Patent ID: 9519802
Filing Date: 2016-12-13
CPC Classification: G06F,H04L

Claim Text:
1. A method comprising: intercepting, by a tokenization gateway computer-based system, sensitive data prior to the sensitive data reaching a cloud application in an externally hosted system, encrypting, by the tokenization gateway computer-based system and in response to the intercepting, the sensitive data to create encrypted sensitive data; associating, by the tokenization gateway computer-based system, a file path with the encrypted sensitive data; generating, by the tokenization gateway computer-based system and in response to the encrypting, a token comprising a data identifier; tokenizing, by the tokenization gateway computer-based system and in response to the generating, the encrypted sensitive data, wherein the tokenizing comprises mapping the encrypted sensitive data to the token; storing, by the tokenization gateway computer-based system and in response to the tokenizing, the token to the cloud application, wherein the cloud application comprises a software application that functions within the externally hosted system, wherein the externally hosted system includes a cloud computing environment; storing, by the tokenization gateway computer-based system and in response to the storing the token to the cloud application, the encrypted sensitive data to a token vault internal to the tokenization gateway computer-based system, wherein the token vault comprises a data storage system; retrieving, by the tokenization gateway computer-based system, the token from the cloud application in response to a request from the computer-based system for the token from the cloud application, reading, by the tokenization gateway computer-based system, the file path associated with the token; and in response to the reading the file path associated with the token, receiving and decrypting, by the tokenization gateway computer-based system, the encrypted sensitive data.