Validation service for account verification

A resource provider system comprising:

• a processor;
• and
• a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method including:
• initiating an authorization process by receiving, from a portable device, a portable device identifier and a cryptogram generated by the portable device using the portable device identifier and a unique derivation key generated based on an intermediate access identifier associated with the portable device identifier, the intermediate access identifier comprising a virtual primary account number not operable for being used to directly conduct a transaction;
• generating the unique derivation key using at least the intermediate access identifier that is obtained by the resource provider system using the received portable device identifier;
• generating a second cryptogram using the received portable device identifier and the generated unique derivation key;
• verifying the cryptogram by comparing the second cryptogram and the cryptogram generated by the portable device;
• obtaining an authentication response indicator after verification of the cryptogram;
• generating, based at least in part on the authentication response indicator, an authorization request message comprising an access identifier, the access identifier being a payment credential having the same format as the intermediate access identifier;
• transmitting the authorization request message to a processing computer;
• and
• receiving, from the processing computer, an authorization response message comprising an authorization response indicator, wherein the authorization process is completed by receipt of the authorization response message.

A processing computer comprising:

• a processor;
• and
• a non-transitory computer readable medium coupled to the processor and comprising code that, when executed by the processor, causes the processor to perform a method including:
• receiving, from a resource provider system in an authorization process, an authentication request message comprising a portable device identifier and a cryptogram generated by a portable device using the portable device identifier and a unique derivation key generated based on an intermediate access identifier associated with the portable device identifier, the intermediate access identifier comprising a virtual primary account number not operable for being used to directly conduct a transaction;
• generating the unique derivation key using at least the intermediate access identifier that is obtained by the processing computer using the received portable device identifier;
• generating a second cryptogram using the received portable device identifier and the generated unique derivation key;
• determining that the cryptogram is validated by determining that the second cryptogram matches the cryptogram generated by the portable device;
• transmitting an authentication response message to the resource provider system;
• receiving, from the resource provider system, a first authorization request message comprising an access identifier, the access identifier being a payment credential having the same format as the intermediate access identifier;
• transmitting a second authorization request message comprising the access identifier to an authorization computer;
• receiving, from the authorization computer, a first authorization response message containing an authorization response indicator;
• and
• transmitting, to the resource provider system, a second authorization response message comprising the authorization response indicator.