Tokenization and Encryption are two different cryptographic methods used for data security. Both of them can be used to protect sensitive cloud data such has cardholder information, financial account numbers and personal data. There are also industry and government regulations that require organisations that handle user data to keep that data either encrypted, or with a service provider who provides a tokenization option.

What is encryption?

Encryption is the process of turning plain text into cipher text. Using a shared key between the sender and receiver of the sensitive data, the text can be decrypted from the cipher text. Any individual that has access to the key can use it to decrypt the data. Encryption is not bulletproof; the strength of the encryption is based on the key or algorithm used to secure the data. It is good for unstructured data that is not exchanged frequently.

Benefits of encryption:

• Privacy; ensuring only the intended sender and receiver can access the data
• Authentication; both sender and receiver parties need the shared key to access the data
• Security; helps prevent data breaches when the data is in transit or not in use
• Can be used across various devices
• Safe way to share data when working remotely
• Data integrity

What is tokenization?

Tokenization is the process of exchanging a token to access sensitive information. This token is a placeholder, there is no sensitive information stored on the token, and therefore, it cannot be reversed into the original data. It is good for structured data that need to be on file to verify identities and easily accessible.

To be able to gain access to the sensitive information, individuals in possession of the token have additional security checks and requirements to verify their identity. This adds a level of security, as the tokens cannot be used for fraudulent purposes. In the event that a cybercriminal steals your token, they have stolen nothing of real value, as they cannot access the sensitive data with only the token itself.


Examples of tokenization are:

• Android Pay and Apple Pay
• E-commerce sites
• Organisations that keep a customer’s card on file

Benefits of tokenization:

• Better protection against cybercriminals
• More compatible with complying with industry and government standards
• Less resource intensive than encryption
• Enhances consumer trust

References
Cloudflare 2021, What is Encryption?, Cloudflare, viewed 19 January 2021,https://www.cloudflare.com/learning/ssl/what-is-encryption/.

Matthews, K 2019, 7 Advantages of Using Encryption Technology for Data Protection, Smart Data Collective, viewed 19 January 2021,https://www.smartdatacollective.com/5-advantages-using-encryption-technology-data-protection/#:~:text=7%20Advantages%20of%20Using%20Encryption%20Technology%20for%20Data,Encryption%20Technology%20for%20Data%20Protection%20Could%20Increase%20Trust..

Rouse, M 2020, What is Tokenization?, Tech Target | Search Security, viewed 19 January 2021,https://searchsecurity.techtarget.com/definition/tokenization#:~:text=Tokenization%20is%20the%20process%20of%20replacing%20sensitive%20data,information%20about%20the%20data%20without%20compromising%20its%20security..

TokenEx 2021, Tokenization vs. Encryption: Which is better for your business?, Cloud Security Alliance, viewed 19 January 2021,https://cloudsecurityalliance.org/blog/2021/01/06/tokenization-vs-encryption-which-is-better-for-your-business/.