1. A method of selectively re-encrypting a subset of encrypted data values, for use in a data processing operation for protecting sensitive data, said method comprising the computer-implemented steps of:
establishing a data store for storing a plurality of records, wherein each record comprises an encrypted value associated with original sensitive data, and a key profile number associated with an encryption key that was used to generate said encrypted value;
identifying a compromised key and a compromised key profile number associated therewith;
generating a new key and a new key profile number associated therewith;
identifying in said data store a subset of records, wherein said subset is characterized by a key profile number that matches said compromised key profile number, and for each record in said subset:
(a) de-encrypting said encrypted value using said compromised key to reveal said original sensitive data;
(b) re-encrypting said original sensitive data using said new key to generate a new encrypted data value;
(c) replacing said encrypted value with said new encrypted data value; and
(d) replacing said compromised key profile number with said new key profile number.
2. The method of claim 1, wherein each said record further comprises a token value associated with said original sensitive data, and wherein said method is executed without changing said token value.
3. The method of claim 1, wherein said step of generating said new key includes generating an activation date associated therewith, and wherein said step of identifying occurs after said activation date.
4. A method for activating a new encryption key on a future date, for use in a data processing operation for protecting sensitive data, said method comprising the computer-implemented steps of:
establishing a data processing operation comprising a key manager for generating encryption keys, a token manager for encrypting sensitive data, and a data vault for storing encrypted data;
establishing a key management data store, in communication with said key manager, for storing a plurality of records, wherein each record comprises an encryption key, a key profile number, and an activation date;
generating a new record, comprising a new encryption key, a new key profile number, a new activation date; and
distributing said new record to said token manager for implementation of said new encryption key and said new key profile number upon reaching said activation date.
5. A method of encryption key retirement for use in a data processing operation for protecting sensitive data, said method comprising the computer-implemented steps of:
establishing a data processing operation comprising a key manager for generating encryption keys, a token manager for encrypting sensitive data, and a data vault for storing encrypted data;
establishing a data store, in communication with said data vault, for storing a plurality of records, wherein each record comprises an encrypted value associated with original sensitive data, and a key profile number associated with an encryption key that was used to generate said encrypted value;
identifying a compromised key and a compromised key profile number associated therewith;
generating a new key and a new key profile number associated therewith;
identifying in said data store a subset of records, wherein said subset is characterized by a key profile number that matches said compromised key profile number, and for each record in said subset:
(a) de-encrypting said encrypted value using said compromised key to reveal said original sensitive data;
(b) re-encrypting said original sensitive data using said new key to generate a new encrypted data value;
(c) replacing said encrypted value with said new encrypted data value; and
(d) replacing said compromised key profile number with said new key profile number.
6. The method of claim 5, wherein each said record further comprises a token value associated with said original sensitive data, and wherein said method is executed without changing said token value.
7. The method of claim 5, wherein said step of generating said new key includes generating an activation date associated therewith, and wherein said step of identifying occurs after said activation date.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for transesterification of fats or oils comprising glycerine triesters of fatty acids with methanol; said method comprising steps of:
(a) providing a catalyst comprising a metal oxide selected from the group consisting of oxides of Sn, Zn, Ge(II), Cu(II), Ni(II), Fe(II), Fe(III), Al(III), Pt(IV), V(IV) and V(V) immobilized on an ion exchange resin having sulfonic acid functionality; and
(b) contacting said catalyst with a reaction mixture comprising said fats or oils and methanol at a temperature from 45\xb0 C. to 100\xb0 C.
2. The method of claim 1 in which the reaction mixture is heated in a temperature range from 55\xb0 C. to 80\xb0 C. for at least 0.5 hours.
3. The method of claim 2 in which said metal oxide is a dialkyl tin oxide.
4. The method of claim 3 in which alkyl groups in the dialkyl tin oxide are C2 to C4 alkyl groups.
5. The method of claim 1 in which said fats or oils comprise from 1% to 99% free fatty acids.
6. The method of claim 5 in which the reaction mixture is heated in a temperature range from 55\xb0 C. to 80\xb0 C. for at least 0.5 hours.
7. The method of claim 6 in which said metal oxide is a dialkyl tin oxide.
8. The method of claim 7 in which alkyl groups in the dialkyl tin oxide are C2 to C4 alkyl groups.
9. The method of claim 8 in which said fats or oils comprise 1% to 20% free fatty acids.
10. The method of claim 9 in which said dialkyl tin oxide is dibutyl tin oxide.
11. The method of claim 4 in which said dialkyl tin oxide is dibutyl tin oxide.
12. The method of claim 10 in which the reaction mixture is heated in a temperature range from 60\xb0 C. to 75\xb0 C. for at least 3 hours.
13. The method of claim 11 in which the reaction mixture is heated in a temperature range from 60\xb0 C. to 75\xb0 C. for at least 3 hours.
14. The method of claim 12 in which said fats or oils are vegetable oils.
15. The method of claim 13 in which said fats or oils axe vegetable oils.
16. The method of claim 6 in which said fats or oils comprise 1% to 20% free fatty acids.