Skip to main content

Tokenization

Overview​

Tokenization is a data protection method used to replace sensitive data with a substitute value in the form of a unique token that has no intrinsic meaning or value.

In TAKAKRYPT, tokenization uses the Format Preserving Encryption (FPE) method, which generates tokens whose format and length follow the original data. This approach allows applications to continue processing the data without requiring significant changes to the data structure.

Tokenization Functions​

The Tokenization menu serves to:

  • Transform sensitive data into a unique token.
  • Protect original data from unauthorized access.
  • Maintain the data format so that it remains consistent with application requirements.
  • Provide a tokenization service that can be used by various applications and integrations.

Tokenization Uses​

The Tokenization feature can be used to:

  • Protect personal data and sensitive data.
  • Reduce the risk of sensitive information leakage.
  • Support the implementation of data security policies.
  • Help meet compliance requirements for data protection regulations.

How Tokenization Works​

The tokenization process in TAKAKRYPT is carried out by replacing the original data with a token using the FPE algorithm.

The process is as follows:

  1. Sensitive data is sent to the TAKAKRYPT service.
  2. The system processes the data using the predetermined tokenization algorithm.
  3. The original data is transformed into a token with a format that remains consistent with the source data.
  4. The token is used as a substitute for the original data in both the storage and data exchange processes.
  5. The token can be restored to the original data through the detokenization process according to the access rights held.

Tokenization Methods​

TAKAKRYPT supports the tokenization method based on Format Preserving Encryption (FPE).

Format Preserving Encryption (FPE)

FPE is a tokenization method that generates tokens whose format follows the original data. With this approach, applications that use the data can continue to operate without needing to change the data structure.

The algorithms used include:

  • FF1
  • FF3-1

This method is suitable for systems that require data protection without changing the data format already used by applications or databases.