Back to results
US 2023/0155995 A1Published application
Secure token distribution
AssigneeVisa International Service Association
InventorsSimon Law, Kim R. Wagner
Life of this patent
Estimating the term…
Abstract
A method for utilizing a registration authority computer to facilitate a certificate signing request is provided. A registration authority computer may receive a certificate signing request associated with a token requestor. The registration authority computer may authenticate the identity of the token requestor and forward the certificate signing request to a certificate authority computer. A token requestor ID and a signed certificate may be provided by the certificate authority computer and forwarded to the token requestor. The token requestor ID may be utilized by the token requestor to generate digital signatures for subsequent token-based transactions.
Claims18
A computer-implemented method comprising:
- receiving, at a registration authority computer, a certificate signing request from a token requestor computer associated with a token requestor, with respect to a user who requested an interaction with the token requestor;
- in response to the receiving the certificate signing request, authenticating, by the registration authority computer, the token requestor;
- adding an indication to the certificate signing request that the registration authority computer has authenticated the token requestor;
- transmitting, by the registration authority computer to a certificate authority computer, the certificate signing request comprising the indication, the certificate authority computer being remote with respect to the registration authority computer;
- receiving, by the registration authority computer from the certificate authority computer, a token requestor identifier (ID) for the token requestor;
- transmitting, by the registration authority computer, the token requestor ID to the token requestor computer;
- receiving, by the registration authority computer from the token requestor computer, an authorization request message comprising a token obtained by the token requestor by using the token requestor ID, wherein the token includes a payment account identifier as a substitute for an account number of the user who requested the interaction with the token requestor, wherein the payment account identifier is provided in the authorization request message in place of the account number of the user;
- and
- transmitting, by the registration authority computer to the certificate authority computer, the authorization request message comprising the token, wherein the receiving the authorization request message causes the certificate authority computer to convert the payment account identifier of the token to the account number of the user,
- wherein the token is a first token and the method further comprises:
- transmitting, by the registration authority computer to the certificate authority computer, a token request message using the first token;
- receiving, by the registration authority computer from the certificate authority computer, a second token;
- and
- transmitting, by the registration authority computer to the token requestor computer, the second token.
11 more elements
A registration authority computer comprising:
- a processor;
- and
- a non-transitory computer readable storage medium storing code that, when executed by the processor, causes the processor to perform a method including:
- receiving a certificate signing request from a token requestor computer associated with a token requestor, with respect to a user who requested an interaction with the token requestor;
- in response to the receiving the certificate signing request, authenticating the token requestor;
- adding an indication to the certificate signing request that the token requestor is authenticated;
- transmitting, to a certificate authority computer, the certificate signing request comprising the indication, the certificate authority computer being remote with respect to the registration authority computer;
- receiving, from the certificate authority computer, a token requestor identifier (ID) for the token requestor;
- transmitting the token requestor ID to the token requestor computer;
- receiving, from the token requestor computer, an authorization request message comprising a token obtained by the token requestor by using the token requestor ID, wherein the token includes a payment account identifier as a substitute for an account number of the user who requested the interaction with the token requestor, wherein the payment account identifier is provided in the authorization request message in place of the account number of the user;
- and
- transmitting, to the certificate authority computer, the authorization request message comprising the token, wherein the receiving the authorization request message causes the certificate authority computer to convert the payment account identifier of the token to the account number of the user,
- wherein the token is a first token and the method further includes:
- transmitting, to the certificate authority computer, a token request message using the first token;
- receiving, from the certificate authority computer, a second token;
- and
- transmitting, to the token requestor computer, the second token.
14 more elements
Dependencies are inferred from the claim text.