Systems and methods for issuer-specified domain controls on a payment instrument

Patent metadata

Field	Value
Publication number	US-2023076359-A1
Application number	US-202218055277-A
Country	US
Kind code	A1
Filing date	Nov 14, 2022
Priority date	Feb 14, 2018
Publication date	Mar 9, 2023
Grant date	—

Abstract

Systems and methods for issuer-specified domain control on a payment instrument are disclosed. In one embodiment, in an information processing apparatus comprising at least one computer processor, a method for issuer-specified domain controls on a payment instrument may include: (1) receiving, from an issuer of a financial instrument, an identification of a domain control or restriction on a payment token for the financial instrument, the domain control or restriction to be applied by the issuer; (2) requesting generation of the payment token with a pass-through indicator from a token service provider; (3) receiving, from the token service provider, the payment token; and (4) storing an association of the domain control or restriction and the payment token.

First claim

1 - 15 . (canceled)

16 . A system for processing a transaction using issuer-specified domain controls, comprising:
an issuer computer program executed by an issuer of a financial instrument; a payment network; an electronic device executing an electronic wallet; and a third-party token service provider computer program executed by a third-party token service provider; wherein:
the issuer computer program specifies an issuer-applied domain-specific control or an issuer-applied domain-specific restriction on a device-specific payment token for the financial instrument that is provisioned to the electronic wallet on the electronic device, wherein the device-specific payment token is restricted to transactions from only the electronic device;
the issuer computer program requests, from the third-party token service provider, generation of the device-specific payment token comprising a pass-through indicator;
the third-party token service provider computer program receives the device-specific payment token comprising the pass-through indicator;
the issuer computer program stores an association of the issuer-applied domain-specific control or restriction and the device-specific payment token;
the payment network receives a transaction request comprising the device-specific payment token that comprises the pass-through indicator;
the payment network passes the transaction to the issuer without applying the issuer-applied domain-specific control or restriction in response to the pass-through indicator;
the issuer computer program retrieves the domain control or restriction associated with the device-specific payment token; and
the issuer computer program applies the control or restriction to the transaction request.

17 . The system of claim 16 , wherein the pass-through indicator is a bank identification number.

18 . The system of claim 16 , wherein the pass-through indicator is a cryptogram parameter for the device-specific payment token.

19 . The system of claim 16 , wherein the domain control or restriction controls use of the device-specific payment token with a certain merchant, with a certain device, in a certain environment, at a certain time, in a certain geography, or at a certain authentication level.

20 . The system of claim 16 , wherein the payment network applies a payment-network level domain control or restriction on the transaction before passing the transaction to the issuer.

21 . The system of claim 16 , wherein the third-party token service provider is not associated with a payment network.

22 . The system of claim 16 , wherein the issuer-applied domain-specific control or the issuer-applied domain-specific restriction is dynamic.

23 . A non-transitory computer readable storage medium, including instructions stored thereon, which when read and executed by one or more computer processors, cause the one or more computer processors to perform steps comprising:
specifying an issuer-applied domain-specific control or an issuer-applied domain-specific restriction on a device-specific payment token for a financial instrument that is provisioned to an electronic wallet on an electronic device, wherein the device-specific payment token is restricted to transactions from only the electronic device; requesting, from a third-party token service provider, generation of the device-specific payment token comprising a pass-through indicator, wherein a payment network is configured to receive a transaction request comprising the device-specific payment token and is configured to pass the transaction request through without applying the issuer-applied domain-specific control or restriction in response to the pass-through indicator; receiving, from the third-party token service provider, the device-specific payment token comprising the pass-through indicator; storing an association of the issuer-applied domain-specific control or restriction and the device-specific payment token; and in response to receiving the transaction request with the device-specific payment token from the payment network, retrieving the issuer-applied domain-specific control or restriction associated with the device-specific payment token and applying the issuer-applied domain-specific control or restriction to the transaction request.

24 . The non-transitory computer readable storage medium of claim 23 , wherein the pass-through indicator is a bank identification number.

25 . The non-transitory computer readable storage medium of claim 23 , wherein the pass-through indicator is a cryptogram parameter for the device-specific payment token.

26 . The non-transitory computer readable storage medium of claim 23 , wherein the third-party token service provider is not associated with a payment network.

27 . The non-transitory computer readable storage medium of claim 23 , wherein the issuer-applied domain-specific control or the issuer-applied domain-specific restriction is dynamic.

28 . The non-transitory computer readable storage medium of claim 23 , wherein the issuer-applied domain-specific control or the issuer-applied domain-specific controls use of the device-specific payment token with a certain merchant, with a certain device, in a certain environment, at a certain time, in a certain geography, or at a certain authentication level.

Assignees

• Jpmorgan Chase Bank Na

Inventors

• Mullaney Craig M
• Spector Howard
• Ouellette Scott H
• Dao Tuan
• Seeney David G

Classifications

• G06Q20/367

  involving electronic purses or money safes · CPC title

• G06Q20/382

  insuring higher security of transaction · CPC title

• H04W12/08 Primary

  Access security · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/4016 Primary

  involving fraud or risk level assessment in transaction processing · CPC title