COLLISION AVOIDANCE IN A DISTRIBUTED TOKENIZATION ENVIRONMENT

摘要

A client receives sensitive data to be tokenized. The client queries a token table with a portion of the sensitive data to determine if the token table includes a token mapped to the value of the portion of the sensitive data. If the mapping table does not include a token mapped to the value of the portion of the sensitive data, a candidate token is generated. The client queries a central token management system to determine if the candidate token collides with a token generated by or stored at another client. In some embodiments, the candidate token includes a value from a unique set of values assigned by the central token management system to the client, guaranteeing that the candidate token does not cause a collision. The client then tokenizes the sensitive data with the candidate token and stores the candidate token in the token table.

主权项

1. A computer-implemented method for tokenizing data comprising:
receiving, by each of a plurality of clients each associated with a corresponding numeric identifier and communicatively coupled to a central token management system, a unique set of values from the central token management system associated with the corresponding numeric identifier; accessing, by a client, data to be tokenized; selecting, by the client, a portion of the accessed data; determining, by the client, if a token table associated with the client includes a token value mapped to a value of the selected portion of the data; responsive to a determination that the token table does not include a token value mapped to the value of the selected portion of the data, generating, by the client, a token value unique to the client by selecting a value from the received unique set of values; tokenizing the accessed data by replacing the selection portion of the data with the generated token value; and updating the token table to include the generated token value mapped to the value of the selected portion of the data.