Systems and methods for prefetching payment card industry data
Systems and methods for prefetching Payment Card Industry (PCI) data. A method may include a tokenization service in a cloud environment: (1) receiving a request to prefetch a plurality of tokens from a client application; (2) generating the plurality of tokens and a co-relation indicator for each of the plurality of tokens; (3) storing the plurality of tokens and the co-relation indicators in a token vault in the cloud environment; (4) returning the plurality of tokens and the co-relation indicators to the client electronic device; (5) receiving a mapping request comprising a source value and the co-relation indicator for one of the plurality of tokens; (6) identifying the token of the plurality of tokens associated with the co-relation indicator; (7) mapping the token to the source value; and (8) returning a message indicating successful mapping to the client application.
1 . A method, comprising:
receiving, at a tokenization service executed in a cloud environment, a request to prefetch a plurality of tokens from a client application executed by a client electronic device;
generating, by the tokenization service, the plurality of tokens and a co-relation indicator for each of the plurality of tokens;
storing, by the tokenization service, the plurality of tokens and the co-relation indicators in a token vault in the cloud environment;
returning, by the tokenization service, the plurality of tokens and the co-relation indicators to the client electronic device;
in response to the tokenization service being unavailable, mapping, by the client application, a source value to one token of the plurality of tokens;
using, by the client application, the token as a surrogate for the source value;
in response to the tokenization service being available again, sending, by the client application and to the tokenization service, a mapping request comprising the source value and the co-relation indicator for the token;
identifying, by the tokenization service, the token of the plurality of tokens associated with the co-relation indicator;
mapping, by the tokenization service, the token to the source value; and
returning, by the tokenization service, a message indicating successful mapping to the client application.
2 . The method of claim 1 , wherein the request comprises a token format for the plurality of tokens.
3 . The method of claim 2 , wherein the token format comprises a token length.
4 . The method of claim 1 , further comprising:
generating, by the tokenization service, a hash of the source value;
encrypting, by the tokenization service, the source value;
persisting, by the tokenization service, the hash and the token in a source hash table; and
persisting, by the tokenization service, the hash, the encrypted source value, and the token in a token table.
5 . The method of claim 1 , wherein the source value comprises sensitive data.
6 . The method of claim 5 , wherein the sensitive data comprises personally identifiable data.
7 . The method of claim 1 , wherein the source value comprises a primary account number.
8 . A system, comprising:
a client electronic device executing a client application; and
a cloud environment comprising a computer processor executing a tokenization service;
wherein:
the tokenization service is configured to receive a request to prefetch a plurality of tokens from the client application;
the tokenization service is configured to generate the plurality of tokens and a co-relation indicator for each of the plurality of tokens to store the plurality of tokens and the co-relation indicators in a token vault in the cloud environment;
the tokenization service is configured to return the plurality of tokens and the co-relation indicators to the client application;
in response to the tokenization service being unavailable:
the client application is configured to map a source value to one token of the plurality of tokens; and
the client application is configured to use the token as a surrogate for the source value;
in response to the tokenization service being available again, sending, by the client application and to the tokenization service, a mapping request comprising the source value and the co-relation indicator for the token;
the tokenization service is configured to identify the token of the plurality of tokens associated with the co-relation indicator;
the tokenization service is configured to map the token to the source value; and
the tokenization service is configured to return a message indicating successful mapping to the client application.
9 . The system of claim 8 , wherein the request comprises a token format for the plurality of tokens.
10 . The system of claim 9 , wherein the token format comprises a token length.
11 . The system of claim 8 , wherein:
the tokenization service is further configured to generate a hash of the source value;
the tokenization service is further configured to encrypt the source value;
the tokenization service is further configured to persist the hash and the token in a source hash table; and
the tokenization service is further configured to persist the hash, the encrypted source value, and the token in a token table.
12 . The system of claim 8 , wherein the source value comprises sensitive data.
13 . The system of claim 12 , wherein the sensitive data comprises personally identifiable data.
14 . The system of claim 8 , wherein the source value comprises a primary account number.
15 . A method, comprising:
receiving, at an account number generation service, a request to prefetch a plurality of primary account numbers from a client application executed by a client electronic device;
generating, by the account number generation service, the plurality of primary account numbers;
returning, by the account number generation service, the plurality of primary account numbers to the client application;
in response to the account number generation service being unavailable, assigning, by the client application, one of the plurality of account numbers to an account;
sending, by the client application and to a tokenization service, a mapping request comprising one of the plurality of primary account numbers and a co-relation indicator for a token;
identifying, by the tokenization service, the token out of a plurality of tokens associated with the co-relation indicator;
mapping, by the tokenization service, the token to the primary account number; and
returning, by the tokenization service, a message indicating successful mapping to the client application.
16 . The method of claim 15 , wherein the request comprises a bank identification number for the plurality of primary account numbers.