Encryption and tokenization architectures
Various embodiments of the present invention are directed to methods, systems and computer program products for conducting an online transaction on a website involving sensitive information. Such embodiments provide methods, systems and computer program products to: (a) register at least one entity with a gate keeper module, the registering comprising associating the entity with a subscription level; (b) associate a sub-string of a character string with a unique token so that a direct link does not exist between the unique token and the character string; and (c) during processing of the online transaction: (i) using the unique token for intermediate steps during the processing of the online transaction; and (ii) only accessing the character string in storage memory to complete the online transaction after receiving a request from at least one registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.
1. A method for using a unique token in online transactions involving sensitive information to control access to the sensitive information, the method comprising:
registering, by a server entity, at least one entity, the registering comprising associating the at least one entity with a subscription level;
in response to receipt of the sensitive information from a merchant device, generating, by the server entity, a unique token for use in place of the sensitive information in online transactions, wherein the sensitive information comprises a character string stored as encrypted data;
directly associating, by a server entity, a sub-string of a character string with the unique token so that a direct association does not exist between the unique token and the character string, the character string comprising the sensitive information and the sub-string being configured to identify the character string without revealing the sensitive information; and
accessing, by a server entity, the character string stored as encrypted data in storage memory using the unique token and the sub-string to retrieve the sensitive information after transmission of a request for the sensitive information from a registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.
2. The method of claim 1 , wherein the sub-string comprises a proper subset of the character string.
3. The method of claim 1 , wherein the sub-string comprises a last four digits of the credit card number.
4. The method of claim 1 , wherein the character string is stored as encrypted data.
5. The method of claim 1 , wherein the character string is stored as a record in a database within the storage memory.
6. The method of claim 1 , wherein the character string is stored as a record in a database that is remote from the storage memory.
7. The method of claim 1 , further comprising:
verifying that a computer device or a user retrieving the sensitive information is authorized to access the character string.
8. The method of claim 1 , further comprising:
receiving a request to display the sub-string, the request comprising the unique token; and
displaying the sub-string without revealing the sensitive information.
9. The method of claim 1 , further comprising:
using the unique token to access and retrieve the sub-string without accessing the character string.
10. A data processing system for using a unique token in online transactions involving sensitive information to control access to the sensitive information, the data processing system comprising a processor and one or more storage devices embodying computer-readable program instructions that, when executed by the processor, cause the data processing system to:
register at least one entity, the registering comprising associating the at least one entity with a subscription level;
in response to receipt of the sensitive information from a merchant device, generate a unique token for use in place of the sensitive information, wherein the sensitive information comprises a character string stores as encrypted data;
directly associate a sub-string of a character string with the unique token so that a direct association does not exist between the unique token and the character string, the character string comprising the sensitive information and the sub-string being configured to identify the character string without revealing the sensitive information; and
access the character string stored as encrypted data in storage memory using the unique token and the sub-string to retrieve the sensitive information after transmission of a request for the sensitive information from a registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.
11. The data processing system of claim 10 , wherein the sub-string comprises a proper subset of the character string.
12. The data processing system of claim 11 , wherein the sub-string comprises a last four digits of the credit card number.
13. The data processing system of claim 10 , wherein the character string is stored as encrypted data.
14. The data processing system of claim 10 , wherein the character string is stored as a record in a database within the storage memory.
15. The data processing system of claim 10 , wherein the character string is stored as a record in a database that is remote from the storage memory.
16. The data processing system of claim 10 , wherein the computer-readable program instructions, when executed by the processor, further cause the data processing system to:
verify that a computer device or a user retrieving the sensitive information is authorized to access the character string.
17. The data processing system of claim 10 , wherein the computer-readable program instructions, when executed by the processor, further cause the data processing system to:
receive a request to display the sub-string, the request comprising the unique token; and
display the sub-string without revealing the sensitive information.
18. The data processing system of claim 10 , wherein the computer-readable program instructions, when executed by the processor, further cause the data processing system to:
use the unique token to access and retrieve the sub-string without accessing the character string.
19. A computer program product for using a unique token in an online transaction on a website involving sensitive information to control access to the sensitive information, the computer program product comprising a computer-readable storage embodying computer-readable program instructions that, when executed, cause a processor to:
register at least one entity, the registering comprising associating the at least one entity with a subscription level;
in response to receipt of the sensitive information from a merchant device, generate a unique token for use in place of the sensitive information, wherein the sensitive information comprises a character string stored as encrypted data;
directly associate a sub-string of a character string with the unique token so that a direct association does not exist between the unique token and the character string, the character string comprising the sensitive information and the sub-string being configured to identify the character string without revealing the sensitive information; and
access the character string stored as encrypted data in storage memory using the unique token and the sub-string to retrieve the sensitive information after transmission of a request for the sensitive information from a registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.
20. The computer program product of claim 19 , wherein the sub-string comprises a proper subset of the character string.
21. The computer program product of claim 20 , wherein the sub-string comprises a last four digits of the credit card number.
22. The computer program product of claim 19 , wherein the character string is stored as encrypted data.
23. The computer program product of claim 19 , wherein the character string is stored as a record in a database within the storage memory.
24. The computer program product of claim 19 , wherein the character string is stored as a record in a database that is remote from the storage memory.
25. The computer program product of claim 19 , wherein the computer-readable program instructions, when executed, further cause the processor to:
verify that a computer device or a user retrieving the sensitive information is authorized to access the character string.
26. The computer program product of claim 19 , wherein the computer-readable program instructions, when executed, further cause the processor to:
receive a request to display the sub-string, the request comprising the unique token; and
display the sub-string without revealing the sensitive information.
27. The computer program product of claim 19 , wherein the computer-readable program instructions, when executed, further cause the processor to:
use the unique token to access and retrieve the sub-string without accessing the character string.