Tokenization is the most powerful concept being used as per PCIDSS in credit cards domain to mask card number. There are two methods how tokenization works. The differences explained in audio podcast for Vault based and Vault-less methods.