# US 12,217,243 B1 · Methods and systems for securely facilitating cross-platform token compatibility via multi-tokenization

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,217,243 B1
- Document ID: US12217243B1
- Status: Granted
- Kind: B1
- Application number: 16/697,885
- Filed: 2019-11-27
- Granted: 2025-02-04
- Earliest claimed: 2019-11-27
- Assignees: Worldpay, LLC
- Applicants: Worldpay, LLC
- Inventors: Stephen E. Dinan; James S. Osborn; William J. Wied
- Web page: https://patentgrep.com/patent/US12217243B1

## CPC

- G06Q 20/3672: {initialising or reloading thereof}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/363: {with the personal data of a user}
- G06Q 20/3678: {e-cash details, e.g. blinded, divisible or detecting double spending}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/3825: {Use of electronic signatures}
- G06Q 20/3827: {Use of message hashing}
- G06Q 20/401: {Transaction verification}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Systems and methods are disclosed for cross-platform token compatibility. One method comprises receiving, by a token exchange service system, a primary tokenization request from an upstream entity, generating, by the token exchange service system, one or more ancillary tokenization requests based on the primary tokenization request, and transmitting, by the token exchange service system, the one or more ancillary tokenization requests to respective one or more output token vaults. One or more ancillary tokenization responses may then be received from the one or more output token vaults, and a primary tokenization response may be generated based on the one or more ancillary tokenization responses. The primary tokenization response may be transmitted to the upstream entity.

## Claims

### Claim 1

A computer-implemented method for cross-platform token compatibility, comprising:
providing, by a token exchange service system, a portal to a merchant system through which the merchant system provides output token service provider configuration identifiers and activates token service providers corresponding to the output token service provider configuration identifiers;
receiving, by the token exchange service system, the output token service provider configuration identifiers and an activation of the token service providers corresponding to the output token service provider configuration identifiers from the merchant system via the portal;
receiving, by the token exchange service system, a primary tokenization request including sensitive data of a user of the merchant system and the output token service provider configuration identifiers from an intermediary system that is provided between the merchant and the token exchange service system;
generating, by the token exchange service system, a globally unique identifier (GUID) based on the received primary tokenization request, the GUID stored in a database of the token exchange system;
determining, by the token exchange service system, a plurality of output token vaults that are associated with the plurality of token service providers communicating with the token exchange service system to which the sensitive data is to be routed for tokenization based on the output token service provider configuration identifiers included in the primary tokenization request and based on the activation of the token service providers corresponding to the output token service provider configuration identifiers received from the merchant system via the generating, by the token exchange service system, ancillary tokenization requests based on determining the plurality of output token vaults to which the sensitive data is to be routed for tokenization;
transmitting, by the token exchange service system, the ancillary tokenization requests to the plurality of output token vaults that are associated with a plurality of token service providers and that are configured to generate a plurality of output tokens based on the sensitive data of the user;
receiving, by the token exchange service system, ancillary tokenization responses generated from the plurality of output token vaults;
generating, by the token exchange service system, a primary tokenization response based on the ancillary tokenization responses, wherein the primary tokenization response includes the GUID and the plurality of output tokens generated by the plurality of output token vaults associated with the plurality of token service providers; and
transmitting, by the token exchange service system, the primary tokenization response including the plurality of output tokens generated based on the sensitive data of the user to the intermediary system to permit the intermediary system to use the plurality of output tokens in services rendered by the intermediary system, store the plurality of output tokens in storage, or transmit an output token, of the plurality of output tokens, to the merchant system.

### Claim 2 (depends on 1)

The method of claim 1, wherein the primary tokenization request is an application programming interface (API) request.

### Claim 3 (depends on 1)

The method of claim 1, wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user.

### Claim 4 (depends on 1)

The method of claim 1, wherein the primary tokenization request further comprises supplemental information.

### Claim 5 (depends on 4)

The method of claim 4, wherein the supplemental information comprises at least one of: a payment vehicle expiration date, an address, and a card security code.

### Claim 6 (depends on 4)

The method of claim 4, wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user, and at least one of the ancillary tokenization requests further comprises supplemental information.

### Claim 7 (depends on 6)

The method of claim 6, wherein each of the plurality of output token vaults generates an output token that corresponds to the sensitive data of the user, and at least one of the plurality of output token vaults generates an output token that corresponds to the sensitive data associated with the user and the supplemental information.

### Claim 8

A token exchange service system for cross-platform token compatibility, the system comprising:
one or more processors; and
at least one data storage comprising instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising:
providing, by the token exchange service system, a portal to a merchant system through which the merchant system provides output token service provider configuration identifiers and activates token service providers corresponding to the output token service provider configuration identifiers;
receiving, by the token exchange service system, the output token service provider configuration identifiers and an activation of the token service providers corresponding to the output token service provider configuration identifiers from the merchant system via the portal;
receiving, by the token exchange service system, a primary tokenization request including sensitive data of a user of the merchant system and the output token service provider configuration identifiers from an intermediary system that is provided between the merchant and the token exchange service system;
generating, by the token exchange service system, a globally unique identifier (GUID) based on the received primary tokenization request, the GUID stored in a database of the token exchange system;
determining, by the token exchange service system, a plurality of output token vaults that are associated with the plurality of token service providers communicating with the token exchange service system to which the sensitive data is to be routed for tokenization based on the output token service provider configuration identifiers included in the primary tokenization request and based on the activation of the token service providers corresponding to the output token service provider configuration identifiers received from the merchant system via the portal;
generating, by the token exchange service system, ancillary tokenization requests based on determining the plurality of output token vaults to which the sensitive data is to be routed for tokenization;
transmitting, by the token exchange service system, the ancillary tokenization requests to the plurality of output token vaults that are associated with a plurality of token service providers and that are configured to generate a plurality of output tokens based on the sensitive data of the user;
receiving, by the token exchange service system, ancillary tokenization responses generated from the plurality of output token vaults;
generating, by the token exchange service system, a primary tokenization response based on the ancillary tokenization responses, wherein the primary tokenization response includes the GUID and the plurality of output tokens generated by the plurality of output token vaults associated with the plurality of token service providers; and
transmitting, by the token exchange service system, the primary tokenization response including the plurality of output tokens generated based on the sensitive data of the user to the intermediary system to permit the intermediary system to use the plurality of output tokens in services rendered by the intermediary system, store the plurality of output tokens in storage, or transmit an output token, of the plurality of output tokens, to the merchant system.

### Claim 9 (depends on 8)

The system of claim 8, wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user.

### Claim 10 (depends on 8)

The system of claim 8, wherein the primary tokenization request further comprises supplemental information.

### Claim 11 (depends on 10)

The system of claim 10, wherein the supplemental information comprises at least one of: a payment vehicle expiration date, an address, and a card security code.

### Claim 12 (depends on 10)

The system of claim 10, wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user, and at least one of the ancillary tokenization requests further comprises supplemental information.

### Claim 13 (depends on 12)

The system of claim 12, wherein each of the plurality of output token vaults generates an output token that corresponds to the sensitive data of the user, and at least one of the plurality of output token vaults generates an output token that corresponds to the sensitive data associated with the user and the supplemental information.

### Claim 14

A non-transitory computer-readable medium for cross-platform token compatibility, the non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:
providing, by a token exchange service system, a portal to a merchant system through which the merchant system provides output token service provider configuration identifiers and activates token service providers corresponding to the output token service provider configuration identifiers;
receiving, by the token exchange service system, the output token service provider configuration identifiers and an activation of the token service providers corresponding to the output token service provider configuration identifiers from the merchant system via the portal;
receiving, by the token exchange service system, a primary tokenization request including sensitive data of a user of the merchant system and the output token service provider configuration identifiers from an intermediary system that is provided between the merchant and the token exchange service system;
generating, by the token exchange service system, a globally unique identifier (GUID) based on the received primary tokenization request, the GUID stored in a database of the token exchange system;
determining, by the token exchange service system, a plurality of output token vaults that are associated with the plurality of token service providers communicating with the token exchange service system to which the sensitive data is to be routed for tokenization based on the output token service provider configuration identifiers included in the primary tokenization request and based on the activation of the token service providers corresponding to the output token service provider configuration identifiers received from the merchant system via the generating, by the token exchange service system, ancillary tokenization requests based on determining the plurality of output token vaults to which the sensitive data is to be routed for tokenization;
transmitting, by the token exchange service system, the ancillary tokenization requests to the plurality of output token vaults that are associated with a plurality of token service providers and that are configured to generate a plurality of output tokens based on the sensitive data of the user;
receiving, by the token exchange service system, ancillary tokenization responses generated from the plurality of output token vaults;
generating, by the token exchange service system, a primary tokenization response based on the ancillary tokenization responses, wherein the primary tokenization response includes the GUID and the plurality of output tokens generated by the plurality of output token vaults associated with the plurality of token service providers; and
transmitting, by the token exchange service system, the primary tokenization response including the plurality of output tokens generated based on the sensitive data of the user to the intermediary system to permit the intermediary system to use the plurality of output tokens in services rendered by the intermediary system, store the plurality of output tokens in storage, or transmit an output token, of the plurality of output tokens, to the merchant system.
