| CPC G06F 21/6245 (2013.01) [H04L 9/0643 (2013.01); H04L 9/0819 (2013.01)] | 20 Claims |

|
1. A method, comprising:
receiving a first data record comprising one or more sensitive data fields and one or more non-sensitive data fields;
generating an encrypted version of the one or more sensitive data fields by encrypting the one or more sensitive data fields using an encryption key;
generating a one-way hashed version of the one or more sensitive data fields by hashing the one or more sensitive data fields using a one-way hash function, wherein the one-way hash function comprises one-way hashing in which the one or more sensitive data fields cannot be recovered from the one or more hashed data fields;
storing a second data record comprising all three of: (i) the one or more non-sensitive data fields, (ii) the encrypted version of the one or more sensitive data fields, and (iii) the one-way hashed version of the one or more sensitive data fields hashed using the one-way hash function, wherein the one or more sensitive data fields in an original form are not stored in the second data record; and
storing a first mapping associating the encrypted version of the one or more sensitive data fields with the encryption key to enable access to the one or more sensitive data fields via the second data record.
|