System and method for processing an online transaction request

A tangible non-transient computer-readable medium comprising computer processing instructions stored thereon, the computer processing instructions, when executed by a computer, cause the computer to perform a sequence of steps comprising:

• receiving an incoming transaction request transmitted from a client terminal, the incoming transaction request including an original payment amount and a token cryptogram and identifying an identity token;
• confirming that the token cryptogram was generated from the original payment amount and from a token cryptographic key uniquely associated with the identity token;
• generating a revised transaction message, the revised transaction message including an adjusted payment amount different from the original payment amount;
• generating a revised transaction request cryptogram from the adjusted payment amount and from the token cryptographic key;
• generating a revised transaction request, the revised transaction request including the revised transaction message and the revised transaction request cryptogram;
• transmitting the revised transaction request to an issuer sever, and receiving a transaction authorization from the issuer server in response to the revised transaction request, the transaction authorization including a confirmation that the revised transaction request cryptogram was generated from the adjusted payment amount and the token cryptographic key;
• and
• generating a revised transaction authorization message from the received transaction authorization, and providing the revised transaction authorization message to the client terminal, the revised transaction authorization message including a confirmation of approval of the revised transaction request.

A network gateway comprising:

• a primary network interface for interfacing the network gateway with a primary network;
• a secondary network interface for interfacing the network gateway with a secondary network;
• and
• a transaction processor and non-transitory computer-readable media, the transaction processor being coupled to the primary and secondary network interfaces, and the non-transitory computer-readable media storing instructions that, when executed by the transaction processor, cause the transaction processor to:
• receive an incoming transaction request from a client terminal via the primary network, the incoming transaction request including an original payment amount and a token cryptogram and identifying an identity token;
• confirm that the token cryptogram was generated from the original payment amount and from a token cryptographic key uniquely associated with the identity token;
• generate a revised transaction message, the revised transaction message including an adjusted payment amount different from the original payment amount;
• generate a revised transaction request cryptogram from the adjusted payment amount and from the token cryptographic key;
• generate a revised transaction request, the revised transaction request including the revised transaction message and the revised transaction request cryptogram;
• transmit the revised transaction request to an issuer sever via the secondary network, and receive a transaction authorization in response to the revised transaction request from the issuer server via the secondary network, the transaction authorization including a confirmation that the revised transaction request cryptogram was generated from the adjusted payment amount and the token cryptographic key;
• and
• generate a revised transaction authorization message from the received transaction authorization, and provide the revised transaction authorization message to the client terminal via the primary network, the revised transaction authorization message including a confirmation of approval of the revised transaction request.

An online transaction processing network comprising:

• a client terminal configured to communicate with an identity token interfaced therewith;
• an issuer server;
• and
• a network gateway configured to:
• receive an incoming transaction request from a client terminal, the incoming transaction request including an original payment amount and a token cryptogram and identifying an identity token;
• confirm that the token cryptogram was generated from the original payment amount and from a token cryptographic key uniquely associated with the identity token;
• generate a revised transaction message, the revised transaction message including an adjusted payment amount different from the original payment amount;
• generate a revised transaction request cryptogram from the adjusted payment amount and from the token cryptographic key;
• generate a revised transaction request, the revised transaction request including the revised transaction message and the revised transaction request cryptogram;
• transmit the revised transaction request to the issuer sever, and receive a transaction authorization from the issuer server in response to the revised transaction request, the transaction authorization including a confirmation that the revised transaction request cryptogram was generated from the adjusted payment amount and the token cryptographic key;
• and
• generate a revised transaction authorization message from the received transaction authorization, and provide the revised transaction authorization message to the client terminal, the revised transaction authorization message including a confirmation of approval of the revised transaction request.