Multi-network tokenization processing

Patent metadata

Field	Value
Publication number	US-11676138-B2
Application number	US-201916591403-A
Country	US
Kind code	B2
Filing date	Oct 2, 2019
Priority date	Aug 8, 2013
Publication date	Jun 13, 2023
Grant date	Jun 13, 2023

Abstract

Systems, apparatuses, and methods are provided for enabling a transaction using a token associated with a first payment network to be conducted using a second payment network. When a transaction using a token is submitted to a payment network, the payment network can determine the payment network associated with the token. If the token is associated with a second payment network, a token verification request including the token can be sent to the second payment network. The second payment network can then return a token verification response including a primary account identifier such as a primary account number (PAN) corresponding to the token and a validation result. The transaction may then be processed using the primary account identifier.

First claim

What is claimed is:

1. A computer-implemented method comprising:
receiving, by a first payment network comprising a server computer from a token requestor device, an authorization request message for a transaction including a token comprising a predetermined issuer identifier of the token, a token requestor identifier, and transaction data, wherein the token is a substitute for a primary account identifier associated with an account;
identifying, by the first payment network comprising the server computer, a network token system associated with the token based on the predetermined issuer identifier of the token, the network token system being operated by a second payment network wherein identifying, by the first payment network comprising the server computer, the network token system associated with the token comprises:
sending, by the first payment network comprising the server computer, a token verification request message to the network token system of the second payment network, the token verification request message including the token, the transaction data, a token request timestamp, and a token expiration timestamp, wherein the network token system of the second payment network determines the primary account identifier associated with the token and validates the use of the token for the transaction by determining whether the token can be used for the transaction using at least the token requestor identifier; receiving, by the first payment network comprising the server computer and from the network token system of the second payment network, a token verification response message including the primary account identifier and a validation result indicating whether the use of the token for the transaction is authorized; and
sending, by the first payment network comprising the server computer, a modified authorization request message including the primary account identifier, the validation result, and the transaction data to an issuer of the account associated with the primary account identifier.

2. The method of claim 1 , wherein the authorization request message received by the first payment network comprising the server computer further includes restrictions associated with the token, and wherein validating the use of the token for the transaction comprises determining whether the restrictions associated with the token preclude the transaction.

3. The method of claim 1 , wherein the authorization request message received by the first payment network comprising the server computer further includes an encrypted PIN block comprising a PIN associated with the account, and wherein the method further comprises:
determining, by the first payment network comprising the server computer, an issuer PIN key using the primary account identifier; and
validating, by the first payment network comprising the server computer, the PIN using the determined issuer PIN key.

4. The method of claim 1 , wherein the authorization request message received by the first payment network comprising the server computer further includes an encrypted PIN block comprising a PIN associated with the account, wherein the encrypted PIN block is generated based on the token, and wherein the method further comprises:
translating, by the first payment network comprising the server computer, the encrypted PIN block to generate a decrypted PIN block based on the primary account identifier; and
sending, by the first payment network comprising the server computer, the decrypted PIN block to the issuer, wherein the issuer validates the PIN based on the decrypted PIN block.

5. The method of claim 1 , wherein the authorization request message received by the first payment network comprising the server computer further includes a token presentment mode, wherein the network token system of the second payment network validates the use of the token for the transaction using the token presentment mode.

6. The method of claim 1 , wherein the authorization request message received by the first payment network comprising the server computer further includes a token assurance level code, wherein the token assurance level code indicates a level of confidence that the token was requested by an authorized entity, and wherein the network token system of the second payment network validates the use of the token for the transaction using the token assurance level code.

7. The method of claim 1 , wherein the issuer identifier comprises a predetermined number of digits of the token.

8. The method of claim 1 , wherein prior to the transaction, the network token system operated by the second payment network receives the primary account identifier and generates the token.

9. The method of claim 1 , wherein the token verification request message further comprises a token presentment mode indicating a mode through which the token was provided and wherein validating that the first payment network is entitled to make a request for the primary account identifier associated with the token comprises validating the token presentment mode.

10. The method of claim 9 , wherein the token presentment mode indicates a number associated with a type of the transaction, the type of the transaction including a nearfield communication (“NFC”) based transaction or a QR Code based transaction and wherein validating that the first payment network is entitled to make a request for the primary account identifier associated with the token further comprises validating the number associated with the type of the token presentment mode.

11. The method of claim 1 , wherein the token verification request message further comprises a token cryptogram associated with the token, the token cryptogram representing encrypted data associated with the primary account identifier and wherein validating that the first payment network is entitled to make a request for the primary account identifier associated with the token comprises validating the token cryptogram.

12. The method of claim 1 , further comprising:
receiving, from the issuer of the account, an authorization response message indicating whether the transaction is approved or declined.

13. A server computer associated with a first payment network comprising:
a processor; and
a non-transitory storage medium comprising code that, when executed by the processor, performs a method comprising:
receiving, from a token requestor device, an authorization request message for a transaction including a token comprising a predetermined issuer identifier of the token, a token requestor identifier, and transaction data, wherein the token is a substitute for a primary account identifier associated with an account;
identifying a network token system associated with the token based on the predetermined issuer identifier of the token, the network token system being operated by a second payment network wherein identifying the network token system associated with the token comprises:
sending a token verification request message to the network token system of the second payment network, the token verification request message including the token, the transaction data, a token request timestamp, and a token expiration timestamp, wherein the network token system of the second payment network determines the primary account identifier associated with the token, and validates the use of the token for the transaction by determining whether the token can be used for the transaction using at least the token requestor identifier;
receiving, from the network token system of the second payment network, a token verification response message including the primary account identifier and a validation result indicating whether the use of

Assignees

• Visa Int Service Ass

Inventors

• Narayan Prasanna L
• Powell Glenn
• Sheets John
• Tait Paul
• Carpenter Andrew

Classifications

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/38215 Primary

  Use of certificates or encrypted proofs of transaction rights · CPC title