Tokenization of user accounts for direct payment authorization channel

Patent metadata

Field	Value
Publication number	US-9424574-B2
Application number	US-201414280271-A
Country	US
Kind code	B2
Filing date	May 16, 2014
Priority date	May 16, 2014
Publication date	Aug 23, 2016
Grant date	Aug 23, 2016

Abstract

Embodiments of the present invention disclose a financial institution system maintained by a financial institution and for tokenization of user accounts for using a direct payment authorization channel, whereby a third party payment authorization network is avoided. Embodiments establish a direct channel of communication between the system and a merchant or a merchant network in communication with the merchant; wherein the direct channel of communication comprises a network communication channel without a third party payment authorization system; receive a token issued by the financial institution and associated with a user account associated with a customer of the financial institution; receive transaction data comprising an amount associated with a transaction between the customer of the financial institution and the merchant; and determine whether to authorize the transaction based on the received token and the received transaction data.

First claim

What is claimed is:

1. A financial institution system maintained by a financial institution and for tokenization of user accounts so that none of a user's credit card number, debit card number and/or account number are necessary to perform a transaction with a merchant, thereby improving security of the user's credit card number, debit card number and/or account number, and for using a direct payment authorization channel, whereby a third party payment authorization network is avoided because the system obviates the need to validate the user's credit or debit card number, the system comprising:
a memory device; and
a processing device operatively coupled to the memory device, wherein the processing device is configured to execute computer-readable program code to:
establish a direct channel of communication between the system and a merchant or a merchant network in communication with the merchant;
wherein the direct channel of communication comprises a network communication channel including at least some financial institution network infrastructure but without passing through a third party payment authorization system configured to authorize transaction involving credit and/or debit card numbers;
receive a token different than a credit card number, debit card number and account number associated with a user account associated with a customer of the financial institution, the token issued by the financial institution and associated with the user account associated with a customer of the financial institution;
wherein the token is configured in a format enabling the token to be communicated over the pre-existing bank infrastructure;
receive transaction data comprising an amount associated with a transaction between the customer of the financial institution and the merchant; and
determine whether to authorize the transaction based on the received token and the received transaction data without communicating the token to a third party payment authorization system configured to authorize transaction involving credit and/or debit card numbers.

2. The financial institution system of claim 1 , wherein the computer-readable program code is further configured to cause the processing device to:
receive one or more preferences from the customer for managing one or more limits on the use of the token associated with the user account.

3. The financial institution system of claim 2 , wherein the computer-readable program code is further configured to cause the processing device to:
determine whether the received transaction data conforms to the one or more limits managed by the one or more preferences;
if so, approve the transaction; and
if not, decline the transaction.

4. The financial institution system of claim 1 , wherein the computer-readable program code is further configured to cause the processing device to:
based on the received transaction data and the received token, approve the transaction.

5. The financial institution system of claim 4 , wherein the computer-readable program code is further configured to cause the processing device to:
in response to approving the transaction, initiate communication of an approval communication to the merchant over the direct communication channel and configured to indicate to the merchant that the transaction was approved.

6. The financial institution system of claim 1 , wherein the computer-readable program code is further configured to cause the processing device to:
based on the received transaction data and the received token, decline the transaction.

7. The financial institution system of claim 6 , wherein the computer-readable program code is further configured to cause the processing device to:
in response to declining the transaction, initiate communication of a decline communication to the merchant over the direct communication channel and configured to indicate to the merchant that the transaction was declined.

8. The financial institution system of claim 1 , wherein the computer-readable program code is further configured to cause the processing device to:
create the token and associate the token with the user account;
associate the token with one or more pre-approved merchants; and
store pre-approved merchant data indicating the association between the token and the one or more pre-approved merchants.

9. The financial institution system of claim 8 , wherein the computer-readable program code is further configured to cause the processing device to:
determine whether the transaction data corresponds to one of the pre-approved merchants;
if not, declining the transaction; and
if so, determining whether to approve the transaction based at least in part on the transaction data and the token.

10. A computer program product for use in a token based financial transaction system, for tokenization of user accounts so that none of a user's credit card number, debit card number and/or account number are necessary to perform a transaction with a merchant, thereby improving security of the user's credit card number, debit card number and/or account number, and for using a direct payment authorization channel, whereby a third party payment authorization network is avoided because the system obviates the need to validate the user's credit or debit card number, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:
an executable portion configured for establishing a direct channel of communication between the system and a merchant or a merchant network in communication with the merchant;
wherein the direct channel of communication comprises a network communication channel including at least some financial institution network infrastructure but without passing through a third party payment authorization system configured to authorize transaction involving credit and/or debit card numbers;

an executable portion configured for receiving a token different than a credit card number, debit card number and account number associated with a user account associated with a customer of the financial institution, the token issued by the financial institution and associated with the user account associated with a customer of the financial institution;
wherein the token is configured in a format enabling the token to be communicated over the pre-existing bank infrastructure;
an executable portion configured for receiving transaction data comprising an amount associated with a transaction between the customer of the financial institution and the merchant; and
an executable portion configured for determining whether to authorize the transaction based on the received token and the received transaction data without communicating the token to a third party payment authorization system configured to authorize transaction involving credit and/or debit card numbers.

11. The computer program product of claim 10 , wherein the computer-readable program code portions further comprise:
an executable portion configured for receiving one or more preferences from the customer for managing one or more limits on the use of the token associated with the user account.

12. The computer program product of claim 10 , wherein the computer-readable program code portions further comprise:
an executable portion configured for determining whether the received transaction data conforms to the one or more limits managed by the one or more preferences;
if so, approve the transaction; and
if not, decline the transaction.

13. The computer program product of claim 10 , where

Assignees

• Bank Of America

Inventors

• Bondesen Laura Corinne
• Harkey Scott Lee

Classifications

• G06Q20/40 Primary

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/38 Primary

  Payment protocols; Details thereof · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G06Q20/405 Primary

  Establishing or using transaction specific rules · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title