Methods and systems for verifying cardholder authenticity when provisioning a token

A computer-implemented method for verifying cardholder authenticity when provisioning a token, said method using an authentication server system having a processor and a memory, said method comprising:

• receiving, by the processor from a token requestor, a token request including a payment card account identifier provided by a payment requestor to the token requestor, the payment card account identifier identifying a payment card account associated with a cardholder;
• determining, by the processor, a type of verification required by an issuer of the payment card account in association with the provisioning of the token;
• determining, by the processor, one of a plurality of assurance levels associated with the type of verification for the token, wherein each assurance level represents a corresponding level of confidence in the type of verification;
• generating, by the processor, the token for the payment card account based on the assurance level;
• storing, in the memory, the token with the payment card account identifier and the assurance level;
• in response to receiving an authorization request associated with the payment card account, retrieving, by the processor from the memory, the assurance level for the payment card account;
• and
• transmitting, by the processor, the authorization request and the retrieved assurance level to the issuer.

An authentication computer device for verifying cardholder authenticity when provisioning a token, said authentication computer device comprising one or more processors communicatively coupled to one or more memory devices, said authentication computer device configured to:

• receive, from a token requestor, a token request including a payment card account identifier provided by a payment requestor to the token requestor, the payment card account identifier identifying a payment card account associated with a cardholder;
• determine a type of verification required by an issuer of the payment card account in association with the provisioning of the token;
• determine one of a plurality of assurance levels associated with the type of verification for the token, wherein each assurance level represents a corresponding level of confidence in the type of verification;
• generate the token for the payment card account based on the assurance level;
• store, in the one or more memory devices, the token with the payment card account identifier and the assurance level;
• in response to receiving an authorization request associated with the payment card account, retrieve, from the one or more memory devices, the assurance level for the payment card account;
• and
• transmit the authorization request and the retrieved assurance level to the issuer.

A non-transitory computer-readable storage medium having computer-executable instructions embodied thereon, wherein when executed by an authentication computer device having at least one processor coupled to at least one memory device, the computer-executable instructions cause the at least one processor to:

• receive, from a token requestor, a token request including a payment card account identifier provided by a payment requestor to the token requestor, the payment card account identifier identifying a payment card account associated with a cardholder;
• determine a type of verification required by an issuer of the payment card account in association with the provisioning of a token;
• determine one of a plurality of assurance levels associated with the type of verification for the token, wherein each assurance level represents a corresponding level of confidence in the type of verification;
• generate the token for the payment card account based on the assurance level;
• store, in the at least one memory device, the token with the payment card account identifier and the assurance level;
• in response to receiving an authorization request associated with the payment card account, retrieve, from the at least one memory device, the assurance level for the payment card account;
• and
• transmit the authorization request and the retrieved assurance level to the issuer.