Systems and methods for code display and use

A communication device comprising:

• a processor;
• and
• a memory coupled to the processor, the memory storing instructions, which when executed by the processor, cause the communication device to perform a method including the following steps, in order:
• receiving, at the communication device operated by a user, a code from an access device associated with a resource provider for a transaction, wherein receiving the code from the access device comprises scanning the code displayed on the access device, wherein the code is a QR code and the access device is a point of sale device;
• in response to receiving the code, determining, by the communication device, transaction data associated with the code;
• in response to determining the transaction data associated with the code, displaying, by the communication device, a list of sensitive information comprising a list of primary account numbers;
• in response to determining the transaction data associated with the code, receiving a selection sensitive information comprising of a primary account number using a data input element on a user interface of the communication device;
• retrieving, by the communication device, a token reference identifier on the communication device corresponding to the selected sensitive information comprising the primary account number;
• in response to retrieving the token reference identifier on the communication device, initiating, by the communication device, requesting a token corresponding to the selected sensitive information comprising the primary account number by transmitting the transaction data and the token reference identifier corresponding to the selected primary account number to an application provider computer, which generates a unique transaction identifier for the transaction and requests and receives the token from a token server computer, which retrieves the token using a stored mapping between the token reference identifier and the token, and transmits the unique transaction identifier, the token and the transaction data to a transport computer, which generates and transmits an authorization request message comprising the token and the transaction data to a transaction processing computer to request authorization comprising the unique transaction identifier for the transaction, receives an authorization response message from the transaction processing computer, and transmits the authorization response message to the access device, wherein the token is a payment token that has a same format as the primary account number;
• after initiating requesting the token, receiving, by the communication device and from the application provider computer, the unique transaction identifier;
• and
• providing, by the communication device, the unique transaction identifier to the access device, wherein the access device matches the unique transaction identifier provided by the communication device with the unique transaction identifier received in the authorization response message to complete the transaction with the access device.

A method comprising:

• receiving, by an application provider computer, a token reference identifier corresponding to selected sensitive information comprising a primary account number selected from a list of sensitive information comprising a plurality of account numbers, and transaction data from a communication device, the sensitive information comprising the primary account number selected using a data input element on a user interface of the communication device, the transaction data being obtained by the communication device from a code displayed by an access device in a transaction, wherein the code is a QR code and the access device is a point of sale device;
• generating, by the application provider computer, a unique identifier for the transaction;
• transmitting, by the application provider computer, a token request for a token to a token server computer, the token request comprising the token reference identifier;
• receiving, by the application provider computer, the token from the token server computer, which retrieves the token using a stored mapping between the token reference identifier and the token;
• transmitting, by the application provider computer, the unique identifier for the transaction, the token and the transaction data to a transport computer, which generates and transmits an authorization request message comprising the token and the transaction data to a transaction processing computer to request authorization for the transaction, receives an authorization response message from the transaction processing computer, and transmits the authorization response message to the access device, wherein the token is a payment token that has a same format as the account number;
• and
• transmitting, by the application provider computer, the unique identifier for the transaction to the communication device.