Secure process to avoid storing payment credentials
AssigneeBank of America Corporation
InventorsVijay Kumar Yarabolu, Ravi Prasad Challagulla, Durga Prasad Patro
Life of this patent
Estimating the term…
Abstract
A credential security tool may avoid storing payment credentials at online services. Generally, the credential security tool issues authorization tokens to merchants when users attempt to store payment credentials with the merchants. The merchants store these authorization tokens rather than the payment credentials. When a user initiates a transaction with a merchant, the merchant can present the authorization token to receive a masked card that can be used to complete the transaction. When the merchant presents the masked card for payment, the credential security tool can use the actual card information to complete the transaction.
Claims20
An apparatus comprising:
- a memory;
- and
- a hardware processor communicatively coupled to the memory, the hardware processor configured to:
- receive, from a merchant, an authorization token, the merchant communicating the authorization token in response to a user initiating a transaction with the merchant, the merchant stores the authorization token rather than payment credentials of the user;
- after receiving the authorization token from the merchant, communicate, to the merchant, information for a masked payment card of the user;
- after communicating the information for the masked payment card to the merchant, receive the information for the masked payment card and information for the transaction;
- in response to receiving the information for the masked payment card and the information for the transaction, validate that the information for the masked payment card is correct;
- and
- in response to validating that the information for the masked payment card is correct, communicate information for an actual payment card of the user to complete the transaction.
A method comprising:
- receiving, by a hardware processor communicatively coupled to a memory and from a merchant, an authorization token, the merchant communicating the authorization token in response to a user initiating a transaction with the merchant, the merchant stores the authorization token rather than payment credentials of the user;
- after receiving the authorization token from the merchant, communicating, by the hardware processor and to the merchant, information for a masked payment card of the user;
- after communicating the information for the masked payment card to the merchant, receiving, by the hardware processor, the information for the masked payment card and information for the transaction;
- in response to receiving the information for the masked payment card and the information for the transaction, validating, by the hardware processor, that the information for the masked payment card is correct;
- and
- in response to validating that the information for the masked payment card is correct, communicating, by the hardware processor, information for an actual payment card of the user to complete the transaction.
A system comprising:
- a merchant device;
- and
- a credential security tool comprising a memory and a hardware processor communicatively coupled to the memory, the hardware processor configured to:
- receive, from the merchant device, an authorization token, the merchant device communicating the authorization token in response to a user initiating a transaction with the merchant device, the merchant device stores the authorization token rather than payment credentials of the user;
- after receiving the authorization token from the merchant device, communicate, to the merchant device, information for a masked payment card of the user;
- after communicating the information for the masked payment card to the merchant device, receive the information for the masked payment card and information for the transaction;
- in response to receiving the information for the masked payment card and the information for the transaction, validate that the information for the masked payment card is correct;
- and
- in response to validating that the information for the masked payment card is correct, communicate information for an actual payment card of the user to complete the transaction.
Dependencies are inferred from the claim text.