1. A method for distributed tokenization of sensitive strings of characters in a local server, the method comprising: receiving at the local server from a central server one or more token lookup tables having a plurality of tokens, each token comprising at least one character; receiving a sensitive string of characters at the local server; selecting a substring of the sensitive string of characters; replacing the selected substring of the sensitive string of characters with a first token from the received token lookup tables to form an intermediate tokenized string of characters; selecting a substring of the intermediate tokenized string of characters, the selected substring of the intermediate tokenized string of characters including at least one character replaced by the first token; and replacing the selected substring of the intermediate tokenized string of characters with a second token from the received token lookup tables to form a final tokenized string of characters, the second token being different from the first token.
1. A method for distributed tokenization of sensitive strings of characters in a local server, the method comprising: receiving at the local server from a central server one or more token lookup tables having a plurality of tokens, each token comprising at least one character; receiving a sensitive string of characters at the local server; selecting a substring of the sensitive string of characters; replacing the selected substring of the sensitive string of characters with a first token from the received token lookup tables to form an intermediate tokenized string of characters; selecting a substring of the intermediate tokenized string of characters, the selected substring of the intermediate tokenized string of characters including at least one character replaced by the first token; and replacing the selected substring of the intermediate tokenized string of characters with a second token from the received token lookup tables to form a final tokenized string of characters, the second token being different from the first token. 10. The method of claim 1 , further comprising the steps of: transferring from the local server at least one of the sensitive string of characters, the intermediate tokenized string of characters, and the final tokenized string of characters to the central server; and canceling the sensitive string of characters from the local server within a limited time from the transferring, while maintaining at least one of the intermediate tokenized string of characters and the final tokenized string of characters in a local database connected to the local server.