Token keys to generate cryptograms for token interactions

A processor computer comprising:

• a memory;
• a processor;
• a non-transitory computer-readable medium comprising instructions, which, when executed by the processor, perform the steps of:
• generating a first master key for a token requestor, the first master key being generated as an output of a cryptographic function that processes (a) a second master key managed by the processor computer and (b) an identifier of the token requestor;
• transmitting, to a token requestor computer corresponding to the token requestor, the first master key;
• receiving, from the token requestor computer, a request for a token;
• responsive to receiving the request for the token, transmitting the token to the token requestor computer;
• receiving, from the token requestor computer, an authorization request message comprising the token and a cryptogram generated by the token requestor computer using the first master key and the token;
• validating, by the processor computer, the cryptogram;
• identifying, by the processor computer, a primary account identifier corresponding to the token;
• generating, by the processor computer, a modified authorization request message comprising an indication of the validation of the cryptogram and the primary account identifier;
• and
• transmitting, by the processor computer to an authorization computer, the modified authorization request message.

A method comprising:

• receiving, by a token requestor computer from a processor computer in a processing network, a first master key and a token, the first master key having been generated by the processor computer as an output of a cryptographic function that processes (a) a second master key managed by the processor computer and (b) an identifier of the token requestor;
• generating, by the token requestor computer, a cryptogram generation key using the first master key;
• generating, by the token requestor computer, a cryptogram using the cryptogram generation key and the token;
• generating, by the token requestor computer, an authorization request message comprising the token and the cryptogram;
• and
• transmitting, by the token requestor computer to the processor computer, the authorization request message, thereby causing the processor computer to validate the cryptogram, identify a primary account identifier corresponding to the token, and generate a modified authorization request message comprising an indication of the validation of the cryptogram and the primary account identifier.