Cybersecurity vsTokenization

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Sandra Lambert
Cybersecurity vs. Tokenization
PDAC-R02
CEO
Lambert & Associates
ANSI X9F4 Wo...

#RSAC
Cybersecurity vs. Tokenization - Agenda
2
Tokenization Fundamentals
Top Four Controversial Implementation Issues
Pa...

#RSAC
Tokenization Fundamentals

#RSAC
Who Wants Tokenization and Where?
4
Definition of Tokenization
PCI: Tokenization is a process by which the Primary ...

#RSAC
What is Tokenization and Why Do It?
5
Tokenization
PAN
SSN
Name
123
ABC
789
Random
Encryption
Table
MAC
4400 1111 1...

#RSAC
When Can It Be Used?
6
• For example: primary account number (PAN)
• Token 1: middle 6 digits, note check digit
• ...

#RSAC
What is Detokenization? Encryption Method
7
Encryption
Decryption
USV Token
Cryptographic
Key
Tokenization
Detokeni...

#RSAC
What is Detokenization? MAC Method
8
MAC
USV Token
Cryptographic
Key
Tokenization
Detokenization
USV Û Token
Tokeni...

#RSAC
What is Detokenization? Random Method
9
Random
USV Token
Tokenization
Detokenization
USV Û Token
RNG
Tokenization Se...

#RSAC
What is Detokenization? Table Method
10
Table
USV Token
Tokenization
Detokenization
PRNGRNG
Tokenization Service
Tab...

#RSAC
Implementation Issue:
Payment vs. Non-Payment Tokens

#RSAC
EMV Payment Tokenization
12
4400 1111 1111 1113
Alice Smith
TSP
Issuer
Wallet
PAN
EMV EMV
PAN
Merchant
EMV
Post-auth...

#RSAC
Non-Payment Tokenization
13
Tokenization
Requesting
Interface
(TRI)
Tokenization
Service
(TS)
USV
Token
Tokenizati...

#RSAC
Implementation Issue:
Tokenization vs. Detokenization

#RSAC
Tokenization Environments: Internal
15
Tokenization
Requesting
Interface
Tokenization
Service
USV
Token
Tokenizati...

#RSAC
Tokenization Environments: External
16
TRI TS
USV
Token
Tokenization System
RE
RE
USV Û Token
RE
RE
NT
NT
NT
Author...

#RSAC
Tokenization Environments: Multiple
17
Issues
Multi-tokenization systems interoperability
Multi-tokenization system...

#RSAC
Implementation Issue:
System Isolation Requirements

#RSAC
Organization’s Internal Network
Tokenization Isolation
19
Tokenization
Requesting
Interface
Tokenization
Service
US...

#RSAC
Implementation Issue:
Cryptographic Hardware vs. Software

#RSAC
Cryptography: Encryption Method
21
Encryption
Decryption
USV Token
Tokenization
Detokenization
Tokenization Service
...

#RSAC
Cryptography: MAC Method
22
MAC
USV Token
Tokenization
USV Û Token
Tokenization Service
HSM
HSMs are
typically
opt...

#RSAC
Cryptography: Random Method
23
Random
USV Token
Tokenization
Detokenization
USV Û Token
Tokenization Service
RNG HSM...

#RSAC
Cryptography: Table Method
24
Table
USV Token
Tokenization
Detokenization
Tokenization Service
Table
HSMs have
insu...

#RSAC
Conclusions

#RSAC
Apply What You’ve Learned Today…
26
Share your tokenization understanding
Determine your tokenization needs (if any)...

#RSAC
Conclusions
27
Tokenization can protect your underlying sensitive data
Tread carefully through the major cybersecur...

#RSAC
References
28
Accredited Standards Committee X9 www.x9.org
American National Standard X9.82 Random Number Generati...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 28 Ad

View on Slideshare

1 of 28 Ad