Patent ID: 8751788
Filing Date: 2014-06-10
Classification: G06F,H04L

Abstract:
1. In a computer management encryption system comprising one or more hardware and software modules in communication with an encryption proxy, a method for protecting sensitive data, comprising the steps of: receiving a request for a subscription identifier at the computer management encryption system from a web application, wherein the web application requests the subscription identifier based on anticipation of the receipt of sensitive data, and wherein the subscription identifier relates to a particular data type and a particular tokenization session; generating via the computer management encryption system a unique subscription identifier for association with the web application and the particular tokenization session; providing the unique subscription identifier from the computer management encryption system to the web application; receiving sensitive data at the computer management encryption system from a web browser presenting the web application, via the encryption proxy, wherein the sensitive data comprises the particular data type and a plurality of data values, and wherein the sensitive data is associated with the unique subscription identifier; generating via the computer management encryption system a token that is representative of the sensitive data in encrypted form, the token comprising a token format dependent on the particular data type of the sensitive data, and wherein the token format further comprises a plurality of token data values, wherein each token data value is dependent upon the data values in the sensitive data; associating via the computer management encryption system the token with the sensitive data and the unique subscription identifier; storing the token and the sensitive data and the unique subscription identifier in a database at the computer management encryption system; and providing the token from the computer management encryption system to the web browser presenting the web application for use in replacing the sensitive data with the token.