Back to results
US 10,949,826 B2Granted
Token management and handling system
AssigneeFirst Data Corporation
InventorsBenjamin Rewis, Vijay K. Royyuru, Christopher T. Cox
Life of this patent
Estimating the term…
Abstract
Systems and methods for handling tokens. In one aspect, a token is intercepted by a data processor and a contact is made with a detokenization provider by the data processor. In another aspect, token service is aggregated. In another aspect, tokenization is extended to physical cards, to deter certain kinds of fraud.
Claims14
A method, comprising:
- maintaining, in a memory, by one or more computer processors, a mapping of tokens to account numbers, wherein at least some account numbers are assigned multiple tokens;
- receiving, by the one or more computer processors, a transaction token obtained from a transaction card during a particular transaction, the transaction card comprising a card body having a first number in human-readable form thereon, the first number identifying an account, and a magnetic stripe on the card body, the magnetic stripe having a second number stored thereon, the second number being different than the first and the second number identifying the same account as the first number;
- wherein the transaction token is one of the first number and the second number and corresponds to a real primary account number associated with the transaction card, but does not itself reveal the real primary account number;
- maintaining, by the one or more computer processors, in the memory a set of domain restrictions that specify particular payment domains in which particular tokens are permitted to be used;
- for the particular transaction, receiving, by the one or more computer processors, an indication of a payment domain in which the transaction token is being used to attempt the particular transaction, wherein the indication of the payment domain in which the transaction token is being used indicates how the transaction token was obtained from the transaction card;
- comparing, by the one or more computer processors, the indicated payment domain, in which the transaction token is being used to attempt the particular transaction, with the payment domain restrictions to determine whether use of the transaction token in the indicated payment domain is permitted by the domain restrictions;
- and
- causing the particular transaction to fail upon a determination that use of the transaction token in the indicated payment domain, in which the transaction token is being used to attempt the particular transaction, is not permitted by the domain restrictions.
5 more elements
A system, comprising:
- a processor;
- and
- a memory, the memory holding data and holding instructions that, when executed by the processor, cause the system to:
- maintain in the memory a mapping of tokens to account numbers;
- maintain in the memory a set of domain restrictions that specify particular payment domains in which particular tokens are permitted to be used;
- receive a transaction token and an indication of a payment domain in which the transaction token is being used to attempt a particular transaction, wherein the transaction token corresponds to a real primary account number, the token does not itself reveal the real primary account number, and the indication of a payment domain in which the transaction token is being used to attempt the transaction indicates how the transaction token was obtained from a payment device;
- compare the domain in which the transaction token is being used with the domain restrictions to determine whether the domain in which the transaction token is being used is permitted by the domain restrictions;
- and
- cause the particular transaction to fail upon a determination that the domain in which the transaction token is being used is not permitted by the domain restrictions.
6 more elements
A method, comprising:
- maintaining, in a memory, by one or more computer processors, a mapping of a plurality of tokens to a primary account number;
- maintaining, in the memory, by the one or more computer processors, a respective set of one or more domain restrictions associated with each of the plurality of tokens, wherein each domain restriction identifies a payment domain in which the associated token may be used;
- receiving, by the one or more computer processors, a transaction token obtained from a transaction card during a particular transaction, wherein the transaction token is one of a first number on the transaction card in human-readable form, a second number encoded in a magnetic stripe of the transaction card, or a third number encoded in a chip embedded in the transaction card, and wherein the transaction token corresponds to the primary account number associated with the transaction card, but does not itself reveal the primary account number;
- retrieving, by the one or more computer processors, the primary account number by looking up the primary account number in the mapping based on the transaction token;
- for the particular transaction, receiving, by the one or more computer processors, an indication of a payment domain in which the transaction token is being used to attempt the transaction, wherein the indication of the payment domain in which the transaction token is being used indicates how the transaction token was obtained from the transaction card;
- retrieving, by the one or more computer processors, the domain restrictions associated with the transaction token;
- comparing, by the one or more computer processors, the indicated payment domain, in which the transaction token is being used to attempt the transaction, with the retrieved domain restrictions to determine whether use of the transaction token in the indicated payment domain is permitted by the domain restrictions;
- and
- processing the particular transaction upon a determination that use of the transaction token in the indicated payment domain, in which the transaction token is being used to attempt the transaction, is permitted by the domain restrictions.
6 more elements
A system, comprising:
- one or more processors;
- and
- a memory, the memory holding data and holding instructions that, when executed by the one or more processors, cause the system to:
- maintain, in the memory, a mapping of a plurality of tokens to a primary account number;
- maintain, in the memory, a respective set of one or more domain restrictions associated with each of the plurality of tokens, wherein each domain restriction identifies a payment domain in which the associated token may be used;
- receive a transaction token obtained from a transaction card during a particular transaction, wherein the transaction token is one of a first number on the transaction card in human-readable form, a second number encoded in a magnetic stripe of the transaction card, or a third number encoded in a chip embedded in the transaction card, and wherein the transaction token corresponds to a real primary account number, but does not itself reveal the primary account number;
- receive for the particular transaction an indication of a payment domain in which the transaction token is being used to attempt the transaction, wherein the indication of the payment domain in which the transaction token is being used indicates how the transaction token was obtained from the transaction card;
- retrieve the domain restrictions associated with the one of the plurality of tokens corresponding to the transaction token;
- compare the domain indication with the domain restrictions to determine whether use of the transaction token in the indicated payment domain, in which the token is being used, is permitted by the domain restrictions;
- and
- process the particular transaction upon a determination that the domain in which the token is being used is permitted by the domain restrictions.
8 more elements
Dependencies are inferred from the claim text.