# US 12,182,813 B2 · Authenticated secure online and offline transactions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,813 B2 - Document ID: US12182813B2 - Status: Granted - Kind: B2 - Application number: 18/316,948 - Filed: 2023-05-12 - Published: 2023-09-07 - Granted: 2024-12-31 - Earliest claimed: 2018-03-23 - Assignees: American Express Travel Related Services Company, Inc. - Applicants: American Express Travel Related Services Company, Inc. - Inventors: Upendra Mardikar - Web page: https://patentgrep.com/patent/US12182813B2 ## CPC - G06Q 20/401: {Transaction verification} - G06Q 20/3821: {Electronic credentials} - G06Q 20/385: {using an alias or single-use codes} - G06Q 2220/00: Business processing using cryptography - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The present disclosure presents systems and related methods for customer defined limited use authorization. One such method comprises implementing a customer defined generation control associated with a parent transaction account; receiving a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app; verifying that the generation control condition has been satisfied; generating via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data; and transmitting, via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied. ## Claims ### Claim 1 A method comprising: implementing, by a computer based system, a customer defined generation control associated with a parent transaction account, wherein the customer defined generation control indicates a generation control condition that authorizes an electronic payment token to be generated by a customer and transmitted to a customer mobile device, wherein the generation control condition comprises at least one of a date range or a date horizon control; receiving, by the computer based system, a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app, wherein the request comprises at least an identification of the parent transaction account of the customer and a monetary value of the electronic payment token; verifying, by the computer based system, that the generation control condition has been satisfied; generating, by the computer based system and via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein the electronic payment token comprises a token identification (ID), wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data and associating the token data to the electronic payment token based on the token ID; and transmitting, by the computer based system and via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied. ### Claim 2 (depends on 1) The method of claim 1, wherein the customer defined generation control further comprises a limit on a number of electronic payment tokens that can be generated during the date range. ### Claim 3 (depends on 1) The method of claim 1, wherein the customer defined authorization control comprises a payment channel for which the electronic payment token is only authorized to be used as a payment in a transaction. ### Claim 4 (depends on 3) The method of claim 3, wherein the payment channel comprises a retail payment channel using a physical point of sale terminal. ### Claim 5 (depends on 3) The method of claim 3, wherein the payment channel comprises an online payment channel. ### Claim 6 (depends on 1) The method of claim 1, wherein the customer defined authorization control comprises a specification of a merchant and a specification of a geographical location for the merchant for which the electronic payment token is authorized to be used as a payment in a transaction. ### Claim 7 (depends on 1) The method of claim 1, wherein the customer defined authorization control comprises a date range for which the electronic payment token is authorized to be used as a payment in a transaction. ### Claim 8 A system comprising: a processor, a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising: implementing a customer defined generation control associated with a parent transaction account, wherein the customer defined generation control indicates a generation control condition that authorizes an electronic payment token to be generated by a customer and transmitted to a customer mobile device, wherein the generation control condition comprises at least one of a date range or a date horizon control; receiving a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app, wherein the request comprises at least an identification of the parent transaction account of the customer and a monetary value of the electronic payment token; verifying that the generation control condition has been satisfied; generating, via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein the electronic payment token comprises a token identification (ID), wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data and associating the token data to the electronic payment token based on the token ID; and transmitting, via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied. ### Claim 9 (depends on 8) The system of claim 8, wherein the customer defined generation control further comprises a limit on a number of electronic payment tokens that can be generated during the date range. ### Claim 10 (depends on 8) The system of claim 8, wherein the customer defined authorization control comprises a payment channel for which the electronic payment token is only authorized to be used as a payment in a transaction. ### Claim 11 (depends on 10) The system of claim 10, wherein the payment channel comprises a retail payment channel using a physical point of sale terminal. ### Claim 12 (depends on 10) The system of claim 10, wherein the payment channel comprises an online payment channel. ### Claim 13 (depends on 8) The system of claim 8, wherein the customer defined authorization control comprises a specification of a merchant and a specification of a geographical location for the merchant for which the electronic payment token is authorized to be used as a payment in a transaction. ### Claim 14 (depends on 8) The system of claim 8, wherein the customer defined authorization control comprises a date range for which the electronic payment token is authorized to be used as a payment in a transaction. ### Claim 15 An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer based system, cause the computer based system to perform operations comprising: implementing a customer defined generation control associated with a parent transaction account, wherein the customer defined generation control indicates a generation control condition that authorizes an electronic payment token be generated by a customer and transmitted to a customer mobile device, wherein the generation control condition comprises at least one of a date range or a date horizon control; receiving a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app, wherein the request comprises at least an identification of the parent transaction account of the customer and a monetary value of the electronic payment token; verifying that the generation control condition has been satisfied; generating, via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein the electronic payment token comprises a token identification (ID), wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data and associating the token data to the electronic payment token based on the token ID; and transmitting, via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied. ### Claim 16 (depends on 15) The article of manufacture of claim 15, wherein the customer defined generation control further comprises a limit on a number of electronic payment tokens that can be generated during the date range. ### Claim 17 (depends on 15) The article of manufacture of claim 15, wherein the customer defined authorization control comprises a payment channel for which the electronic payment token is only authorized to be used as a payment in a transaction. ### Claim 18 (depends on 17) The article of manufacture of claim 17, wherein the payment channel comprises a retail payment channel using a physical point of sale terminal. ### Claim 19 (depends on 17) The article of manufacture of claim 17, wherein the payment channel comprises an online payment channel. ### Claim 20 (depends on 15) The article of manufacture of claim 15, wherein the customer defined authorization control comprises a specification of a merchant and a specification of a geographical location for the merchant for which the electronic payment token is authorized to be used as a payment in a transaction.