# US 12,182,792 B2 · Systems and methods for using a transaction identifier to protect sensitive credentials > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,792 B2 - Document ID: US12182792B2 - Status: Granted - Kind: B2 - Application number: 17/847,610 - Filed: 2022-06-23 - Published: 2022-10-06 - Granted: 2024-12-31 - Earliest claimed: 2017-07-11 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Jalpesh Chitalia; Ansar Ansari; Samuel Shrauger - Web page: https://patentgrep.com/patent/US12182792B2 ## CPC - G06Q 20/326: {Payment applications installed on the mobile devices} - G06Q 20/227: {characterised in that multiple accounts are available, e.g. to the payer} - G06Q 20/3574: {Multiple applications on card} - G06Q 20/3672: {initialising or reloading thereof} - G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights} - G06Q 20/383: {Anonymous user system} - G06Q 20/385: {using an alias or single-use codes} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Embodiments of the invention are directed to systems and methods of securely transmitting account credentials, such as a token. A user device and application can initially select an account, and then obtain a transaction identifier associated with the account. The user device can provide the transaction identifier to a resource provider, which can then directly exchange the transaction identifier for the account credentials. ## Claims ### Claim 1 A method comprising: receiving, by a communication application of a user device, a request to complete a transaction associated with a user; determining, by the communication application of the user device, a plurality of accounts associated with the user; receiving, by the communication application of the user device, a selection of an account from the plurality of accounts; sending, by the communication application of the user device, a request for a transaction identifier associated with the selected account to a server computer, the request including user identifier information and a facilitator application identifier, wherein the facilitator application identifier is one of a plurality of facilitator application identifiers that are respectively associated with a plurality of facilitator applications stored on the user device, wherein the received facilitator application identifier identifies a facilitator application capable of supporting the selected account; receiving, from the server computer by the facilitator application associated with the facilitator application identifier, instructions that cause execution of the facilitator application for authenticating the user to provide an authentication indicator based at least on the user identifier information; executing, by the user device, the facilitator application to authenticate the user using biometric information of the user and to generate the authentication indicator; transmitting, by the user device, the authentication indicator to the server computer based on authenticating the user; receiving, by the communication application of the user device, the transaction identifier from the server computer; accessing, by the communication application of the user device, a resource provider webpage being executed on the user device, the resource provider webpage being associated with a resource provider computer; and transmitting, by the communication application of the user device, the transaction identifier to the resource provider computer via the resource provider webpage, wherein the resource provider computer subsequently transmits the transaction identifier to the server computer, and wherein the server computer responds to the resource provider computer by transmitting account credentials associated with the selected account. ### Claim 2 (depends on 1) The method of claim 1, wherein the communication application is a browser application executed on the user device. ### Claim 3 (depends on 1) The method of claim 1, wherein receiving the transaction identifier from the server computer takes place via a first communication channel, the first communication channel including the server computer and the communication application, and wherein the transmitting the transaction identifier to the server computer by the resource provider computer takes place via a second communication channel, the second communication channel including the server computer and the resource provider computer, the second communication channel not including the communication application. ### Claim 4 (depends on 1) The method of claim 1, wherein the resource provider computer subsequently uses the account credentials to complete the transaction. ### Claim 5 (depends on 1) The method of claim 1, wherein the user identifier information and the facilitator application identifier are stored in one or more cookies of the user device. ### Claim 6 A user device comprising: a processor; and a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method including: receiving, by a communication application of the user device, a request to complete a transaction associated with a user; determining, by the communication application of the user device, a plurality of accounts associated with the user; receiving, by the communication application of the user device, a selection of an account from the plurality of accounts; sending, by the communication application of the user device, a request for a transaction identifier associated with the selected account to a server computer, the request including user identifier information and a facilitator application identifier, wherein the facilitator application identifier is one of a plurality of facilitator application identifiers that are respectively associated with a plurality of facilitator applications stored on the user device, wherein the received facilitator application identifier identifies a facilitator application capable of supporting the selected account; receiving, from the server computer by the facilitator application associated with the facilitator application identifier, instructions that cause execution of the facilitator application for authenticating the user to provide an authentication indicator based at least on the user identifier information; executing the facilitator application to authenticate the user using biometric information of the user and to generate the authentication indicator; transmitting the authentication indicator to the server computer based on authenticating the user; receiving, by the communication application of the user device, the transaction identifier from the server computer; accessing, by the communication application of the user device, a resource provider webpage being executed on the user device, the resource provider webpage being associated with a resource provider computer; and transmitting, by the communication application of the user device, the transaction identifier to the resource provider computer via the resource provider webpage, wherein the resource provider computer subsequently transmits the transaction identifier to the server computer, and wherein the server computer responds to the resource provider computer by transmitting account credentials associated with the selected account. ### Claim 7 (depends on 6) The user device of claim 6, wherein the non-transitory computer readable medium includes a browser application. ### Claim 8 (depends on 6) The user device of claim 6, wherein the account credentials include a token. ### Claim 9 (depends on 6) The user device of claim 6, wherein the request for the transaction identifier includes information identifying the selected account. ### Claim 10 (depends on 6) The user device of claim 6, wherein the resource provider computer subsequently uses the account credentials to complete the transaction. ### Claim 11 (depends on 6) The user device of claim 6, wherein the user identifier information is maintained in one or more cookies of the user device. ### Claim 12 (depends on 6) The user device of claim 6, wherein the authentication indicator includes a cryptogram or a flag. ### Claim 13 (depends on 6) The user device of claim 6, wherein the account credentials include a primary account number (PAN). ### Claim 14 (depends on 1) The method of claim 1, further comprising: prior to the receiving the selection of the account, providing, by the communication application, a display window on the user device, the display window displaying the plurality of accounts; and receiving, by the communication application, a user input through the display window, the user input providing the selection of the account from the plurality of accounts displayed in the display window. ### Claim 15 (depends on 1) The method of claim 1, wherein the facilitator application is associated with a facilitator server.