Patent ID: 11947706
Assignee: OPEN TEXT HOLDINGS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method for securing data, the method comprising:
receiving, by a tokenization system from a first client computing system, a request for data a nonynnization, the request referencing unstructured or semi-structured content that contains values of interest for the data anonymization;
performing, by the tokenization system, a tokenization operation on the unstructured or semi-structured content, the tokenization operation comprising generating a self-describing token for replacing a value of interest in the unstructured or semi-structured content, the self- describing token having:
a preconfigured pattern,
an indication of a protection strategy, and
a token value, the protection strategy specifies a secure data vault, the tokenization operation producing an anonymized version of the unstructured or semi- structured content with self-describing tokens, each self-describing token anonymizing and corresponding to one or more of the values of interest in the unstructured or semi- structured content; storing, by the tokenization system, the values of interest in the secure data vault;

communicating, by the tokenization system, the anonymized version of the unstructured or semi-structured content to the first client computing system;
receiving, by the tokenization system from the first client computing system or a second client computing system, a request for revealing the anonymized version of the unstructured or semi-structured content;
performing, by the tokenization system, a reveal operation on the anonymized version of the unstructured or semi-structured content, the reveal operation comprising:
searching the anonymized version of the unstructured or semi-structured content for the preconfigured pattern,
identifying the self-describing tokens in the anonymized version of the unstructured or semi-structured content using the preconfigured pattern,
identifying protection strategies respectively contained in the self-describing tokens, the protection strategies identifying respective secure data vaults where the values of interest are stored, and
retrieving the values of interest from the respective secure data vaults using the protection strategies from the self-describing tokens, the reveal operation producing a detokenized version of the unstructured or semi-structured content containing the values of interest; and

communicating, by the tokenization system, the detokenized version of the unstructured or semi-structured content to the first client computing system or to the second client computing system.