Authenticated secure online and offline transactions
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorUPENDRA MARDIKAR
Life of this patent
Estimating the term…
Abstract
A system for customer defined limited use authorization. The system may receive an identification credential from at least one of an issuer native app or an issuer web app and receive a customer data. The system may determine a valid customer identity in response to the receiving the identification credentials and the customer data The system may receive a request to generate a token from at least one of the issuer web app or the issuer native app, wherein the request comprises at least one of the identification credential or a parent transaction account, and wherein the request comprises at least one of a customer defined authorization control or a customer defined generation control.
Claims20
A method, comprising:
- receiving, by a computer based system, an identification credential from at least one of an issuer native app or an issuer web app;
- determining, by the computer based system, a valid customer identity based on the identification credentials satisfying customer data from a database;
- receiving, by the computer based system, a request to generate a token from at least one of the issuer web app or the issuer native app,
- wherein the request comprises at least one of the identification credentials or a parent transaction account, and
- wherein the request comprises at least one of a customer defined authorization control or a customer defined generation control;
- generating, by the computer based system and via a tokenization engine, the token in response to the valid customer identity and the request to generate a token,
- wherein the token comprises a token identification (ID) and the customer defined authorization control;
- and
- associating, by the computer based system, the token to the parent transaction account based on a token data and the customer data.
A system comprising:
- a processor,
- a tangible, non-transitory memory configured to communicate with the processor,
- the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
- receiving, by the processor, an identification credential from at least one of an issuer native app or an issuer web app;
- determining, by the processor, a valid customer identity based on the identification credentials satisfying customer data from a database;
- receiving, by the processor, a request to generate a token from at least one of the issuer web app or the issuer native app,
- wherein the request comprises at least one of the identification credential or a parent transaction account, and
- wherein the request comprises at least one of a customer defined authorization control or a customer defined generation control;
- generating, by the processor, the token in response to the valid customer identity and the request to generate a token or the customer defined generation control,
- wherein the token comprises a token identification (ID) and the customer defined authorization control;
- and
- associating, by the processor, the token to the parent transaction account based on the token data and the customer data.
An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer based system, cause the computer based system to perform operations comprising:
- receiving, by a computer based system in, an identification credential from at least one of an issuer native app or an issuer web app;
- determining, by the computer based system, a valid customer identity based on the identification credential satisfying customer data from a database;
- receiving, by a computer based system, a request to generate a token from at least one of the issuer web app or the issuer native app,
- wherein the request comprises at least one of the identification credentials or a parent transaction account, and
- wherein the request comprises at least one of a customer defined authorization control or a customer defined generation control;
- generating, by the computer based system and via a tokenization engine, the token in response to the valid customer identity and the request to generate a token,
- wherein the token comprises a token identification (ID) and the customer defined authorization control;
- and
- associating, by the computer based system, the token to the parent transaction account in response to the generating, generating, by the computer based system and via a tokenization engine, the token, wherein the associating is a function of the token data and the customer data.
Dependencies are inferred from the claim text.