Tokenization and encryption of sensitive data

Abstract

A method and system for anonymizing data are disclosed. The method and system include receiving, at the wrapper, a request to store data in a data source. The wrapper includes a dispatcher and at least one service. The dispatcher receives the communication and is data agnostic. The method and system also include providing the request from the dispatcher to the at least one service and anonymizing, at the service(s), the data to provide anonymized data.

What is claimed is: 
     
         1 . (canceled) 
     
     
         2 . A method, comprising:
 receiving, at a dispatcher, an access request for sensitive data from a requester;   providing, from the dispatcher, to at least one service the access request;   authenticating the requester using the at least one service; and   in the event that the requester is authorized to receive the sensitive data:
 de-anonymizing the sensitive data using the at least one service; and 
 providing de-anonymized data. 
   
     
     
         3 . The method of  claim 2 , wherein the sensitive data includes encrypted data. 
     
     
         4 . The method of  claim 2 , wherein the sensitive data includes tokenized data. 
     
     
         5 . The method of  claim 2 , wherein the de-anonymizing of the sensitive data comprises:
 decrypting the sensitive data to obtain decrypted sensitive data.   
     
     
         6 . The method of  claim 2 , wherein the de-anonymizing of the sensitive data comprises:
 de-tokenizing the sensitive data to obtain de-tokenized sensitive data.   
     
     
         7 . The method of  claim 2 , wherein the authenticating of the requester comprises:
 determining what type of authorization the requester possesses.   
     
     
         8 . The method of  claim 7 , wherein the authenticating of the requester further comprises:
 in response to a determination that the requester is allowed to receive the sensitive data, retrieving the sensitive data.   
     
     
         9 . The method of  claim 7 , wherein the authenticating of the requester further comprises:
 in response to a determination that the requester is allowed to receive anonymized data, retrieving the anonymized data.   
     
     
         10 . A system, comprising:
 a processor configured to:
 receive, at a dispatcher, an access request for anonymized data from a requester; 
 provide, from the dispatcher, to at least one service the access request; 
 authenticate the requester using the at least one service; and 
 in the event that the requester is authorized to receive the anonymized data:
 de-anonymize the anonymized data using the at least one service; and 
 provide de-anonymized data; and 
 
   a memory coupled to the processor and configured to provide the processor with instructions.   
     
     
         11 . The system of  claim 10 , wherein the sensitive data includes encrypted data. 
     
     
         12 . The system of  claim 10 , wherein the sensitive data includes tokenized data. 
     
     
         13 . The system of  claim 10 , wherein the de-anonymizing of the sensitive data comprises to:
 decrypt the sensitive data to obtain decrypted sensitive data.   
     
     
         14 . The system of  claim 10 , wherein the de-anonymizing of the sensitive data comprises to:
 de-tokenize the sensitive data to obtain de-tokenized sensitive data.   
     
     
         15 . The system of  claim 10 , wherein the authenticating of the requester comprises to:
 determine what type of authorization the requester possesses.   
     
     
         16 . The method of  claim 15 , wherein the authenticating of the requester further comprises to:
 in response to a determination that the requester is allowed to receive the sensitive data, retrieve the sensitive data.   
     
     
         17 . The method of  claim 15 , wherein the authenticating of the requester further comprises to:
 in response to a determination that the requester is allowed to receive anonymized data, retrieve the anonymized data.   
     
     
         18 . A computer program product, the computer program product being embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
 receiving, at a dispatcher, an access request for anonymized data from a requester;   providing, from the dispatcher, to at least one service the access request;   authenticating the requester using the at least one service; and   in the event that the requester is authorized to receive the anonymized data:
 de-anonymizing the anonymized data using the at least one service; and 
 providing de-anonymized data. 
   
     
     
         19 . The computer program product of  claim 18 , wherein the sensitive data includes encrypted data. 
     
     
         20 . The computer program product of  claim 18 , wherein the sensitive data includes tokenized data. 
     
     
         21 . The computer program product of  claim 18 , wherein the de-anonymizing of the sensitive data comprises:
 decrypting the sensitive data to obtain decrypted sensitive data.