Virtual access credential interaction system and method

Patent metadata

Field	Value
Publication number	US-11849042-B2
Application number	US-201917432231-A
Country	US
Kind code	B2
Filing date	May 17, 2019
Priority date	May 17, 2019
Publication date	Dec 19, 2023
Grant date	Dec 19, 2023

Abstract

A method includes an authorizing entity computer receiving a request for a virtual access credential from a communication device operated by a user. The authorizing entity computer can then transmit the virtual access credential to the communication device operated by the user. The authorizing entity computer can then receive an authorization request message comprising the virtual access credential from an access device associated with a resource provider for an interaction between the user and the resource provider. The authorizing entity computer can then determine an account identifier linked to the virtual access credential. The account identifier being associated with an account maintained by an external entity computer that is external to the authorizing entity computer. The authorizing entity computer can then determine that the interaction is authorized based upon determining the account identifier associated with the virtual access credential.

First claim

What is claimed is:

1. A method comprising:
receiving, by an authorizing entity computer, a request for a virtual access credential from a communication device operated by a user, the request including user data;
generating, by the authorizing entity computer, the virtual access credential based at least in part on the user data;
transmitting, by the authorizing entity computer, the virtual access credential to the communication device operated by the user, wherein the virtual access credential is tokenized into an access token by a token service;
receiving, by a processing computer communicatively coupled to the authorizing entity computer, an authorization request message comprising the access token for an interaction between the user and a resource provider, wherein the processing computer is associated with the token service;
de-tokenizing, by the processing computer, the access token to obtain the virtual access credential, wherein the processing computer is not configured to process the virtual access credential;
modifying, by the processing computer, the authorization request message to replace the access token with the virtual access credential;
transmitting, by the processing computer, the authorization request message to the authorizing entity computer;
receiving, by the authorizing entity computer, the authorization request message comprising the virtual access credential from the processing computer;
determining, by the authorizing entity computer, an account identifier linked to the virtual access credential and communication data associated with the account identifier, the communication data including a message type for formatting a confirmation request message for an external entity computer, the account identifier being associated with an account maintained by the external entity computer without being linked to the processing computer, the external entity computer being external to the authorizing entity computer and the processing computer;
formatting, by the authorizing entity computer, the confirmation request message based on the communication data including the message type, by mapping data elements in data fields in the authorization request message to data elements in data fields in the confirmation request message, the confirmation request message including the account identifier;
transmitting, by the authorizing entity computer and to the external entity computer, the formatted confirmation request message;
receiving, by the authorizing entity computer and from the external entity computer, a confirmation response message that confirms the data of the interaction;
determining, by the authorizing entity computer, that the interaction is authorized based upon determining the account identifier associated with the virtual access credential and the confirmation response message;
generating, by the authorizing entity computer, an authorization response message;
transmitting, by the authorizing entity computer, the authorization response message to the processing computer; and
initiating, by the authorizing entity computer, a resolution process with the resource provider through the processing computer, wherein the resolution process includes a settlement process that transfers funds between the authorizing entity computer, the external entity computer, and the processing computer.

2. The method of claim 1 , wherein the account is a value account.

3. The method of claim 1 further comprising:
storing, by the authorizing entity computer, a table comprising a plurality of virtual access credentials linked to a plurality of different account identifiers, wherein the virtual access credential and the account identifier are in the table.

4. The method of claim 3 , wherein the table further comprises a plurality of user identifiers, each user identifier being linked to one or more virtual credential and account identifier pairs.

5. The method of claim 4 , wherein the table further comprises the communication data for communicating with external entities.

6. The method of claim 1 further comprising:
formatting, by the authorizing entity computer, the confirmation request message based upon second data in the authorization request message and using the account identifier.

7. The method of claim 6 , wherein the formatting, transmitting, and receiving, are performed before generating the authorization response message and after receiving the authorization request message.

8. The method of claim 1 further comprising, after receiving the authorization request message:
transmitting, by the authorizing entity computer, an authentication request message to the communication device; and
receiving, by the authorizing entity computer, an authentication response message.

9. The method of claim 8 , wherein the authentication request message further comprises a request to use the account identifier and the authentication response message further comprises a response to use the account identifier.

10. The method of claim 1 further comprising:
performing a resolution process between the authorizing entity computer and a transport computer associated with the resource provider.

11. The method of claim 10 , wherein the authorizing entity computer maintains a resolution account in communication with the external entity computer.

12. The method of claim 1 , wherein the authorization request message is in an ISO 8583 format and contains a transaction amount, and the confirmation request message is in an ISO 20022 format and contains the transaction amount.

13. The method of claim 12 , wherein the authorizing entity computer maintains a resolution account in communication with the external entity computer, and wherein the authorizing entity computer receives funds from the external entity computer and other external entities in the resolution account, and wherein the authorizing entity computer transfers the transaction amount to the processing computer.

14. A system comprising:
an access device; and
an authorizing entity computer in communication with the access device, the authorizing entity computer comprising a processor, a memory device, and a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor for implementing a method comprising:
receiving a request for a virtual access credential from a communication device operated by a user, the request including user data;
generating the virtual access credential based at least in part on the user data;
transmitting the virtual access credential to the communication device operated by the user, wherein the virtual access credential is tokenized into an access token by a token service;

a processing computer communicatively coupled to the authorizing entity computer, the processing computer comprising a processor, a memory device, and a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor to:
receive an authorization request message comprising the access token for an interaction between the user and a resource provider, wherein the processing computer is associated with the token service;
de-tokenize the access token to obtain the virtual access credential, wherein the processing computer is not configured to process the virtual access credential;
modify the authorization request message to replace the access token with the virtual access credential;
transmit the authorization request message to the authorizing entity computer;

wherein the code executable by the processor of the authorizing entity computer implements the m

Assignees

• Visa Int Service Ass

Inventors

• Verstraeten Gilles
• Sousa Pedro
• Pettit Mark
• Mitra Prarthana

Classifications

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/3273

  for mutual authentication (network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869) · CPC title