Systems and methods for tokenization of personally identifiable information (PII)
Described herein is a data security system for enabling tokenized access to sensitive data, including a token provider configured to connect to a remote client computing device over a secure communication channel, and cause display, at the remote client computing device, of a token request user interface including a selection form listing sensitive data elements associated with a first data subject. The token provider is also configured to receive a request for an access token, including a user selection of a subset of the sensitive data elements and one or more access authorization parameters, and generate an access token that enables access to only the subset of the sensitive data elements according to the authorization parameters. The token provider also stores the access token in a token database with the one or more authorization parameters, and transmits, to the remote client computing device, a response including the access token.
1. A data security system for enabling tokenized access to sensitive data, the data security system comprising a token provisioning computing device including a processor communicatively coupled to a memory device, the processor programmed to:
communicatively connect to a remote client computing device over a secure communication channel, the remote client computing device operated by a first data subject;
based on a subject identifier of the first data subject, determine a plurality of sensitive data elements about the first data subject stored in the memory device;
cause to display on the remote client computing device a token request user interface populated with a list of the plurality of sensitive data elements;
receive, from the remote client computing device, a request for an access token, the request including a user selection of a subset of the sensitive data elements selected by the first data subject on the token request user interface and one or more access authorization parameters;
generate an access token that enables access to only the subset of the sensitive data elements by an entity other than the first data subject or the remote computing device, according to the one or more authorization parameters;
store the access token in a token database with the one or more authorization parameters; and
transmit, to the remote client computing device, a response including the access token.
2. The data security system of claim 1 , wherein the processor is further programmed to receive, upon communicatively connecting to the remote client computing device, a subject identifier associated with the first data subject.
3. The data security system of claim 2 , wherein the processor is further programmed to:
access one or more data sources using the subject identifier to identify any sensitive data elements associated with the first data subject that are respectively stored at and available from the one or more data sources; and
generate the selection form based on all sensitive data elements available from the one or more data sources.
4. The data security system of claim 1 , wherein the one or more authorization parameters include at least one of a validity time/date parameter or an authorized service provider parameter.
5. The data security system of claim 1 , wherein the processor is further programmed to:
receive, from a service provider computing device separate from the remote client computing device, a data access request including an inputted access token;
compare the inputted access token to the access token stored in the token database; and
when the inputted access token matches the stored access token, transmit, to the service provider computing device, the subset of sensitive data elements associated with the stored access token.
6. The data security system of claim 1 , wherein the processor is further programmed to:
receive, from the remote client computing device, data subject input indicating a revocation of the access token; and
in response to receiving the data subject input, at least one of delete the stored access token or disable the stored access token to prevent further access to the sensitive data by a service provider.
7. The data security system of claim 1 , wherein the one or more authorization parameters include a validity date after which access to the sensitive data is revoked, and wherein the processor is further programmed to:
upon reaching the validity date, at least one of delete the stored access token or disable the stored access token to prevent further access to the sensitive data by a service provider.
8. The data security system of claim 1 , wherein the access token is one of alphanumeric code, a bar code, and a QR code.
9. The data security system of claim 1 , wherein the request further includes an authentication data element indicating the first data subject was successfully authenticated at the remote client computing device.
10. A computer-implemented method for enabling tokenized access to sensitive data, the method implemented using a data security system including a token provisioning computing device including a processor communicatively coupled to a memory device, the method comprising:
communicatively connecting to a remote client computing device over a secure communication channel, the remote client computing device operated by a first data subject;
based on a subject identifier of the first data subject, determining a plurality of sensitive data elements about the first data subject stored in the memory device;
causing to display on the remote client computing device a token request user interface populated with a list of the plurality of sensitive data elements;
receiving, from the remote client computing device, a request for an access token, the request including a user selection of a subset of the sensitive data elements selected by the first data subject on the token request user interface and one or more access authorization parameters;
generating an access token that enables access to only the subset of the sensitive data elements by an entity other than the first data subject or the remote computing device, according to the one or more authorization parameters;
storing the access token in a token database with the one or more authorization parameters; and
transmitting, to the remote client computing device, a response including the access token.
11. The computer-implemented method of claim 10 , further comprising receiving, upon communicatively connecting to the remote client computing device, a subject identifier associated with the first data subject.
12. The computer-implemented method of claim 11 , further comprising:
accessing one or more data sources using the subject identifier to identify any sensitive data elements associated with the first data subject that are respectively stored at and available from the one or more data sources; and
generating the selection form based on all sensitive data elements available from the one or more data sources.
13. The computer-implemented method of claim 10 , further comprising:
receiving, from a service provider computing device separate from the remote client computing device, a data access request including an inputted access token;
comparing the inputted access token to the access token stored in the token database; and
when the inputted access token matches the stored access token, transmitting, to the service provider computing device, the subset of sensitive data elements associated with the stored access token.
14. The computer-implemented method of claim 10 , further comprising:
receiving, from the remote client computing device, data subject input indicating a revocation of the access token; and
in response to receiving the data subject input, at least one of deleting the stored access token or disabling the stored access token to prevent further access to the sensitive data by a service provider.
15. The computer-implemented method of claim 10 , wherein the one or more authorization parameters include a validity date after which access to the sensitive data is revoked, the method further comprising:
upon reaching the validity date, at least one of deleting the stored access token or disabling the stored access token to prevent further access to the sensitive data by a service provider.
16. The computer-implemented method of claim 10 , wherein receiving the request comprises receiving the request further including an authentication data element indicating the first data subject was successfully authenticated at the remote client computing device.
17. A non-transitory computer-readable storage medium having computer-executable instructions stored thereon, wherein when executed by a processor of a token provisioning computing device of a data security computing system, the computer-executable instructions cause the processor to:
communicatively connect to a remote client computing device over a secure communication channel, the remote client computing device operated by a first data subject;
based on a subject identifier of the first data subject, determine a plurality of sensitive data elements about the first data subject stored in the memory device;
cause to display on the remote client computing device a token request user interface populated with a list of the plurality of sensitive data elements;
receive, from the remote client computing device, a request for an access token, the request including a user selection of a subset of the sensitive data elements selected by the first data subject on the token request user interface and one or more access authorization parameters;
generate an access token that enables access to only the subset of the sensitive data elements by an entity other than the first data subject or the remote computing device, according to the one or more authorization parameters;
store the access token in a token database with the one or more authorization parameters; and
transmit, to the remote client computing device, a response including the access token.
18. The non-transitory computer-readable storage medium of claim 17 , wherein the computer-executable instructions further cause the processor to receive, upon communicatively connecting to the remote client computing device, a subject identifier associated with the first data subject.
19. The non-transitory computer-readable storage medium of claim 18 , wherein the computer-executable instructions further cause the processor to:
access one or more data sources using the subject identifier to identify any sensitive data elements associated with the first data subject that are respectively stored at and available from the one or more data sources; and
generate the selection form based on all sensitive data elements available from the one or more data sources.
20. The non-transitory computer-readable storage medium of claim 17 , wherein the one or more authorization parameters include at least one of a validity time/date parameter or an authorized service provider parameter.