1. A method for distributed tokenization of sensitive strings of characters in a local server, the method comprising: receiving at the local server from a central server one or more token lookup tables having a plurality of tokens, each token comprising at least one character; receiving a sensitive string of characters at the local server; selecting a substring of the sensitive string of characters; replacing the selected substring of the sensitive string of characters with a first token from the received token lookup tables to form an intermediate tokenized string of characters; selecting a substring of the intermediate tokenized string of characters, the selected substring of the intermediate tokenized string of characters including at least one character replaced by the first token; and replacing the selected substring of the intermediate tokenized string of characters with a second token from the received token lookup tables to form a final tokenized string of characters, the second token being different from the first token.