Payment Data Tokenization Learning Path

Tokenization definition and core purpose

Tokenization (in data security) is the process of substituting a sensitive data element with a non-sensitive equivalent called a token. The token has no intrinsic or exploitable meaning or value and functions as a reference (identifier) that can be mapped back to the original sensitive data only through a protected tokenization system. The core purpose of tokenization is to reduce risk by minimizing exposure of sensitive information to applications, stores, people, and processes that do not need access to the live data. Typically, a one-way cryptographic function or secure random generation is used to create tokens, and a secure “vault” maintains the mapping between tokens and sensitive data. Only the tokenization system (under strict security controls) can tokenize or detokenize, and tokenization is often used in payment card processing to help meet standards such as PCI DSS by replacing PANs with surrogate values.

0/2 modes complete

Tokenization system vault and mapping

0/2 modes complete