Validation identity tokens for transactions
AssigneeVisa International Service Association
InventorDuane Cash
Life of this patent
Estimating the term…
Abstract
A user initiates a transaction by providing identification data at an access device. Certain elements of a validation identity token, such validation keys, may be distributed among several remote server computers. After the elements are retrieved during the transaction, the validation identity token may be generated using the retrieved elements. The validation identity token may indicate whether the user is authenticated. No single entity can possess all elements utilized to generate the validation identity token, which mitigates risk of the validation identity token being compromised. In some embodiments, the validation identity token may be a chromatic identity token, which may indicate validity by color.
Claims21
-18. (canceled)
A method comprising:
- receiving a request message comprising identification data of a user;
- retrieving a validation key, wherein the validation key is used to form at least part of a validation identity token;
- including the validation key in the request message;
- sending the request message to one or more remote server computers including an authorization computer, wherein the one or more remote server computers respectively comprise validation keys that are used to form at least part of the validation identity token;
- receiving a response message including the validation keys in the request message;
- and
- sending the response message to an access device, wherein the user is authenticated based upon the validation identity token.
A server computer comprising:
- a processor;
- and a computer-readable medium coupled to the processor, the computer-readable medium comprising code, executable by the processor, for performing a method comprising:
- receiving a request message comprising identification data of a user;
- retrieving a validation key, wherein the validation key is used to form at least part of a validation identity token;
- including the validation key in the request message;
- sending the request message to one or more remote server computers including an authorization computer, wherein the one or more remote server computers respectively comprise validation keys that are used to form at least part of the validation identity token;
- receiving a response message including the validation keys in the request message;
- and
- sending the response message to an access device, wherein the user is authenticated based upon the validation identity token.
A system comprising:
- a server computer comprising
- a processor;
- and a computer-readable medium coupled to the processor, the computer-readable medium comprising code, executable by the processor, for performing a method comprising
- receiving a request message comprising identification data of a user,
- retrieving a validation key, wherein the validation key is used to form at least part of a validation identity token,
- including the validation key in the request message,
- sending the request message to one or more remote server computers including an authorization computer, wherein the one or more remote server computers respectively comprise validation keys that are used to form at least part of the validation identity token,
- receiving a response message including the validation keys in the request message, and
- sending the response message to an access device, wherein the user is authenticated based upon the validation identity token;
- and
- the authorization computer.
Dependencies are inferred from the claim text.