# US 12,008,566 B2 · Virtualization and secure processing of data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,566 B2 - Document ID: US12008566B2 - Status: Granted - Kind: B2 - Application number: 18/109,030 - Filed: 2023-02-13 - Published: 2023-06-22 - Granted: 2024-06-11 - Earliest claimed: 2012-10-17 - Assignees: Royal Bank of Canada - Applicants: Royal Bank of Canada - Inventors: Edison U. Ortiz; Terry W. Lee; Linda Mantia - Web page: https://patentgrep.com/patent/US12008566B2 ## CPC - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/3221: {Access to banking information through M-devices} - G06Q 20/3223: {Realising banking transactions through M-devices} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/36: using electronic wallets or electronic money safes - G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights} - G06Q 20/3823: {combining multiple encryption tools for a transaction} - G06Q 20/3829: {involving key management} - G06Q 20/385: {using an alias or single-use codes} - G06Q 20/367: {involving electronic purses or money safes} - G06Q 20/3672: {initialising or reloading thereof} - G06Q 2220/00: Business processing using cryptography - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Systems, methods, and non-transient machine-interpretable data representing executable instruction sets and/or other products for the processing of data for the 5 secure creation, administration, manipulation, processing, and storage of electronic data useful in the processing of payment transactions and other secure data processes. In various aspects and embodiments the disclosure provides secure means for the authorization of sensitive and other data processes subject to controlled access. Such processes include, for example the creation, administration, 10 authorization, virtualization, storage, and other manipulation or processing of electronic data representing characteristics of, instructions for, and information associated with consumer, business, and other payment accounts, and other forms of secure payment elements, such as payment tokens; and data useful in processing transactions using such accounts and elements. Information associated with 15 particular payment means, such as accounts or payment tokens, can be stored, for example, in a data set, usually secure, sometimes referred to as a virtual or electronic wallet, or a secure payment token. ## Claims ### Claim 1 A mobile communication device comprising: at least one wireless communication system; at least one data processor; and at least one persistent memory device, the at least one persistent memory device comprising stored data representing at least: at least one secure identification token, the at least one secure identification token comprising data associated with the mobile communication device, a user of the mobile communication device, and an account identifier associated with the user of the mobile communication device; at least one secure payment token, the at least one secure payment token comprising data representing at least a pre-authorized transaction amount and a payment service provider identifier associated with the pre-authorized transaction amount; at least one authorization data set comprising data representing data known only to the payment service provider and the mobile communication device, said at least one authorization data set corresponding to a copy stored at a tokenization engine associated with the payment service provider; and one or more sets of machine-interpretable instructions; the at least one data processor adapted, by execution of the one or more sets of stored, machine-interpretable instructions, to: receive transaction information from a vendor point-of-sale (POS) device, the transaction information including a purchase amount; access the at least one authorization data set; configure the at least one secure identification token to comprise data from the at least one authorization data set; send the configured identification token and the at least one secure payment token to the vendor POS device; and receive confirmation that the transaction is complete. ### Claim 2 (depends on 1) The mobile communication device of claim 1, wherein the secure identification token and the secure payment token are routed from the vendor POS device to a transaction processing system. ### Claim 3 (depends on 1) The mobile communication device of claim 1, wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the mobile communication device. ### Claim 4 (depends on 3) The mobile communication device of claim 3, wherein the at least one identifier designated by a user of the mobile communication device is designated by the user using an input system of the mobile communication device. ### Claim 5 (depends on 1) The mobile communication device of claim 1, wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the mobile communication device at the time the at least one identification token is configured. ### Claim 6 (depends on 1) The mobile communication device of claim 1, wherein the data representing the pre-authorized transaction amount represents a resource locator usable by a transaction adjudication device to access data representing an authorized transaction value. ### Claim 7 (depends on 6) The mobile communication device of claim 6, wherein the resource locator is associated with at least one of: a memory of a server of the financial services provider that authorized the pre-authorized transaction amount; or a transaction adjudication server of the transaction adjudication device. ### Claim 8 A network communication device comprising: at least one network communication system; at least one data processor; and at least one persistent memory device, the at least one persistent memory device comprising stored data representing at least: at least one secure identification token, the at least one secure identification token comprising data associated with the network communication device, a user of the network communication device, and an account identifier associated with the user of the network communication device; at least one secure payment token, the at least one secure payment token comprising data representing at least a pre-authorized transaction amount and a payment service provider identifier associated with the pre-authorized transaction amount; at least one authorization data set comprising data representing data known only to the payment service provider and the network communication device, said at least one authorization data set corresponding to a copy stored at a tokenization engine associated with the payment service provider; and one or more sets of machine-interpretable instructions; the at least one data processor adapted, by execution of the one or more sets of stored, machine-interpretable instructions, to: receive transaction information from a vendor point-of-sale (POS) device, the transaction information including a purchase amount; access the at least one authorization data set; configure the at least one secure identification token to comprise data from the at least one authorization data set; send the configured identification token and the at least one secure payment token to the vendor POS device; and receive confirmation that the transaction is complete. ### Claim 9 (depends on 8) The network communication device of claim 8, wherein the secure identification token and the secure payment token are routed from the vendor POS device to a transaction processing system. ### Claim 10 (depends on 8) The network communication device of claim 8, wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device. ### Claim 11 (depends on 10) The network communication device of claim 10, wherein the at least one identifier designated by a user of the network communication device is designated by the user using an input system of the network communication device. ### Claim 12 (depends on 8) The network communication device of claim 8, wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device at the time the at least one identification token is configured. ### Claim 13 (depends on 8) The network communication device of claim 8, wherein the data representing the pre-authorized transaction amount represents a resource locator usable by a transaction adjudication device to access data representing an authorized transaction value. ### Claim 14 (depends on 13) The network communication device of claim 13, wherein the resource locator is associated with at least one of: a memory of a server of the financial services provider that authorized the pre-authorized transaction amount; or a transaction adjudication server of the transaction adjudication device. ### Claim 15 A computer-implemented method performed by a processor of a network communication device executing machine-interpretable instructions, the method comprising: accessing, in at least one persistent memory of the network communication device, stored data representing at least: at least one secure identification token, the at least one secure identification token comprising data associated with the network communication device, a user of the network communication device, and an account identifier associated with the user of the network communication device; at least one secure payment token, the at least one secure payment token comprising data representing at least a pre-authorized transaction amount and a payment service provider identifier associated with the pre-authorized transaction amount; at least one authorization data set comprising data representing data known only to the payment service provider and the network communication device, said at least one authorization data set corresponding to a copy stored at a tokenization engine associated with the payment service provider; receiving transaction information from a vendor point-of-sale (POS) device, the transaction information including a purchase amount; configuring the at least one secure identification token to comprise data from the at least one authorization data set; sending the configured identification token and the at least one secure payment token to the vendor POS device; and receiving confirmation that the transaction is complete. ### Claim 16 (depends on 15) The method of claim 15, comprising routing the secure identification token and the secure payment token from the vendor POS device to a transaction processing system. ### Claim 17 (depends on 15) The method of claim 15, wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device. ### Claim 18 (depends on 17) The method of claim 17, wherein the at least one identifier designated by a user of the network communication device is designated by the user using an input system of the network communication device. ### Claim 19 (depends on 15) The method of claim 15, wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device at the time the at least one identification token is configured. ### Claim 20 (depends on 15) The method of claim 15, wherein the data representing the pre-authorized transaction amount represents a resource locator usable by a transaction adjudication device to access data representing an authorized transaction value. ### Claim 21 (depends on 20) The method of claim 20, wherein the resource locator is associated with at least one of: a memory of a server of the financial services provider that authorized the pre-authorized transaction amount; or a transaction adjudication server of the transaction adjudication device.