Payment card storing tokenized information

Patent metadata

Field	Value
Publication number	US-2023360021-A1
Application number	US-202318356481-A
Country	US
Kind code	A1
Filing date	Jul 21, 2023
Priority date	Mar 12, 2015
Publication date	Nov 9, 2023
Grant date	—

Abstract

Provided are a payment card, system and method for storing and reading tokenized payment account information from a payment card. In an exemplary embodiment, a payment card may include a substrate forming a body of the payment card, and an electronic chip attached to or included in the substrate. According to various exemplary embodiments, the electronic chip may include a storage storing tokenized payment account information corresponding to a payment account linked to the payment card. The electronic chip may be read by a payment terminal and may provide the tokenized payment information to the payment terminal during reading.

First claim

What is claimed is:

1 . A computing system comprising:
a storage device comprising a token value; and a processor configured to
receive, via an application programming interface (API), a primary account number of a payment card account of an integrated chip (IC) card,
convert the primary account number into a token and store a mapping of the primary account number to the token within the token vault,
assign a chip card domain restriction to the token, wherein the chip card domain restriction only authorizes use of the token with a chip card, and
embed the PAN and the chip card domain restriction into the IC chip card.

2 . The computing system of claim 1 , wherein the processor is further configured to receive a payment authorization request message with a chip cryptogram and the token included therein, and determine whether to authorize the payment authorization request message based on the chip cryptogram and a domain from which the token within the payment authorization request message is submitted.

3 . The computing system of claim 2 , wherein the processor is further configured to read an identifier of the chip card entry mode from an entry mode field of the payment authorization request message, and approve the payment authorization request message in response to reading the identifier.

4 . The computing system of claim 2 , wherein the processor is further configured to read an identifier of one of an e-commerce entry mode and a magnetic stripe entry mode from an entry mode field of the payment authorization request message, and decline the payment authorization request message in response to reading the identifier.

5 . The computing system of claim 2 , wherein the processor is further configured to transmit an authorization response message with an identifier of the determination to a computing system that transmitted the payment authorization request message, in response to the determination.

6 . The computing system of claim 2 , wherein the processor is configured to receive the payment authorization request message with the token included therein over a computer network from a card reading device that reads the token from an electrical contact point of a chip attached to the IC chip card.

7 . The computing system of claim 2 , wherein the processor is further configured to translate the token back to the payment account number based on the mapping, and transmit the translated payment account number to an issuer of the payment account number based on a routing table.

8 . A method comprising:
storing a token value in a storage; receiving, via an application programming interface (API), a primary account number of a payment card account of an integrated chip (IC) card; converting the primary account number into a token and store a mapping of the primary account number to the token within the token vault; assigning a chip card domain restriction to the token, wherein the chip card domain restriction only authorizes use of the token with a chip card; and embedding the PAN and the chip card domain restriction into the IC chip card.

9 . The method of claim 8 , wherein the method further comprises receiving a payment authorization request message with a chip cryptogram and the token included therein, and determining whether to authorize the payment authorization request message based on the chip cryptogram and a domain from which the token within the payment authorization request message is submitted.

10 . The method of claim 9 , wherein the method further comprises reading an identifier of the chip card entry mode from an entry mode field of the payment authorization request message, and approving the payment authorization request message in response to reading the identifier.

11 . The method of claim 9 , wherein the method further comprises reading an identifier of one of an e-commerce entry mode and a magnetic stripe entry mode from an entry mode field of the payment authorization request message, and declining the payment authorization request message in response to reading the identifier.

12 . The method of claim 9 , wherein the method further comprises transmitting an authorization response message with an identifier of the determination to a computing system that transmitted the payment authorization request message, in response to the determination.

13 . The method of claim 9 , wherein the receiving the payment authorization request message comprises receiving the payment authorization message over a computer network from a card reading device that reads the token from an electrical contact point of a chip attached to the IC chip card.

14 . The method of claim 9 , wherein the method further comprises translating the token back to the payment account number based on the mapping, and transmitting the translated payment account number to an issuer of the payment account number based on a routing table.

15 . A non-transitory computer-readable medium comprising instructions which when executed by a processor cause a computer to perform a method comprising:
storing a token value in a storage; receiving, via an application programming interface (API), a primary account number of a payment card account of an integrated chip (IC) card; converting the primary account number into a token and store a mapping of the primary account number to the token within the token vault; assigning a chip card domain restriction to the token, wherein the chip card domain restriction only authorizes use of the token with a chip card; and embedding the PAN and the chip card domain restriction into the IC chip card.

16 . The non-transitory computer-readable medium of claim 15 , wherein the method further comprises receiving a payment authorization request message with a chip cryptogram and the token included therein, and determining whether to authorize the payment authorization request message based on the chip cryptogram and a domain from which the token within the payment authorization request message is submitted.

17 . The non-transitory computer-readable medium of claim 16 , wherein the method further comprises reading an identifier of the chip card entry mode from an entry mode field of the payment authorization request message, and approving the payment authorization request message in response to reading the identifier.

18 . The non-transitory computer-readable medium of claim 16 , wherein the method further comprises reading an identifier of one of an e-commerce entry mode and a magnetic stripe entry mode from an entry mode field of the payment authorization request message, and declining the payment authorization request message in response to reading the identifier.

19 . The non-transitory computer-readable medium of claim 16 , wherein the method further comprises transmitting an authorization response message with an identifier of the determination to a computing system that transmitted the payment authorization request message, in response to the determination.

20 . The non-transitory computer-readable medium of claim 16 , wherein the receiving the payment authorization request message comprises receiving the payment authorization message over a computer network from a card reading device that reads the token from an electrical contact point of a chip attached to the IC chip card.

Assignees

• Mastercard International Inc

Inventors

• Rutherford Bruce John
• Lulic Mark

Classifications

• G06Q20/341 Primary

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/6254

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G07F7/0866

  by active credit-cards adapted therefor (G07F7/1008 takes precedence) · CPC title