TOKENIZATION USING MULTIPLE REVERSIBLE TRANSFORMATIONS

摘要

Technologies for tokenizing data including a computing device to extract plaintext data from an input file to be tokenized. The computing device performs data domain-specific format-preserving encryption on the extracted plaintext data based on a first cryptographic key to generate encrypted data and replaces one or more portions of the encrypted data with corresponding portions of alternative data based on a mapping table that maps encrypted data to alternative data. The computing device further performs data domain-specific format-preserving encryption on the alternative data based on a second cryptographic key to generate a token and stores the token in an output file.

主权项

1. A computing device for tokenizing data, the computing device comprising:
a data extraction module to extract plaintext data from an input file to be tokenized; a cryptography module to perform data domain-specific format-preserving encryption on the extracted plaintext data based on a first cryptographic key to generate encrypted data; a data mapping module to replace one or more portions of the encrypted data with corresponding portions of alternative data based on a mapping table that maps encrypted data to alternative data; wherein the cryptography module is further to perform data domain-specific format-preserving encryption on the alternative data based on a second cryptographic key to generate a token; and a data repackaging module to store the token in an output file.