公开(公告)号：US20190340368A1

公开(公告)日：2019-11-07

申请号：US16051390

申请日：2018-07-31

Applicant: salesforce.com, inc.

Inventor： William C. EIDSON ,  Michael Goldberg BOILEN ,  David HACKER

IPC: G06F21/60 ,  G06F21/62 ,  H04L29/06 ,  H04L9/08 ,  G06F11/30 ,  G06F11/34 ,  G06F9/54

Abstract: A first raw value of a first field from the first set of fields is encrypted to generate a first token using a symmetric key encryption mechanism based on a first cryptographic key associated with a first time window after which the first cryptographic key is no longer valid for tokenization of raw fields of raw log records. After the first time window has elapsed, a second raw value of a second field from the second set of fields is encrypted to generate a second token using the symmetric key encryption mechanism based on a second cryptographic key that is different from the first cryptographic key. The second cryptographic key is associated with a third time window that occurs after the first time window and after which the second cryptographic key is no longer valid for tokenization of raw fields of raw log records.

公开(公告)号：US20190342088A1

公开(公告)日：2019-11-07

申请号：US16051403

申请日：2018-07-31

Applicant: salesforce.com, inc.

Inventor： William C. EIDSON ,  David HACKER ,  Yu CHEN ,  Michael Goldberg BOILEN ,  Shakti Prakash DAS

IPC: H04L9/08 ,  H04L9/32 ,  H04L9/14 ,  H04L29/08

Abstract: A method and apparatus for tokenization of user-traceable data are described. User traceable data is data that is not directly personal data but can be traced back to the identity or an activity of the user. A first raw value is encrypted into a first token using a symmetric key encryption mechanism based on a combination of a second raw value including personal data of a user and a second token resulting from the tokenization of the second raw value where the first token is an anonymized representation of the first raw value.

公开(公告)号：US20190340388A1

公开(公告)日：2019-11-07

申请号：US16051414

申请日：2018-07-31

Applicant: Salesforce.com, inc.

Inventor： William C. EIDSON ,  David HACKER ,  Yu CHEN ,  Hui Fung Herman KWONG ,  Wolfgang KRAUSE

IPC: G06F21/62 ,  H04L9/32

Abstract: A method and a system for enabling multiple log record consumers to comply with regulations and requirements regarding privacy and handling of data are described. A determination, based on a log record format being of a first of the log record types, that a first field from a raw log record is to be tokenized based on a first tokenization strategy of multiple tokenization strategies in the first log record type, is performed. Each one of the tokenization strategies identifies a tokenization mechanism from tokenization mechanisms for generating a token from a raw value to enable compliance with a set of regulations and requirements regarding privacy and the handling of data. For a first raw value in the first field a first token is generated that is an anonymized representation of the first raw value using a tokenization mechanism identified by the first tokenization strategy in the log record type.