Skip to main content

Advances, Systems and Applications

Table 5 Tokenization techniques for obscuring bank customers data records

From: Trusted framework for online banking in public cloud using multi-factor authentication and privacy protection gateway

Techniques

Description

Customer name

Date of birth

Street

City

Phone number

Account number

Account balance

 

Sample data

Alice

17.12.1973

Side hill

Downtown

0418-444-4467

6207693489

$5000

Bob

24.09.1990

North

Brooklyn

0418-444-6423

3001337388

$10000

Permutation

- Maps each data field value to a distinct new value.

- Using secure enclave we can translate new value to original value.

Eva

17.12.1973

Side hill

Downtown

0418-444-4467

6207693489

$5000

Rob

24.09.1990

North

Brooklyn

0418-444-6423

3001337388

$10000

Customer name data field values mapped to a distinct new values.

Prefix-Preserving

- Retains the birth year on date of birth or Replace with a dummy date.

- Useful for preserving date field format.

Alice

07.02.1973

Side hill

Downtown

0418-444-4467

6207693489

$5000

Bob

14.04.1990

North

Brooklyn

0418-444-6423

3001337388

$10000

The birth year will be preserved, but the date of birth is scrambled.

Hashing

- Maps different data field values to a new single value.

- Useful for translating large amount data values to a new value.

Alice

17.12.1973

8704274623

0418-444-4467

6207693489

$5000

Bob

24.09.1990

7909231657

0418-444-6423

3001337388

$10000

Each customer street and city is mapped to a unique new value.

Truncation (or) Non-disclosure

- Data field values to be shortened by truncating end values.

- Useful for tokenizing fields.

Alice

17.12.1973

Side hill

Downtown

0418

6207693489

$5000

Bob

24.09.1990

North

Brooklyn

0418

3001337388

$10000

The phone number is shortened, but still preserves the customer location.

Hiding

- Replaces sensitive value with a character (typically x) or constant value ‘0’.

- Useful for preventing sensitive data fields.

Alice

17.12.1973

Side hill

Downtown

0418-444-4467

xxxxxx3489

$5000

Bob

24.09.1990

North

Brooklyn

0418-444-6423

xxxxxx7388

$10000

Except last four digits of an account number, all other digits will be substituted with a character ‘x’.

Shift

- A data field value is added to a fixed offset.

- Useful for obscuring data field, while allowing authorized users to perform computation in cloud.

Alice

17.12.1973

Side hill

Downtown

0418-444-4467

6207693489

$15000

Bob

24.09.1990

North

Brooklyn

0418-444-6423

3001337388

$20000

A fixed offset $10000 is added to the account balance values.