A system for controlling display of a graphical representation of a physical user token in a digital wallet application of an electronic device, where the graphical representation is specified by a token server of a token-issuing entity, the system comprising the electronic device, a central processing system and the token server, wherein the token-issuing entity is a payment service provider (PSP) or a payment scheme, wherein the system is configured to:
- receive encrypted user personal details, at a communications server of the central processing system, from a consumer application of the electronic device via a communications network;
- decrypt the encrypted user personal details at the communications server, and creating or updating a user profile for the user, in a user accounts database of the central processing system, based on the decrypted user personal details;
- receive, at the consumer application of the electronic device, sensitive user token information of the physical user token including a Primary Account Number (PAN) of the physical user token;
- encrypt the received sensitive user token information at the electronic device;
- transmit the encrypted sensitive user token information from the electronic device to a tokenization platform of the system via the communications network;
- the tokenization platform being configured to:
- receive the encrypted sensitive user token information,
- generate non-sensitive user token information, including a card identifier (CID), based on the sensitive user token information,
- create a token entry in the tokenization platform using the sensitive and non-sensitive user token information to enable look-up;
- encrypt the non-sensitive user token information, and
- transmit the encrypted non-sensitive user token information to the electronic device via the communications network;
- transmit the non-sensitive user token information from the consumer application of the electronic device to the communications server of the central processing system via the communications network;
- store the non-sensitive user token information in the user accounts database of the central processing system to update the user profile of the user;
- receive the non-sensitive user token information including the CID at the communications server of the central processing system from the electronic device via the communications network, and store the non-sensitive user token information in the user accounts database of the central processing system;
- receive, at the communications server of the central processing system, user-specified data from the electronic device, the user-specified data comprising a unique token identifier that represents the physical user token and an image identifier representing a user-determined image associated with the physical token, the user-specified data including user preference data indicative of user preferences for the graphical representation of the physical user token in the digital wallet application, and the image identifier being obtained based on the user preference data;
- link, at the central processing system, the non-sensitive user token information including the CID with the image identifier, which comprises the non-sensitive user token information including the CID and the image identifier being stored in the user profile for the user in the user accounts database of the central processing system;
- and
- send an update instruction, from the central processing system to the token server via the communications network, to update graphical asset data associated with the physical user token stored at the token server, the instruction including the image identifier and the non-sensitive user token information including the CID, wherein to send the update instruction the system is configured to:
- send the image identifier and the non-sensitive user token information including the CID from the communications server of the central processing system to the tokenization platform;
- at the tokenization platform, use the non-sensitive user token information to look-up the sensitive user token information including the PAN;
- send the image identifier and the sensitive user token information including the PAN from the tokenization platform to an application programming interface (API) of the token server;
- update, at the token server, the graphical asset data associated with the physical user token stored at the token server, with the received image identifier and sensitive user token information including the PAN;
- and
- transmit, from the token server, asset information relating to the graphical representation to the electronic device via the communications network, the asset information being generated using the image identifier and the sensitive user token information including the PAN;
- and
- use the received asset information to display the graphical representation in the digital wallet application of the electronic device.