# US 12,112,332 B2 · Systems and methods for cost altering payment services

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,112,332 B2
- Document ID: US12112332B2
- Status: Granted
- Kind: B2
- Application number: 17/515,224
- Filed: 2021-10-29
- Published: 2022-02-24
- Granted: 2024-10-08
- Earliest claimed: 2012-07-31
- Assignees: Worldpay, LLC
- Applicants: Worldpay, LLC
- Inventors: Matthew D. Ozvat; John Berkley; Kevin Oliver; William T. Cooper; Charles E. Watts; Rachel B. Cochran
- Web page: https://patentgrep.com/patent/US12112332B2

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/12: specially adapted for electronic shopping systems
- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR}
- G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/3829: {involving key management}
- G06Q 2220/00: Business processing using cryptography
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Cost altering payment services (“CAPS”) system in association with a distributed enhanced payment (“DEP”) processing system includes a merchant point of sale (“POS”) terminal system and a remote enhanced payment management system (“EPMS”). The remote EPMS receives payment transactions including additional risk mitigating payment transaction (“RMPT”) information and based on that additional RMPT information provides altered transaction costs. The remote EPMS provides facilities for the merchant to review and revise payment management services so as to utilize additional RMPT information received from the merchant POS terminal system so as to alter transaction costs. Such facilities provide information to determine the relative potential transaction cost benefits of various payment management service sets utilizing cost profiles that represent the costs of archival, recorded and projected future transactions. The remote EPMS provides “transaction guidance” technology to be utilized by the merchant's POS terminal system to facilitate prompting for and acquiring additional RMPT information.

## Claims

### Claim 1

A method for enhancing security of an electronic transaction, the method comprising:
collecting, by a point of sale terminal system, sensitive information pertaining to the electronic transaction according to parameters of a service set chosen by a merchant of the point of sale terminal system, wherein the collecting comprises: receiving, in response to a prompt by the point of sale terminal system for one or more predetermined types of security information as dictated by transaction guidance, the one or more predetermined types of security information;
encrypting the sensitive information at reader head of the point of sale terminal system utilizing an encryption protocol comprising one or more of: a merchant ID, a transaction amount, and a password;
transmitting, by the point of sale terminal system, the encrypted sensitive information to a payment service associated with the tokenization and payment management system;
conducting, by the payment service, an encryption check on the encrypted sensitive information;
decrypting, by the tokenization and payment management system, the encrypted sensitive information, wherein the decrypting comprises:
transferring, from the payment service, the encrypted sensitive information to a tokenizer encryption service;
validating, using the tokenizer encryption service, at least one credential and at least one key for the encrypted sensitive information, wherein the validating comprises utilizing a data tier populated by analytics;
transferring, from the tokenizer encryption service, the validated encrypted sensitive information to a hardware security module; and
decrypting, using the hardware security module, the validated encrypted sensitive information;
tokenizing, by the tokenization and payment management system, the decrypted sensitive information to produce a token, wherein the token comprises a primary account number (PAN), a group ID (GID), a token expiration date, and a payment card expiration date, wherein the token expiration date is variable and is dependent upon a predetermined token designation, wherein the predetermined token designation is one of: a single use token or a recurring token;
encrypting, by the tokenization and payment management system, the tokenized information including at least the PAN and the group ID;
transmitting, by the tokenization and payment management system, the encrypted tokenized information to the payment service;
transmitting, from the payment service, clear text associated with the encrypted tokenized information to a payment system;
receiving, by the point of sale terminal system, the encrypted tokenized information and a transaction authorization response from the payment system, wherein the encrypted tokenized information is stored in a local database;
receiving, at the tokenization and payment management system, an indication of another electronic transaction associated with another merchant;
determining whether another merchant ID associated with the another merchant is present in the data tier and is correlated with the GID; and
accessing, by the tokenization and payment management system and from the local database, the encrypted tokenized information for processing of the another electronic transaction upon determining that the another merchant ID is correlated with the GID.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
determining, via the tokenization and payment management system, configuration information of a user to the electronic transaction to perform a tokenization, wherein the electronic transaction is routed to a tokenization logic upon determining a match between the configuration information of the user and a token indicator.

### Claim 3 (depends on 2)

The method of claim 2, further comprising:
assigning a group identification information to one or more users of the electronic transaction, wherein the group identification information is assigned to accounts of the one or more users, included in identification information of each of the one or more users, or a combination thereof;
storing, by a data tier system, the group identification information and correlating the group identification information to the configuration information of the user; and
authorizing, by the tokenization and payment management system, the one or more users for utilizing the encrypted tokenized information upon determining a match between the group identification information and the configuration information of the user.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
generating, by a payment management system, transaction guidance for utilization by the point of sale terminal system,
wherein the transaction guidance includes risk mitigating payment transaction information for altering cost related information of the electronic transaction, and wherein the transaction guidance varies based upon service selected by a user.

### Claim 5 (depends on 4)

The method of claim 4, wherein the risk mitigating payment transaction information includes at least one of: primary credential information to identify account information, supplemental credential information to validate the user by providing additional information pre-associated with the account information, or a payment incidental qualifier to indicate an occurrence of a fraud by providing information on circumstances during a payment transaction.

### Claim 6 (depends on 1)

The method of claim 1, wherein the electronic transaction includes update information for the encrypted tokenized information, further comprising:
updating the encrypted tokenized information based upon a schedule, a user request, or an expiration date, wherein the update includes replacing the encrypted tokenized information with a new encrypted tokenized information, and wherein the new encrypted tokenized information accompanies the transaction authorization response.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
recording, by a payment management system, at least one biometric measurement of the user at the point of sale terminal system to authorize a user for the electronic transaction, wherein the at least one biometric measurement includes fingerprint scanning, retinal scanning, facial recognition, vocal recognition, speech pattern recognition, or a combination thereof; and
authenticating, by the payment management system, the user for the electronic transaction upon matching the at least one biometric measurement with stored biometric information of the user.

### Claim 8 (depends on 7)

The method of claim 7, wherein the at least one biometric measurement is encrypted during recording at a reader head of the point of sale terminal system, and wherein an end to end encryption is utilized to securely communicate the at least one biometric measurement.

### Claim 9

A system for enhancing security of an electronic transaction, the system comprising:
one or more processors; and
a storage device storing instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
collecting, by a point of sale terminal system, sensitive information pertaining to the electronic transaction according to parameters of a service set chosen by a merchant of the point of sale terminal system, wherein the collecting comprises: receiving, in response to a prompt by the point of sale terminal system for one or more predetermined types of security information as dictated by transaction guidance, the one or more predetermined types of security information;
encrypting the sensitive information at reader head of the point of sale terminal system utilizing an encryption protocol comprising one or more of: a merchant ID, a transaction amount, and a password;
transmitting, by the point of sale terminal system, the encrypted sensitive information to a payment service associated with the tokenization and payment management system;
conducting, by the payment service, an encryption check on the encrypted sensitive information;
decrypting, by the tokenization and payment management system, the encrypted sensitive information, wherein the decrypting comprises:
transferring, from the payment service, the encrypted sensitive information to a tokenizer encryption service;
validating, using the tokenizer encryption service, at least one credential and at least one key for the encrypted sensitive information, wherein the validating comprises utilizing a data tier populated by analytics;
transferring, from the tokenizer encryption service, the validated encrypted sensitive information to a hardware security module; and
decrypting, using the hardware security module, the validated encrypted sensitive information;
tokenizing, by the tokenization and payment management system, the decrypted sensitive information to produce a token, wherein the token comprises a primary account number (PAN), a group ID (GID), a token expiration date, and a payment card expiration date, wherein the token expiration date is variable and is dependent upon a predetermined token designation, wherein the predetermined token designation is one of: a single use token or a recurring token;
encrypting, by the tokenization and payment management system, the tokenized information including at least the PAN and the group ID;
transmitting, by the tokenization and payment management system, the encrypted tokenized information to the payment service;
transmitting, from the payment service, clear text associated with the encrypted tokenized information to a payment system;
receiving, by the point of sale terminal system, the encrypted tokenized information and a transaction authorization response from the payment system, wherein the encrypted tokenized information is stored in a local database;
receiving, at the tokenization and payment management system, an indication of another electronic transaction associated with another merchant;
determining whether another merchant ID associated with the another merchant is present in the data tier and is correlated with the GID; and
accessing, by the tokenization and payment management system and from the local database, the encrypted tokenized information for processing of the another electronic transaction upon determining that the another merchant ID is correlated with the GID.

### Claim 10 (depends on 9)

The system of claim 9, the operations further comprising:
determining, via the tokenization and payment management system, configuration information of a user to the electronic transaction to perform a tokenization, wherein the electronic transaction is routed to a tokenization logic upon determining a match between the configuration information of the user and a token indicator.

### Claim 11 (depends on 10)

The system of claim 10, the operations further comprising:
assigning a group identification information to one or more users of the electronic transaction, wherein the group identification information is assigned to accounts of the one or more users, included in identification information of each of the one or more users, or a combination thereof;
storing, by a data tier system, the group identification information and correlating the group identification information to the configuration information of the user; and
authorizing, by the tokenization and payment management system, the one or more users for utilizing the encrypted tokenized information upon determining a match between the group identification information and the configuration information of the user.

### Claim 12 (depends on 9)

The system of claim 9, the operations further comprising:
generating, by a payment management system, transaction guidance for utilization by the point of sale terminal system,
wherein the transaction guidance includes risk mitigating payment transaction information for altering cost related information of the electronic transaction, and wherein the transaction guidance varies based upon service selected by a user.

### Claim 13 (depends on 12)

The system of claim 12, wherein the risk mitigating payment transaction information includes at least one of: primary credential information to identify account information, supplemental credential information to validate the user by providing additional information pre-associated with the account information, or a payment incidental qualifier to indicate an occurrence of a fraud by providing information on circumstances during a payment transaction.

### Claim 14 (depends on 9)

The system of claim 9, wherein the electronic transaction includes update information for the encrypted tokenized information, the operations further comprising:
updating the encrypted tokenized information based upon a schedule, a user request, or an expiration date, wherein the update includes replacing the encrypted tokenized information with a new encrypted tokenized information, and wherein the new encrypted tokenized information accompanies the transaction authorization response.

### Claim 15 (depends on 9)

The system of claim 9, the operations further comprising:
recording, by a payment management system, at least one biometric measurement of the user at the point of sale terminal system to authorize a user for the electronic transaction, wherein the at least one biometric measurement include fingerprint scanning, retinal scanning, facial recognition, vocal recognition, speech pattern recognition, or a combination thereof; and
authenticating, by the payment management system, the user for the electronic transaction upon matching the at least one biometric measurement with stored biometric information of the user.

### Claim 16 (depends on 15)

The system of claim 15, wherein the at least one biometric measurement is encrypted during recording at a reader head of the point of sale terminal system, and wherein an end to end encryption is utilized to securely communicate the at least one biometric measurement.

### Claim 17

A non-transitory computer readable medium for enhancing security of an electronic transaction, the non-transitory computer readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
collecting, by a point of sale terminal system, sensitive information pertaining to the electronic transaction according to parameters of a service set chosen by a merchant of the point of sale terminal system, wherein the collecting comprises: receiving, in response to a prompt by the point of sale terminal system for one or more predetermined types of security information as dictated by transaction guidance, the one or more predetermined types of security information;
encrypting the sensitive information at reader head of the point of sale terminal system utilizing an encryption protocol comprising one or more of: a merchant ID, a transaction amount, and a password;
transmitting, by the point of sale terminal system, the encrypted sensitive information to a payment service associated with the tokenization and payment management system;
conducting, by the payment service, an encryption check on the encrypted sensitive information;
decrypting, by the tokenization and payment management system, the encrypted sensitive information, wherein the decrypting comprises:
transferring, from the payment service, the encrypted sensitive information to a tokenizer encryption service;
validating, using the tokenizer encryption service, at least one credential and at least one key for the encrypted sensitive information, wherein the validating comprises utilizing a data tier populated by analytics;
transferring, from the tokenizer encryption service, the validated encrypted sensitive information to a hardware security module; and
decrypting, using the hardware security module, the validated encrypted sensitive information;
tokenizing, by the tokenization and payment management system, the decrypted sensitive information to produce a token, wherein the token comprises a primary account number (PAN), a group ID (GID), a token expiration date, and a payment card expiration date, wherein the token expiration date is variable and is dependent upon a predetermined token designation, wherein the predetermined token designation is one of: a single use token or a recurring token;
encrypting, by the tokenization and payment management system, the tokenized information including at least the PAN and the group ID;
transmitting, by the tokenization and payment management system, the encrypted tokenized information to the payment service;
transmitting, from the payment service, clear text associated with the encrypted tokenized information to a payment system;
receiving, by the point of sale terminal system, the encrypted tokenized information and a transaction authorization response from the payment system, wherein the encrypted tokenized information is stored in a local database;
receiving, at the tokenization and payment management system, an indication of another electronic transaction associated with another merchant;
determining whether another merchant ID associated with the another merchant is present in the data tier and is correlated with the GID; and
accessing, by the tokenization and payment management system and from the local database, the encrypted tokenized information for processing of the another electronic transaction upon determining that the another merchant ID is correlated with the GID.

### Claim 18 (depends on 17)

The non-transitory computer readable medium of claim 17, the operations further comprising:
determining, via the tokenization and payment management system, configuration information of a user to the electronic transaction to perform a tokenization, wherein the electronic transaction is routed to a tokenization logic upon determining a match between the configuration information of the user and a token indicator.

### Claim 19 (depends on 18)

The non-transitory computer readable medium of claim 18, the operations further comprising:
assigning a group identification information to one or more users of the electronic transaction, wherein the group identification information is assigned to accounts of the one or more users, included in identification information of each of the one or more users, or a combination thereof;
storing, by a data tier system, the group identification information and correlating the group identification information to the configuration information of the user; and
authorizing, by the tokenization and payment management system, the one or more users for utilizing the encrypted tokenized information upon determining a match between the group identification information and the configuration information of the user.

### Claim 20 (depends on 17)

The non-transitory computer readable medium of claim 17, the operations further comprising:
generating, by a payment management system, transaction guidance for utilization by the point of sale terminal system,
wherein the transaction guidance includes risk mitigating payment transaction information for altering cost related information of the electronic transaction, and wherein the transaction guidance varies based upon service selected by a user.