# US 12,111,897 B2 · Method and system for processing action data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,111,897 B2 - Document ID: US12111897B2 - Status: Granted - Kind: B2 - Application number: 18/569,015 - Filed: 2022-06-21 - Published: 2024-08-08 - Granted: 2024-10-08 - Earliest claimed: 2021-06-22 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Sushma Rapolu; Anup Tripathi; Ibrahim Kusumah Kusnanto; Jonathan Twichell - Web page: https://patentgrep.com/patent/US12111897B2 ## CPC - G06F 21/31: User authentication - G06F 21/33: using certificates - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/10: {for controlling access to devices or network resources} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method is disclosed and includes receiving a token request message comprising a real credential or a reference to the real credential, a unique value, and action data from a token requestor, and obtaining a token. The method also includes transmitting the token to the token requestor, and providing the unique value and the action data to a data matching computer. The data matching computer stores the unique value and the action data. The data matching computer subsequently receives a message from a data processing computer comprising the unique value, determines that the received unique value matches the stored unique value, and provides the action data to the data processing computer or performs an action with respect to the action data. ## Claims ### Claim 1 A method comprising: receiving, by token computer, a token request message comprising a real credential or a reference to the real credential, a unique value, and action data from a token requestor; obtaining, by the token computer, a token; transmitting, by the token computer, the token to the token requestor; and providing, by the token computer, the unique value and the action data to a data matching computer, which stores the unique value and the action data, and subsequently receives a message from a data processing computer comprising the unique value, determines that the received unique value matches the stored unique value, and provides the action data to the data processing computer or performs an action with respect to the action data. ### Claim 2 (depends on 1) The method of claim 1, wherein the action data comprises control data. ### Claim 3 (depends on 1) The method of claim 1, wherein the action data comprises control data, the control data controlling interactions performed with respect to the token. ### Claim 4 (depends on 1) The method of claim 1, wherein the token requestor is a user device. ### Claim 5 (depends on 1) The method of claim 1, wherein the token requestor is a service provider computer, which interacts with a user device, which the user device requests the token via the service provider computer. ### Claim 6 (depends on 1) The method of claim 1, wherein the data matching computer provides the action data to the data processing computer, which stores the action data and uses the action data to process further subsequent interactions. ### Claim 7 (depends on 1) The method of claim 1, wherein the token requestor is a user device, and wherein the data matching computer provides the action data to the data processing computer, which stores the action data and uses the action data to process further subsequent interactions. ### Claim 8 (depends on 1) The method of claim 1, wherein the token is a substitute for the real credential. ### Claim 9 (depends on 1) The method of claim 1, wherein the unique value is a nonce. ### Claim 10 (depends on 9) The method of claim 9, wherein the token request message also comprises a signed nonce. ### Claim 11 (depends on 10) The method of claim 10, wherein the data matching computer provides the signed nonce along to the data processing computer along with the nonce. ### Claim 12 (depends on 11) The method of claim 11, wherein the nonce is a random value. ### Claim 13 (depends on 1) The method of claim 1, wherein the unique value is a nonce, which is a random value. ### Claim 14 (depends on 1) The method of claim 1, wherein the data matching computer provides the action data to the data processing computer, which stores the action data and uses the action data to process further subsequent interactions, the action data comprising control data, and the subsequent interactions being authorized or declined based on the control data. ### Claim 15 A system comprising: a token computer comprising a processor, and a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for performing operations comprising: receiving a token request message comprising a real credential or a reference to the real credential, a unique value, and action data from a token requestor; obtaining a token; transmitting the token to the token requestor; and providing the unique value and the action data to a data matching computer, which stores the unique value and the action data, and subsequently receives a message from a data processing computer comprising the unique value, determines that the received unique value matches the stored unique value, and provides the action data to the data processing computer or performs an action with respect to the action data. ### Claim 16 A method comprising: receiving, by a data matching computer from a token computer, a unique value and action data associated with a token request message; storing, by the data matching computer, the unique value and the action data; receiving, by the data matching computer, a message from a data processing computer comprising the unique value; determining, by the data matching computer, that the received unique value matches the stored unique value; and providing the action data to the data processing computer or performing an action with respect to the action data. ### Claim 17 (depends on 16) The method of claim 16, wherein the unique value is a nonce. ### Claim 18 (depends on 17) The method of claim 17, wherein the data matching computer also receives a signed nonce along with the nonce and stores the signed nonce along with the nonce, the signed nonce being the nonce signed with a private key of a token requestor provided the token request message to the token computer. ### Claim 19 (depends on 18) The method of claim 18, wherein the data matching computer receives the signed nonce along with the nonce from the data processing computer. ### Claim 20 (depends on 18) The method of claim 18, wherein the data matching computer verifies the signed nonce using a public key associated with the private key.