US 11,711,350 B2
Systems and processes for vaultless tokenization and encryption
Timothy William Barnett, Roswell, GA (US); Grant Putre, Roswell, GA (US); and Donal McCarthy, Waterford (IE)
Assigned to Bluefin Payment Systems LLC, Atlanta, GA (US)
Filed by Bluefin Payment Systems LLC, Atlanta, GA (US)
Filed on Apr. 6, 2021, as Appl. No. 17/223,157.
Application 17/223,157 is a continuation in part of application No. 15/931,432, filed on May 13, 2020, granted, now 11,070,534.
Application 15/931,432 is a continuation in part of application No. 15/997,205, filed on Jun. 4, 2018, abandoned.
Claims priority of provisional application 62/847,010, filed on May 13, 2019.
Claims priority of provisional application 62/514,324, filed on Jun. 2, 2017.
Prior Publication US 2021/0226934 A1, Jul. 22, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 21/62 (2013.01)
CPC H04L 63/0471 (2013.01) [G06F 21/6254 (2013.01); H04L 63/0421 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A data security system comprising:
an iframe and tokenization system comprising:
an iframe service for producing iframes in communication with a token service;
the token service for creating and detokenizing format preserving vaultless tokens, wherein the iframe and tokenization system is communicatively connected to a partner system and configured to:
receive an iframe request from a browser accessing the partner system, the iframe request comprising a template identifier defining one or more obfuscation parameters for data to be received by an iframe and representing a template to cause rendering of the iframe;
cause the iframe to be rendered according to the template at the browser accessing the partner system;
receive certain data input into the iframe from the browser;
vaultlessly tokenize the certain data as one or more data tokens via the token service according to the one or more obfuscation parameters;
store the one or more data tokens in a cache;
create a token identifier comprising an obfuscated version of the template identifier;
transmit the token identifier to a browser to be passed to the partner system; and
upon receiving the token identifier from the partner system, transmit the one or more data tokens to the partner system, wherein the partner system lacks access to the certain data in the one or more data tokens without the token identifier.