Systems and Methods of Processing Payment Transactions Using One-Time Tokens
AssigneeMastercard International Incorporated
InventorJohn Cacioppo
Life of this patent
Estimating the term…
Abstract
Disclosed are exemplary embodiments of systems and methods for processing payment transaction using pseudo-PAN. In an exemplary embodiment, a method generally includes generating an encryption salt, receiving a request from a consumer indicating a possible payment transaction, in response to the request, generating a one-time token, based on the actual payment information and a most recent generated encryption salt, the one-time token having the same format as the payment information, with a routing segment of the one-time token being identical to a routing segment of the payment information, and presenting the one-time token.
Claims20
A system for use in making a payment transaction to a payment account associated with a consumer, the payment account being identified by an actual primary account number (PAN), the system comprising:
- a computing device having a processor and an output device coupled to the processor, the processor configured to:
- generate a pseudo-PAN based on the actual PAN and an encryption salt, the actual PAN having X digits, the pseudo-PAN having X digits, wherein a first Y digits of the actual PAN are the same as a first Y digits of the pseudo-PAN, wherein Y is less than X;
- and
- present the pseudo-PAN, for use by the consumer, via the output device.
A system for use in processing a payment transaction request from a merchant, the system comprising:
- a computing device configured to communicate with a payment network, the computing device including a processor and a memory coupled to the processor, the memory configured to store a plurality of actual PANs, the processor configured to:
- periodically generate an encryption salt;
- receive an authorization request for a payment transaction, the authorization request including a pseudo-PAN, the pseudo-PAN having the same format as each of the plurality of actual PAN stored in the memory;
- decrypt the pseudo-PAN based on the encryption salt most recently generated prior to receipt of the request,
- search, in the memory, for one of the plurality of actual PANs that matches the decrypted pseudo-PAN;
- modify the authorization request to include said one of the plurality of actual PANs in place of the pseudo-PAN, when the decrypted pseudo-PAN matches said one of the plurality of actual PANs in the memory;
- and
- transmit the modified authorization request to an issuer.
A computer-implemented method of making a purchase using a payment account associated with a consumer, the payment account being identified by actual payment information, the method comprising:
- generating an encryption salt;
- receiving, at an input device, a request from a consumer indicating a possible payment transaction;
- in response to the request, generating, at a processor, a one-time token, based on the actual payment information and most recently generated encryption salt, the one-time token having the same format as the payment information, a routing segment of the one-time token being identical to a routing segment of the payment information;
- and
- presenting, via an output device, the one-time token.
A system for use in processing a payment transaction request from a merchant, the system comprising:
- a computing device coupled to a payment network, the computing device including a processor and a memory coupled to the processor, the memory configured to store actual payment information for multiple payment accounts, the processor configured to:
- periodically generate an encryption salt;
- receive an authorization request for a payment transaction, the authorization request including a one-time token;
- decrypt the one-time token based on a most recently generated encryption salt prior to receipt of the authorization request, the one-time token having the same format as the actual payment information, from which the one-time token was generated;
- search, in the memory, for the decrypted one-time token;
- modify the authorization request to include the actual payment information for one of the multiple payment accounts in place of the one-time token, when the decrypted one-time token matches said actual payment information for the one of the multiple payment accounts in the memory;
- and
- transmit the modified authorization request to an issuer.
Dependencies are inferred from the claim text.