Patent Document ID: 8812844
Application ID: 13527852

Base Claim:
1. A method of generating a format-preserving token for sensitive data, said method comprising the computer-implemented steps of: receiving from a client process an input data string having a string of characters each having data values, said input data string corresponding to sensitive data; generating a tokenized data string according to a token generation algorithm that includes a string length determiner, breaking said input data string into a plurality of segments of characters each having data values; and replacing one of said plurality of segments with a tokenized segment of characters each having data values; wherein at least one of said characters in said tokenized segment includes a checksum; wherein the data values of the characters in said tokenized data string are independent of the data values of at least a portion of the characters in said input data string; and returning said tokenized data string to said client process in response to a request.

---

Claim 13:
13. The method of claim 1 , configured to operate in a multiple domain environment, said method further comprising the computer-implemented steps of: establishing a first data vault located at a first domain, and a replica of said first data vault at each of a plurality of second domains; establishing a plurality of second data vaults, each located at one of said plurality of second domains, and establishing a replica of each said plurality of second data vaults at said first domain; receiving said input data string at said first domain; searching said first data vault to determine if a first tokenized data string corresponding to said input data string exists therein and, if found, returning said first tokenized data string to said client process and, if not found: searching each said replica of each of said plurality of second data vaults to determine if a second tokenized data string corresponding to said input data string exists therein and, if found, returning said second tokenized data string to said client process and, if not found: and executing said step of generating a tokenized data string, wherein said token generation algorithm is configured to embed within said new tokenized data string a domain designator corresponding to said first domain.