Tokenization
Introduction
Tokenization is the process of replacing sensitive data with a unique token that has no intrinsic meaning or value. This token acts as a substitute for the original data, so that even if the token is exposed, the critical data remains secure and inaccessible.
The following is a guide to managing tokenization data within the system, including creating new data, viewing the data list, filtering, searching, editing, deleting, as well as demonstrating the use of the simulator for the tokenization and detokenization of data.
1. Create New Tokenization
Follow the steps below to create a new tokenization in the system:
1. Access the Tokenization Menu
- Open the Security Config menu in the navigation panel.
- Select the Tokenization tab.
- Click the Add Function button located on the right side of the screen to begin creating a new tokenization.
2. Fill in the Basic Information
- Function Name: Enter the name of the tokenization function.
- Description: Add a tokenization description to provide additional detail (optional).
3. Configure the Tokenization
- Method: Select the tokenization method to secure your data. The available options are FF1 and FF3-1. Choose the method that best fits your security needs.
Explanation of the Tokenization Methods:
- FPE FF1: FF1 (Format-Preserving Encryption) is an encryption method that preserves the original format of the data. FF1 allows the encrypted data to retain the same length and structure, such as a credit card number or an identity number, without needing to change the storage system.
- FPE FF3-1: FF3-1 is the latest version of FF1, recommended by NIST. FF3-1 addresses vulnerabilities present in the previous version and provides a higher level of security, especially for financial data and payment systems.
- Tweak Model: Select the tokenization tweak model. The available options are Internal, Generated, and Supplied.
The following is an explanation of the tweak model types that can be selected:
- Internal: The tweak is generated automatically by the system. During the tokenization process, the user does not need to enter the tweak manually.
- Generated: The tweak is generated automatically, but the user needs to enter the tweak when performing the detokenization process.
- Supplied: The tweak is fully determined by the user, so the user must provide the tweak manually as needed.
By understanding these tweak models, users can select the option that best fits their needs.
- Data Type: Select the type of data to be tokenized. Three data types are available: General, Identifier, and Custom.
The following is an explanation of each data type:
- General: Used for standard, commonly used data formats.
- Identifier: Used for data that serves as a unique identity, such as an identity number.
- Custom: Used for data with special requirements, allowing users to independently define the data format using a regex pattern as needed.
If you select the General data type, several options are available such as Name, Email, IMEI, IPv4, and Date. Each option will display a sample data format below it when selected. Choose the data type that best fits your tokenization needs.
If you select the Identifier data type, several options are available such as NIK, Passport, NPWP, Credit Card, and Driver License. Each option will display a sample data format below it when selected. Choose the data type that best fits your tokenization needs.
If you select Custom, in the custom pattern field you can enter a regex pattern to define how the data will be tokenized.
By understanding these data types, users can select the option that best fits their needs.
Regex (Regular Expression) is a special pattern used to search for, match, or modify text based on a certain form.
- Partial Tokenization: Enable this option to keep part of the data in its original form while the rest is tokenized. The portion that is retained can be determined through two methods:
- Percentage: Determines what percentage of the data is kept displayed in its original form on the left side (Left) and the right side (Right).
- Character: Determines the number of characters that are kept displayed in their original form on the left side (Show Left) and the right side (Show Right).
- Allow Key Export: Enable the Allow Key Export option if you want to allow key material (raw key) to be exported from the system.
4. Manage the Tokenization Group
Select the group in which this tokenization will be managed.
- Use the search box to find the appropriate group.
- Click a group name from the list.
- Once a group is selected, the list of group members will appear in the right panel.
- Check the members who will have access to the Tokenization.
5. Save the Configuration
Once all fields are completely filled in, click the Submit button.
A pop-up notification will appear stating that the tokenization was created successfully.
2. List Tokenization
Once the data has been successfully created, users can view the list of Tokenization Data that has been saved in the system.
The following is an explanation of each table column displayed on the Tokenization page:
- Function Name: Displays the name of the tokenization that was created.
- Method: Displays the tokenization method used.
- Updated By: Displays the user who last updated the tokenization.
- Last Update: Displays the date and time of the last update.
- Action: Contains a three-dot icon button, allowing users to manage the tokenization, such as editing, simulating tokenize/detokenize data, or deleting the data.
3. Filter Tokenization
On the Tokenization page, there is a Filter feature marked with a funnel icon. This feature helps users filter tokenization data based on certain criteria, making it easier to display relevant information.
The following are the steps for using the Filter feature on the Tokenization page:
1. Open the Tokenization Menu
- Open the Security Config menu in the navigation panel.
- Select the Tokenization tab to open the List Tokenization page.
2. Display the Filter Panel
Click the Filter button at the top right of the table to display the filter options.
3. Select the Filter Criteria
- Select the desired filter criteria:
- Method: Filter tokenizations by the method used.
- Tweak Model: Filter tokenizations by the tweak model used.
- Updated By: Filter tokenization by the user who last updated them.
- Check one or more criteria as needed.
4. View the Filter Results
After selecting the filter criteria, the system will automatically display the list of tokenization data according to the selected filter.
5. Clear the Filter
- To remove a specific filter, uncheck the selected option.
- To remove all filters at once, click the Clear all filters button at the bottom of the filter panel.
- Once the filters are cleared, the system will automatically display all tokenization data without any filter restrictions.
4. Search Tokenization
The search feature makes it easy for users to find a specific Tokenization data entry without having to browse the entire list manually.
The following are the steps for using the search feature:
- Open the Security Config page from the navigation menu.
- Select the Tokenization tab.
- Locate the Search field at the top right of the table, next to the Filter button.
- Enter a keyword in the Search field. The keyword can be the name of a Tokenization function.
- The system will automatically display the list of Tokenizations that match the entered keyword.
- To display all data again, manually clear the keyword from the Search field.
5. Edit Tokenization
On the Tokenization page, users can update tokenization information as needed. The Edit feature allows changes to data such as function name, description, allow key export, group, and members.
The following are the steps for using the Edit feature on a Tokenization:
1. Open the Tokenization Menu
Access the Security Config menu from the sidebar, then select the Tokenization tab to display the list of available tokenization functions.
2. Open the Action Menu
- In the Action column of the tokenization row you want to edit, click the three-dot icon.
- Click Manage or click the tokenization function name to open the tokenization detail page.
3. Tokenization Detail Page
At the top of the detail page there is the tokenization function name along with its creation date (Created at), a Back to list button to return to the list, as well as Edit and Delete buttons at the top right.
The information displayed includes:
- Function Details: Contains the Function Name, ID (with a copy button), and Function Description.
- Tokenization Configuration: Displays the Tokenization Method, Tweak Type, Data Type, Sub Type, and Allow Key Export according to the applied configuration.
- Group & Members: The group and its members who have access to the tokenization function.
- Simulator: A button to directly simulate the tokenize and detokenize processes.
- Activity Log: The activity history of the tokenization function. Use the Load More button to display more history.
4. Edit the Data
- Click the Edit button at the top right of the page.
- Make the necessary changes in the form that appears, such as:
- Updating the function name.
- Updating the function description.
- Updating the allow key export.
- Updating the group and members.
5. Save the Changes
- After making the changes, click the Save Change button to save the updated data.
- The system will display a notification that the data was successfully updated.
6. Delete Tokenization
On the Tokenization page, users can delete tokenization data that is no longer needed.
The following are the steps for deleting a Tokenization:
1. Open the Tokenization Menu
Access the Security Config menu from the sidebar, then select the Tokenization tab to display the list of available tokenization functions.
2. Select the Tokenization to Delete
- Find the tokenization you want to delete in the table.
- In the Action column of the tokenization row you want to delete, click the three-dot icon.
- Click Manage or click the tokenization function name to open the tokenization detail page.
3. Click the Delete Button
- Once the detail page is open, click the Delete button located at the top right of the page to proceed with the deletion process.
4. Confirm the Deletion
- After clicking the Delete button, the system will display a confirmation window to delete the Tokenization.
- At this stage, the user is asked to enter the name of the Tokenization to be deleted, matching the text displayed on the screen.
- After entering the Tokenization name, click Yes, Delete to confirm the deletion.
Be sure to double-check before deleting a tokenization function, as this action cannot be undone.
7. Example of Tokenize Data
On the Tokenization page, users can tokenize data as needed.
The following are the steps for tokenizing data:
1. Open the Tokenization Menu
Access the Security Config menu from the sidebar, then select the Tokenization tab to display the list of available tokenizations.
2. Select a Tokenization for the Data Tokenization Process
- Find the tokenization function to be used for the data tokenization process in the table.
- In the Action column of the selected tokenization row, click the three-dot icon.
- Select the Manage option or click the tokenization function name to open the tokenization detail page.
3. Click the Tokenize/Detokenize Button
- Once the detail page is open, scroll to the bottom of the page.
- At the very bottom, find the Simulator option.
- Click the Tokenize/Detokenize button to proceed with the tokenization process.
4. Select and Fill in the Tokenization Data
- Fill in the required fields according to the data to be tokenized.
- Once finished, click the Generate button to start the tokenization process.
- The tokenization result will appear in the Ciphertext field.
8. Example of Detokenize Data
On the Tokenization page, users can detokenize data as needed.
The following are the steps for detokenizing data:
1. Open the Tokenization Menu
Access the Security Config menu from the sidebar, then select the Tokenization tab to display the list of available tokenizations.
2. Select a Tokenization for the Data Detokenization Process
- Find the tokenization function to be used for the data detokenization process in the table.
- In the Action column of the selected tokenization row, click the three-dot icon.
- Select the Manage option or click the tokenization function name to open the tokenization detail page.
3. Click the Tokenize/Detokenize Button
- Once the detail page is open, scroll to the bottom of the page.
- At the very bottom, find the Simulator option.
- Click the Tokenize/Detokenize button to proceed with the detokenization process.
4. Select and Fill in the Detokenization Data
- Select the Detokenize option in the available form.
- Fill in the required fields according to the data to be detokenized.
- Once finished, click the Generate button to start the detokenization process.
- The detokenization result will appear in the Plaintext field.
By following the steps above, users can easily manage tokenization as needed on the TAKAKRYPT platform.