System and method of providing tokenization as a service

Patent metadata

Field	Value
Publication number	US-10607217-B2
Application number	US-201715703819-A
Country	US
Kind code	B2
Filing date	Sep 13, 2017
Priority date	Jan 26, 2012
Publication date	Mar 31, 2020
Grant date	Mar 31, 2020

Abstract

Systems, devices, apparatuses, and methods for providing tokenization as a service are provided. Embodiments of the invention involve decoupling “tokenization service” from other services offered by a merchant service provider, and offering the tokenization service as a stand alone service. In accordance with an embodiment, a merchant service provider can receive payment data associated with a transaction between a consumer and a first entity. The merchant service provider can generate a payment token that represents the payment data and transmit a copy of the payment token to the first entity. The first entity can then transmit the payment token and order information to a second entity specified in the transaction. The merchant service provider can subsequently receive a request to complete the transaction from the second entity. The request can include the copy of the payment token from the second entity.

First claim

What is claimed is:

1. A method for tokenizing payment data received from a computer of a consumer, the method comprising:
receiving, at a merchant service provider computer, order information from a computer of a first entity for a transaction to be fulfilled by a second entity;
in response to receiving the order information, receiving, at the merchant service provider computer, the payment data from the computer of the consumer, the payment data associated with the transaction initiated between the computer of the consumer and the computer of the first entity, wherein the payment data is received at the merchant service provider computer from the consumer through an interaction between the consumer and a webpage of the first entity, wherein the payment data includes an actual payment account;
generating, at the merchant service provider computer, a payment token and payment token access data associated with the payment token, wherein the payment token is anonymized payment data;
storing, by the merchant service provider computer, the payment token and the payment token access data;
transmitting, from the merchant service provider computer, the payment token access data to the first entity, wherein the first entity provides the payment token access data to the second entity;
in response to transmitting the payment token access data to the first entity, receiving, at the merchant service provider computer from a computer of the second entity, a request to complete the transaction initiated between the computer of the consumer and the computer of the first entity, the request including the payment token access data;
in response to receiving the request:
retrieving, at the merchant service provider computer, the payment token and the payment data using the payment token access data; and
performing at least one of the following:
processing, by the merchant service provider computer, the transaction using the payment data; or
transmitting, by the merchant service provider computer, at least one of the payment data or the payment token to the computer of the second entity for processing the transaction.

2. The method of claim 1 , further comprising:
transmitting the payment data and the order information associated with the transaction initiated between the computer of the consumer and the computer of the first entity to a payment processing computer for processing on behalf of the second entity.

3. The method of claim 1 wherein the request to complete the transaction includes a request for the merchant service provider computer to process the transaction on behalf of the second entity.

4. The method of claim 1 wherein the request to complete the transaction includes a request to return the payment data corresponding to the payment token to the second entity.

5. The method of claim 1 wherein the merchant service provider computer is a hosted order page (HOP) service provider computer and the payment data is received through a HOP.

6. The method of claim 1 wherein the merchant service provider computer is a silent order post (SOP) service provider computer and the payment data is received through a SOP.

7. The method of claim 1 , further comprising:
receiving, at the merchant service provider computer from the computer of the second entity, an authorization request message including the payment token;
determining, by the merchant service provider computer, that a trust relationship exists between merchant service provider and the second entity or between the first entity and the second entity; and
transmitting, by the merchant service provider computer to the computer of the second entity, an authorization response message authorizing the transaction based on determining the trust relationship.

8. A system, comprising:
a merchant service provider computer, including an electronic processor and a memory coupled to the electronic processor storing instructions that when executed by the electronic processor causes the electronic processor to perform operations of:
receiving order information from a computer of a first entity for a transaction to be fulfilled by a second entity;
in response to receiving the order information, receiving a payment data from a computer of a consumer, the payment data associated with the transaction initiated between the computer of the consumer and the computer of the first entity, wherein the payment data is received from the consumer through an interaction between the consumer and a webpage of the first entity, wherein the payment data includes an actual payment account;
generating a payment token and payment token access data associated with the payment token, wherein the payment token is anonymized payment data;
storing, by the merchant service provider computer, the payment token and the payment token access data;
transmitting, from the merchant service provider computer, the payment token access data to the first entity, wherein the first entity provides the payment token to the second entity;
in response to transmitting the payment token access data to the first entity, receiving, at the merchant service provider computer from a computer of the second entity, a request to complete the transaction initiated between the computer of the consumer and the computer of the first entity, the request including the payment token access data;
in response to receiving the request:
retrieving, at the merchant service provider computer, the payment token and the payment data using the payment token access data; and
performing at least one of the following:
processing, by the merchant service provider computer, the transaction using the payment data; or
transmitting, by the merchant service provider computer, at least one of the payment data or the payment token to the computer of the second entity for processing the transaction.

9. The system of claim 8 , wherein the operations further includes: transmitting the payment data and the order information associated with the transaction initiated between the computer of the consumer and the computer of the first entity to a payment processing computer for processing on behalf of the second entity.

10. The system of claim 8 wherein the request to complete the transaction includes a request for the merchant service provider computer to process the transaction on behalf of the second entity.

11. The system of claim 8 wherein the request to complete the transaction includes a request to return the payment data corresponding to the payment token to the second entity.

12. The system of claim 8 wherein the merchant service provider computer is a hosted order page (HOP) service provider computer and the payment data is received through a HOP.

13. The system of claim 8 wherein the merchant service provider computer is a silent order post (SOP) service provider computer and the payment data is received through a SOP.

14. The system of claim 8 , wherein the operations further includes: receiving, from the computer of the second entity, an authorization request message including the payment token; determining that a trust relationship exists between merchant service provider and the second entity or between the first entity and the second entity; and transmitting, to the computer of the second entity, an authorization response message authorizing the transaction based on determining the trust relationship.

Assignees

• Visa Int Service Ass

Inventors

• Anderson Lisa
• Cushley Seamus

Classifications

• G06Q20/26

  Debit schemes, e.g. "pay now" · CPC title

• G06Q20/383

  Anonymous user system · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title

• G06Q20/385 Primary

  using an alias or single-use codes · CPC title