De-identification method where a unique token is substituted for real data.

De-identification method where a unique token is substituted for real data.

• A. Obfuscation
• B. Tokenization
• C. Password manager
• D. Steganography

Answer: (B)

Tokenization is a de-identification method where sensitive data is replaced with a non-sensitive placeholder, a unique token. The mapping between token and real data sits in a secure token vault, and authorized systems can translate the token back to the original value when needed. This lets you keep data usable for processing and linking records (because the token preserves structure and relationships) while greatly reducing exposure of the actual data. The approach is designed so that even if the tokenized data is exposed, it reveals nothing about the underlying values without access to the vault. This differs from obfuscation, which hides data without a controlled, reversible mapping and can be more easily reverse-engineered. Steganography hides information inside another file and isn’t typically used for replacing data in databases. A password manager stores and autofills credentials, not substituting values in datasets.

Tokenization is a de-identification method where sensitive data is replaced with a non-sensitive placeholder, a unique token. The mapping between token and real data sits in a secure token vault, and authorized systems can translate the token back to the original value when needed. This lets you keep data usable for processing and linking records (because the token preserves structure and relationships) while greatly reducing exposure of the actual data. The approach is designed so that even if the tokenized data is exposed, it reveals nothing about the underlying values without access to the vault.

This differs from obfuscation, which hides data without a controlled, reversible mapping and can be more easily reverse-engineered. Steganography hides information inside another file and isn’t typically used for replacing data in databases. A password manager stores and autofills credentials, not substituting values in datasets.