Multichannel authentication and tokenization system

Patent metadata

Field	Value
Publication number	US-2026081906-A1
Application number	US-202519349133-A
Country	US
Kind code	A1
Filing date	Oct 3, 2025
Priority date	Nov 1, 2021
Publication date	Mar 19, 2026
Grant date	—

Abstract

In some embodiments, apparatuses and methods are provided herein useful to multichannel authentication and tokenization. A system comprises a first authentication system serving a plurality of in-store point of sale terminals and implementing a physical channel authentication policy and a second authentication system serving a plurality of user devices accessing an e-commerce service and implementing an e-commerce channel authentication policy, and a tokenization system. The tokenization system being configured to generate a first token in response to receiving a first user credential from an in-store point of sale terminal via the first authentication system, generate a second token in response to receiving a second user credential from a user device via the second authentication system, and forward the first token and the second token to the retailer backend system, wherein the first token and the second token are generated based on a same tokenization protocol.

First claim

What is claimed is:

1 . A system comprising:
a first authentication system serving a plurality of in-store point of sale terminals; a second authentication system serving a plurality of user devices accessing an e-commerce service; and a tokenization system coupled to a retailer backend system, the first authentication system, and the second authentication system, the tokenization system including a processor and a computer-readable medium storing instruction operative by the processor to:
generate first tokens for user credentials received via the first authentication system and the second authentication system based on a first tokenization protocol;
forward the first tokens to the retailer backend system; and
in response to receiving a second token based on a second tokenization protocol and associated with a requesting device:
query a membership services database using the second token to determine membership details associated with the second token;
convert the second token to a converted token based on the first tokenization protocol using the membership details; and
forward the converted token to the requesting device for use in communication with the retailer backend system.

2 . The system of claim 1 , wherein the computer-readable medium further stores instructions operative by the processor to:
send a token ID of the second token to the retailer backend system for use by the retailer backend system in receiving a call from the requesting device including the converted token.

3 . The system of claim 1 , wherein the computer-readable medium further stores instructions operative by the processor to:
receive a user's login information via the requesting device; forward the user's login information to a login service via a firewall; and in response to the user's login information being verified by the login service, receive the second token from the login service.

4 . The system of claim 3 , wherein, in verifying the user's login information, the login service utilizes a user identity and authentication management (IAM) system that generates an IAM token based on the user's login information.

5 . The system of claim 3 , wherein the user's login information is received from the requesting device using an e-commerce channel authentication policy.

6 . The system of claim 1 , wherein:
the first authentication system implements a physical channel authentication policy and the second authentication system implements an e-commerce channel authentication policy; and the physical channel authentication policy and the e-commerce channel authentication policy impose different requirements for authenticating user credentials.

7 . The system of claim 1 , wherein the second tokenization protocol is a legacy protocol call previously employed by the tokenization system and the first tokenization protocol is a new protocol currently employed by the tokenization system.

8 . A method comprising:
generating, by a processor of a tokenization system, first tokens for user credentials received via a first authentication system and a second authentication system based on a first tokenization protocol, the first authentication system serving a plurality of in-store point of sale terminals and the second authentication system serving a plurality of user devices accessing an e-commerce service; forwarding, by the processor, the first tokens to a retailer backend system; and in response to receiving, by the processor, a second token based on a second tokenization protocol and associated with a requesting device:
query, by the processor, a membership services database using the second token to determine membership details associated with the second token;
convert, by the processor, the second token to a converted token based on the first tokenization protocol using the membership details; and
forward, by the processor, the converted token to the requesting device for use in communication with the retailer backend system.

9 . The method of claim 8 , further comprising:
sending, by the processor, a token ID of the second token to the retailer backend system for use by the retailer backend system in receiving a call from the requesting device including the converted token.

10 . The method of claim 8 , further comprising:
receiving, by the processor, a user's login information via the requesting device; forwarding, by the processor, the user's login information to a login service via a firewall; and in response to the user's login information being verified by the login service, receiving, by the processor, the second token from the login service.

11 . The method of claim 10 , wherein, in verifying the user's login information, the login service utilizes a user identity and authentication management (IAM) system that generates an IAM token based on the user's login information.

12 . The method of claim 10 , wherein the user's login information is received from the requesting device using an e-commerce channel authentication policy.

13 . The method of claim 8 , wherein:
the first authentication system implements a physical channel authentication policy and the second authentication system implements an e-commerce channel authentication policy; and the physical channel authentication policy and the e-commerce channel authentication policy impose different requirements for authenticating user credentials.

14 . The method of claim 8 , wherein the second tokenization protocol is a legacy protocol call previously employed by the tokenization system and the first tokenization protocol is a new protocol currently employed by the tokenization system.

15 . A computer-readable medium storing instruction operative by a processor of a tokenization system to:
generate first tokens for user credentials received via a first authentication system and a second authentication system based on a first tokenization protocol, the first authentication system serving a plurality of in-store point of sale terminals and the second authentication system serving a plurality of user devices accessing an e-commerce service;
forward the first tokens to a retailer backend system; and
in response to receiving a second token based on a second tokenization protocol and associated with a requesting device:
query a membership services database using the second token to determine membership details associated with the second token;
convert the second token to a converted token based on the first tokenization protocol using the membership details; and
forward the converted token to the requesting device for use in communication with the retailer backend system.

16 . The computer-readable medium of claim 15 , furthering storing instructions operative by the processor to:
send a token ID of the second token to the retailer backend system for use by the retailer backend system in receiving a call from the requesting device including the converted token.

17 . The computer-readable medium of claim 15 , furthering storing instructions operative by the processor to:
receive a user's login information via the requesting device; forward the user's login information to a login service via a firewall; and in response to the user's login information being verified by the login service, receive the second token from the login service.

18 . The computer-readable medium of claim 17 , wherein, in verifying the user's login information, the login service utilizes a user identity and authentication management (IAM) system that generates an IAM toke

Assignees

• Walmart Apollo Llc

Inventors

• Paul Abhishek
• Bandyopadhyay Dipanjan
• Mani Prem Kumar

Classifications

• G06Q20/206

  comprising security or operator identification provisions, e.g. password entry · CPC title

• G06F16/90335

  Query processing · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06Q30/06

  Buying, selling or leasing transactions · CPC title