system, a second key using a second random character string.
5 . The method of claim 4 , wherein the key generation identifier comprises the random character string.
6 . The method of claim 5 , further comprising:
generating, by the computing system, a second message comprising a second value identifier, the second value identifier associated with a second value, a second key generation identifier that comprises the second random character string.
7 . The method of claim 1 , further comprising:
generating, by the computing system, a second key using the base derivation key, a second value, and the key derivation function; and
tokenizing, by the computing system, the second value using the tokenization algorithm to generate a second token, wherein the second value and the second key are inputs of the tokenization algorithm.
8 . A system, comprising:
memory and one or more processors to:
request a key for a token, the token corresponding to output of a tokenization algorithm receiving as input a value and a key, the message comprising a key generation identifier associated with the key and a value identifier, the value identifier associated with the value;
retrieve the key; and
detokenize the token using the key to retrieve the value.
9 . The system of claim 8 , the processors to:
regenerate the key using a key derivation function identifier associated with the key derivation function, a base derivation key identifier associated with the base derivation key, and the value,
wherein the key generation identifier comprises the key derivation function identifier and the base derivation key identifier.
10 . The system of claim 9 , the processors to:
generate a second message comprising a second value identifier associated with a second value,
wherein the second message is associated with a second token.
11 . The system of claim 8 , the processors to:
determine a random character string;
generate the first key using the random character string; and
generate a second key using a second random character string.
12 . The system of claim 11 , wherein the key generation identifier comprises the random character string.
13 . The system of claim 12 , the processors to:
generate a second message comprising a second value identifier, the second value identifier associated with a second value, a second key generation identifier that comprises the second random character string.
14 . The system of claim 13 , the processors to:
generate a second key using the base derivation key, a second value, and the key derivation function; and
tokenize the second value using the tokenization algorithm to generate a second token, wherein the second value and the second key are inputs of the tokenization algorithm.
15 . A non-transitory computer readable medium including one or more instructions stored thereon and executable by a processor to:
request, by the processor, a key for a token, the token corresponding to output of a tokenization algorithm receiving as input a value and a key, the message comprising a key generation identifier associated with the key and a value identifier, the value identifier associated with the value;
retrieve, by the processor, the key; and
detokenize, by the processor, the token using the key to retrieve the value.
16 . The computer readable medium of claim 15 , the computer readable medium further including one or more instructions executable by the processor to:
regenerate, by the processor, the key using a key derivation function identifier associated with the key derivation function, a base derivation key identifier associated with the base derivation key, and the value,
wherein the key generation identifier comprises the key derivation function identifier and the base derivation key identifier.
17 . The computer readable medium of claim 16 , the computer readable medium further including one or more instructions executable by the processor to:
generate, by the processor, a second message comprising a second value identifier associated with a second value,
wherein the second message is associated with a second token.
18 . The computer readable medium of claim 17 , the computer readable medium further including one or more instructions executable by the processor to:
determine, by the processor, a random character string;
generate, by the processor, the first key using the random character string; and
generate, by the processor, a second key using a second random character string.
19 . The computer readable medium of claim 18 , wherein the key generation identifier comprises the random character string.
20 . The computer readable medium of claim 19 , the computer readable medium further including one or more instructions executable by the processor to:
generate, by the processor, a second message comprising a second value identifier, the second value identifier associated with a second value, a second key generation identifier that comprises the second random character string.