Tokenization request via access device

Patent metadata

Field	Value
Publication number	US-12112316-B2
Application number	US-202318178020-A
Country	US
Kind code	B2
Filing date	Mar 3, 2023
Priority date	Nov 26, 2014
Publication date	Oct 8, 2024
Grant date	Oct 8, 2024

Abstract

Embodiments of the invention are directed to a method for submitting a tokenization request via an access device. Embodiments allow tokens to be retrieved for complex mobile devices as well as basic card-type devices. Token requests can be formatted as authorization request messages and transmitted along authorization communication channels.

First claim

What is claimed is:

1. A method comprising:
receiving, by a first computer, a credential for a transaction;
sending, by the first computer, a token request message including the credential to a token provider computer via a transport computer, a transaction processing computer, and an authorizing entity computer;
receiving, at the first computer, a token response message including a token from the token provider computer via the transport computer, the transaction processing computer, and the authorizing entity computer, wherein the token is associated with the credential;
generating, by the first computer, an authorization request message comprising the token and an amount for the transaction;
submitting, by the first computer, the authorization request message including the token and the amount to the authorizing entity computer via the transport computer and the transaction processing computer for the transaction, wherein the token request message and the authorization request message are in the same format; and
in response to submitting the authorization request message, receiving, by the first computer, from the authorizing entity computer via the transport computer and the transaction processing computer, an authorization response message including an authorization result for the transaction.

2. The method of claim 1 , wherein the credential is received from a mobile device.

3. The method of claim 1 , wherein the first computer is a point of sale terminal, the credential is a payment account number, the token is a payment token, and the transaction is a payment transaction.

4. The method of claim 1 , further comprising:
validating, by the token provider computer, the token request message;
creating, by the token provider computer, an association between the token and the credential;
sending, by the token provider computer, the token response message including the token to the first computer;
receiving, by the authorizing entity computer, the authorization request message including the token and the amount; and
authorizing, by the authorizing entity computer, the transaction based on the token.

5. The method of claim 1 , wherein the token request message is formatted as an ISO 8583 message.

6. The method of claim 1 , wherein the token is valid for 1 minute, 5 minutes, or 1 hour.

7. The method of claim 1 , wherein the credential is encrypted.

8. The method of claim 1 , the token request message having an ISO 8583 format, the authorization request message having an ISO 8583 message format, the token response message having an ISO 8583 format, and the authorization response message having an ISO 8583 message format.

9. The method of claim 1 , wherein the token request message and the authorization request message are both transmitted through the same communication channel.

10. The method of claim 9 , wherein the same communication channel is a transaction authorization communication channel that includes the transport computer and the transaction processing computer.

11. A system comprising:
a first computer comprising:
a first processor; and
a first non-transitory computer readable medium, storing executable instructions that, when executed, cause the first processor to perform the steps of:
receiving a credential for a transaction;
sending a token request message including the credential to a token provider computer via a transport computer, a transaction processing computer, and an authorizing entity computer;
receiving a token response message including a token from the token provider computer via the transport computer, the transaction processing computer, and the authorizing entity computer, wherein the token is associated with the credential;
generating an authorization request message comprising the token and an amount for the transaction;
submitting the authorization request message including the token and the amount to the authorizing entity computer via the transport computer and the transaction processing computer for the transaction, wherein the token request message and the authorization request message are in the same format; and
in response to submitting the authorization request message, receiving from the authorizing entity computer via the transport computer and the transaction processing computer, an authorization response message including an authorization result for the transaction.

12. The system of claim 11 , furthering comprising:
the token provider computer, comprising:
a second processor; and
a second non-transitory computer readable medium, storing instructions that, when executed, cause the second processor to perform the steps of:
validating the token request message;
creating an association between the token and the credential;
sending the token response message including the token to the first computer; and

the authorizing entity computer comprising:
a third processor; and
a third non-transitory computer readable medium, storing executable instructions that, when executed, cause the third processor to perform the steps of:
receiving the authorization request message including the token and the amount; and
authorizing the transaction based on the token.

13. The system of claim 11 , wherein the credential is received from a mobile device.

14. The system of claim 13 , wherein there is no wireless communication connectivity between the mobile device and the token provider computer.

15. The system of claim 13 , wherein the token is not sent over the air directly from the token provider computer to the mobile device.

16. The system of claim 11 , wherein the token request message is in the format of an authorization request message, the token request message having a zero amount in an authorization amount field.

17. The system of claim 11 , wherein the token is a substitute for the credential, the authorization request message comprises the token in place of the credential, the authorization request message does not include the credential, and the authorization response message includes the token and does not include the credential.

18. The system of claim 11 , wherein the authorization request message is submitted to request authorization for the transaction.

19. The system of claim 11 , wherein the transaction processing computer includes data processing subsystems that deliver authorization services and clearing and settlement services.

20. The system of claim 11 , wherein the token request message is submitted to request the token, and is not submitted to request authorization for the transaction.

Assignees

• Visa Int Service Ass

Inventors

• Dimmick James

Classifications

• G06Q20/36 Primary

  using electronic wallets or electronic money safes · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• G06Q20/3674 Primary

  involving authentication · CPC title

• G06Q20/3821 Primary

  Electronic credentials · CPC title