A retail company must protect customer national ID numbers stored in a legacy mainframe application. The application performs field-length validations and expects the ID field to retain its original numeric format and length. The privacy engineering team needs a data-oriented technique that protects the identifier while allowing the legacy application to continue functioning without code changes to its validation logic. Which technique BEST meets these requirements?