Back to results
US 12,756,565 B2Granted
Efficient use of tokens in authentication system
AssigneeVisa International Service Association
InventorsCorrine Matteson, Josephine Harrison Brinkman, Shawn Damon
Life of this patent
Estimating the term…
Abstract
A method is disclosed. The method comprises a directory server computer receiving an authentication request message comprising a token and transmitting a de-tokenization request message comprising the token to a token service computer. The token service computer determines a credential associated with the token. The method further comprises receiving the credential and determining that the token or the credential does not require additional user authentication processing. The method further comprises transmitting an authentication response message with an authentication indicator indicating the transaction is authenticated to an authentication server computer.
Claims20
A method comprising:
- receiving, by a directory server computer from an authentication server computer in a transaction, an authentication request message comprising a token, wherein the token was previously obtained by a resource provider computer from a user device, the user device associated with a user;
- transmitting, by the directory server computer, a de-tokenization request message comprising the token and an expiration date for the token to a token service computer, wherein the token service computer determines a credential associated with the token, wherein the token is one of a plurality of tokens associated with the credential;
- receiving, by the directory server computer, the credential and a second expiration date;
- determining, by the directory server computer, that the credential is a virtual credential and is associated with a funding account identifier;
- determining, by directory server computer, that additional user authentication processing is not required because the credential is a virtual credential and is associated with the funding account identifier;
- and
- transmitting an authentication response message with an authentication indicator indicating that the transaction is authenticated to the authentication server computer;
- receiving, by a processing network computer from the resource provider computer, an authorization request message comprising a value, the token and the authentication indicator;
- obtaining, by the processing network computer from the token service computer, the credential using the token;
- modifying, by the processing network computer, the authorization request message to include the credential instead of the token;
- determining, by the processing network computer, that the token or the credential are associated with transaction controls in a control system;
- determining, by the processing network computer, that the modified authorization request message satisfies the transaction controls, wherein the modified authorization request message is not transmitted to an authorizing entity computer if the transaction controls are not satisfied;
- and
- transmitting, by the processing network computer, the modified authorization request message comprising the credential to the authorizing entity computer for authorization.
11 more elements
A system comprising:
- a directory server computer comprising a first processor, and a first non-transitory computer readable medium comprising first code, executable by the first processor to perform a first method comprising,
- receiving, from an authentication server computer in a transaction, an authentication request message comprising a token, wherein the token was previously obtained by a resource provider computer from a user device, the user device associated with a user,
- transmitting a de-tokenization request message comprising the token and an expiration date for the token to a token service computer, wherein the token service computer determines a credential associated with the token, wherein the token is one of a plurality of tokens associated with the credential,
- receiving the credential and a second expiration date,
- determining that the credential is a virtual credential and is associated with a funding account identifier,
- determining that additional user authentication processing is not required because the credential is a virtual credential and is associated with the funding account identifier, and
- transmitting an authentication response message with an authentication indicator indicating that the transaction is authenticated to the authentication server computer;
- and
- a processing network computer comprising a second processor and a second non-transitory computer readable medium, the second non-transitory computer readable medium comprising second code, executable by the second processor to perform a second method comprising,
- receiving, from the resource provider computer, an authorization request message comprising a value, the token and the authentication indicator,
- obtaining, from the token service computer, the credential using the token;
- modifying the authorization request message to include the credential instead of the token,
- determining that the token or the credential are associated with transaction controls in a control system,
- determining that the modified authorization request message satisfies the transaction controls, wherein the modified authorization request message is not transmitted to an authorizing entity computer if the transaction controls are not satisfied, and
- transmitting the modified authorization request message comprising the credential to the authorizing entity computer for authorization.
12 more elements
Dependencies are inferred from the claim text.