Patent ID: 11954230
Assignee: THE PRUDENTIAL INSURANCE COMPANY OF AMERICA
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 8:
9. A method for securing personally identifiable information, the method comprising:
generating, by a token handler, a set of public encryption keys of the token handler;
communicating, by the token handler, the set of public encryption keys of the token handler to a data originator;
receiving, by the token handler, from the data originator, a request to store a user's personally identifiable information, the request to store comprising a first portion of the user's personally identifiable information encrypted using a first public encryption key of the token handler from the set and a second portion of the user's personally identifiable information encrypted using a second public encryption key of the token handler from the set;
adding, by the token handler, to an encryption schedule, an indication that the first portion of the user's personally identifiable information was encrypted using the first public encryption key and an indication that the second portion of the user's personally identifiable information was encrypted using the second public encryption key;
receiving, by the token handler, a token indicating a request for redemption of the first and second portions of the user's personally identifiable information;
selecting, by the token handler, based on the encryption schedule, a first private encryption key of the token handler corresponding to the first public encryption key;
decrypting, by the token handler, using the first private encryption key, the first portion of the user's personally identifiable information encrypted using the first public encryption key to produce the first portion of the user's personally identifiable information;
selecting, by the token handler, based on the encryption schedule, a second private encryption key of the token handler corresponding to the second public encryption key;
decrypting, by the token handler, using the second private encryption key, the second portion of the user's personally identifiable information encrypted using the second public encryption key to produce the second portion of the user's personally identifiable information; and
storing, by the token handler, a key vault comprising the set of public encryption keys and an ordinal assigned to each key of the set of public encryption keys, wherein the encryption schedule identifies the first public encryption key using the ordinal assigned to the first public encryption key in the key vault.