Methods and systems for secure cross-platform token exchange

A method for cross-platform token exchange, comprising:

• receiving, by a token exchange service system, a signed primary token exchange request from an upstream entity;
• verifying, by the token exchange service system, one or more values in a header of the signed primary token exchange request;
• retrieving, by the token exchange service system, a shared key from a token exchange database associated with the upstream entity;
• extracting, by the token exchange service system, a plurality of signature elements from the signed primary token exchange request using the shared key;
• generating, by the token exchange service system, a plurality of hash values using the plurality of signature elements;
• comparing, by the token exchange service system, the generated plurality of hash values to a plurality of hash values in the header of the signed primary token exchange request;
• generating, by the token exchange service system, a globally unique identifier (GUID) for the signed primary token exchange request based on the comparison of the generated plurality of hash values and the plurality of hash values in the header of the signed primary token exchange request;
• generating, by the token exchange service system, a primary token exchange response based on the primary token exchange request;
• and
• transmitting, by the token exchange service system, the primary token exchange response to the upstream entity, wherein the primary token exchange response includes the GUID.

A system for cross-platform token exchange, the system comprising:

• one or more processors;
• and
• a data storage storing instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, by a token exchange service system, a signed primary token exchange request from an upstream entity;
• verifying, by the token exchange service system, one or more values in a header of the signed primary token exchange request;
• retrieving, by the token exchange service system, a shared key from a token exchange database associated with the upstream entity;
• extracting, by the token exchange service system, a plurality of signature elements from the signed primary token exchange request using the shared key;
• generating, by the token exchange service system, a plurality of hash values using the plurality of signature elements;
• comparing, by the token exchange service system, the generated plurality of hash values to a plurality of hash values in the header of the signed primary token exchange request;
• generating, by the token exchange service system, a globally unique identifier (GUID) for the signed primary token exchange request based on the comparison of the generated plurality of hash values and the plurality of hash values in the header of the signed primary token exchange request;
• generating, by the token exchange service system, a primary token exchange response based on the primary token exchange request;
• and
• transmitting, by the token exchange service system, the primary token exchange response to the upstream entity, wherein the primary token exchange response includes the GUID.

A non-transitory computer readable medium for cross-platform token exchange, the non-transitory computer readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving, by a token exchange service system, a signed primary token exchange request from an upstream entity;
• verifying, by the token exchange service system, one or more values in a header of the signed primary token exchange request;
• retrieving, by the token exchange service system, a shared key from a token exchange database associated with the upstream entity;
• extracting, by the token exchange service system, a plurality of signature elements from the signed primary token exchange request using the shared key;
• generating, by the token exchange service system, a plurality of hash values using the plurality of signature elements;
• comparing, by the token exchange service system, the generated plurality of hash values to a plurality of hash values in the header of the signed primary token exchange request;
• generating, by the token exchange service system, a globally unique identifier (GUID) for the signed primary token exchange request based on the comparison of the generated plurality of hash values and the plurality of hash values in the header of the signed primary token exchange request;
• generating, by the token exchange service system, a primary token exchange response based on the primary token exchange request;
• and
• transmitting, by the token exchange service system, the primary token exchange response to the upstream entity, wherein the primary token exchange response includes the GUID.