# US 2022/0044252 A1 · Systems and methods relating to tokenization

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2022/0044252 A1
- Document ID: US20220044252A1
- Status: Published application
- Kind: A1
- Application number: 17/391,704
- Filed: 2021-08-02
- Published: 2022-02-10
- Earliest claimed: 2020-08-05
- Assignees: Mastercard International Incorporated
- Applicants: Mastercard International Incorporated
- Inventors: Mohamed Abouelenin; Anthony Lopreiato
- Web page: https://patentgrep.com/patent/US20220044252A1

## CPC

- G06Q 20/40145: {Biometric identity checks}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- G06Q 20/045: {using payment protocols involving tickets}
- G06Q 20/102: {Bill distribution or payments}
- G06Q 20/353: {Payments by cards read by M-devices}
- G06Q 20/367: {involving electronic purses or money safes}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/3829: {involving key management}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/4015: {using location information}
- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 20/407: {Cancellation of a transaction}
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods for use in tokenization are disclosed. One example method includes receiving a request to provision a biometric for biometric transactions to a payment account where, the request includes a cryptogram associated with a transaction to said payment account and/or a transaction ID for the transaction. The method also includes checking with an issuer whether the payment account is supported for biometric transactions, receiving an indicator of eligibility, and then requesting a biometric from the user. The method further includes receiving biometric data indicative of the user's biometric, and transmitting a request to the issuer to enable biometric transactions for the payment account.

## Claims

### Claim 1

A computer-implemented method for enabling use of an account in biometric transactions, the method comprising:
receiving, at a computing device, a request to provision a biometric for biometric transactions to a payment account, the request including at least one of a cryptogram associated with a transaction to said payment account and a transaction ID for the transaction to said payment account;
checking, by the computing device, whether the payment account is supported for biometric transactions with an issuer of the payment account, whereby the issuer verifies the cryptogram and/or the transaction ID;
receiving, from the issuer, by the computing device, an indicator of eligibility of the payment account;
requesting, by the computing device, a biometric from the user, via a biometric reader;
in response to the request, receiving, by the computing device, biometric data indicative of a biometric of the user;
transmitting, by the computing device, a request to enable biometric transactions for the payment account, the request including a payment account number for said payment account, whereby the issuer verifies the request based on verification of the cryptogram and/or the transaction ID; and
based on a response from the issuer, notifying, by the computing device, the user that the payment account is enabled for biometric transactions.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein each of the indicator and the response from the issuer includes a color code.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1, further comprising generating, by the computing device, a fraud score for the transaction and transmitting the fraud score to the issuer; and
wherein the response from the issuer is based, at least in part, on the fraud score for the transaction.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, further comprising facilitating the transaction to the payment account, the payment account transaction including the at least one of the cryptogram and the transaction ID.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, further comprising:
provisioning a token for the payment account for use in biometric transactions; and
associating the token with the biometric for the user.

### Claim 6 (depends on 5)

The computer-implemented method of claim 5, further comprising enabling and/or disabling the token based on an identity check and verification of the user.

### Claim 7 (depends on 1)

The computer-implemented method of claim 1, further comprising disabling the token based on a number of session of keys provided for the token.

### Claim 8

A computer-implemented method for enabling use of an account in biometric transactions, the method comprising:
receiving, at a computing device, from a payment network, a request to check whether a payment account of a user is supported for biometric transactions based on presentment of a payment device associated with the payment account, the request including at least one of a cryptogram associated with a transaction to said payment account and a transaction ID for the transaction to said payment account;
verifying, by the computing device, the payment account is supported for biometric transactions based, at least in part, on the at least one of the cryptogram and the transaction ID being included in a prior transaction;
transmitting, by the computing device, to the payment network, an indicator of eligibility of the payment account;
receiving, by the computing device, a request for provisioning of a biometric of the user to the payment account, the request including a payment account number for said payment account;
verifying the request based, at least in part, on the prior verification of the at least one of the cryptogram and the transaction ID being included in a prior transaction; and
transmitting, by the computing device, a response indicating an approval, or not, for enabling biometric transactions, whereby the payment network notifies the user of the payment account being enabled for biometric transactions.

### Claim 9 (depends on 8)

The computer-implemented method of claim 8, further comprising:
provisioning a token for the payment account for use in biometric transactions; and
associating the token with the biometric of the user.

### Claim 10 (depends on 9)

The computer-implemented method of claim 9, further comprising:
performing, by the computing device, an identity check and verification of the user; and
enabling and/or disabling the token based on the identity check and verification of the user.

### Claim 11 (depends on 8)

The computer-implemented method of claim 8, wherein each of the indicator and the response indicating the approval, or not, for enabling biometric transactions includes a color code.

### Claim 12 (depends on 8)

The computer-implemented method of claim 8, wherein the response indicating the approval, or not, for enabling biometric transactions is based, at least in part, on a fraud score for the transaction.

### Claim 13 (depends on 8)

The computer-implemented method of claim 8, further comprising facilitating the transaction to the payment account, the transaction including the at least one of the cryptogram and the transaction ID.

### Claim 14

A non-transitory computer-readable storage medium including executable instructions for enabling use of an account in biometric transactions, which when executed by at least one processor of a payment network, cause the at least one processor to:
receive a request to provision a biometric for biometric transactions to a payment account, the request including at least one of a cryptogram associated with a transaction to said payment account and a transaction ID for the transaction to said payment account;
check whether the payment account is supported for biometric transactions with an issuer of the payment account, whereby the issuer verifies the cryptogram and/or the transaction ID;
receive by the computing device, an indicator of eligibility of the payment account;
request a biometric from the user, via a biometric reader;
in response to the request, receive biometric data indicative of a biometric of the user;
transmit a request to enable biometric transactions for the payment account, the request including a payment account number for said payment account, whereby the issuer verifies the request based on verification of the cryptogram and/or the transaction ID; and
based on a response from the issuer, notify the user that the payment account is enabled for biometric transactions.

### Claim 15 (depends on 14)

The non-transitory computer-readable storage medium of claim 14, wherein the executable instructions, when executed by the at least one processor, further cause the at least one processor to generate a fraud score for the transaction and transmitting the fraud score to the issuer;
wherein the response from the issuer is based, at least in part, on the fraud score for the transaction.

### Claim 16 (depends on 14)

The non-transitory computer-readable storage medium of claim 14, wherein the executable instructions, when executed by the at least one processor, further cause the at least one processor to facilitate the transaction to the payment account, the transaction including the at least one of the cryptogram and the transaction ID.