Token enrollment system and method
First Claim
1. A method comprising:
- providing, by a token server computer operated by a token service provider, an interface to a party, wherein the party controls generation of payment tokens for account identifiers via the interface;
receiving, at the token server computer, a set of account identifiers from a computer operated by the party via the interface;
receiving, at the token server computer, one or more encryption keys from the computer operated by the party via the interface;
receiving, at the token server computer, a request to generate payment tokens for the set of account identifiers using the one or more encryption keys such that each generated payment token represents an account identifier among the set of account identifiers;
for each account identifier in the set of account identifiers;
determining, by the token server computer, a payment token based on the one or more encryption keys provided by the party, wherein the payment token determined for an account identifier substitutes the account identifier in a payment transaction initiated using the payment token, wherein a format of the payment token is similar to a format of the account identifier substituted by the payment token; and
storing the payment token and associated encryption keys for later use in token transaction processing.
1 Assignment
0 Petitions
Accused Products
Abstract
Embodiments of the invention are directed to methods, apparatuses, computer readable media and systems for providing a token service environment that allows a token requesting party (e.g. token requestor) to specify parameters for token generation for controlling and customizing the token generation process. For example, the token requesting party may specify (e.g. select from a list or provide a list of) the accounts for tokenization. The accounts may be identified by account identifiers (e.g. account numbers) or bank identification numbers (BINs). The token requesting party may also specify encryption keys for the tokens to be generated. The token requesting party may also specify additional parameters such as notification thresholds indicating when notifications associated with the tokens are to be generated.
528 Citations
17 Claims
-
1. A method comprising:
-
providing, by a token server computer operated by a token service provider, an interface to a party, wherein the party controls generation of payment tokens for account identifiers via the interface; receiving, at the token server computer, a set of account identifiers from a computer operated by the party via the interface; receiving, at the token server computer, one or more encryption keys from the computer operated by the party via the interface; receiving, at the token server computer, a request to generate payment tokens for the set of account identifiers using the one or more encryption keys such that each generated payment token represents an account identifier among the set of account identifiers; for each account identifier in the set of account identifiers; determining, by the token server computer, a payment token based on the one or more encryption keys provided by the party, wherein the payment token determined for an account identifier substitutes the account identifier in a payment transaction initiated using the payment token, wherein a format of the payment token is similar to a format of the account identifier substituted by the payment token; and storing the payment token and associated encryption keys for later use in token transaction processing. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A token server computer operated by a token service provider, comprising:
-
one or more processors; a non-transitory computer readable storage medium communicatively coupled with the one or more processors and storing instructions which, when executed by the one or more processors, cause the token server computer to; provide an interface to a party, wherein the party controls generation of payment tokens for account identifiers via the interface; receive a set of account identifiers from a computer operated by the party via the interface; receive one or more encryption keys from the computer operated by the party via the interface; receive a request to generate payment tokens for the set of account identifiers using the one or more encryption keys such that each generated payment token represents an account identifier among the set of account identifiers; for each account identifier in the set of account identifiers; determine a payment token based on the one or more encryption keys provided by the party, wherein the payment token determined for an account identifier substitutes the account identifier in a payment transaction initiated using the payment token, wherein a format of the payment token is similar to a format of the account identifier substituted by the payment token; and a token vault for storing the payment token and associated encryption keys for later use in token transaction processing. - View Dependent Claims (10, 11, 12)
-
-
13. A method comprising:
-
accessing, by a computer operated by a party, an interface provided by a token server computer operated by a token service provider to control generation of payment tokens for account identifiers; providing, by the computer operated by the party, a set of account identifiers to the token server computer via the interface; providing, by the computer operated by the party, one or more encryption keys to the token server computer via the interface; providing, by the computer operated by the party to the token server computer via the interface, an instruction to generate a set of payment tokens using the one or more encryption keys provided by the computer operated by the party; and customizing, by the computer operated by the party, generation of payment tokens by the token server computer, wherein a payment token associated with at least one encryption key is generated for each account identifier of the set of account identifiers for later use in token transaction processing, wherein a payment token generated for an account identifier substitutes the account identifier in a payment transaction initiated using the payment token, wherein a format of the payment token is similar to a format of the account identifier substituted by the payment token. - View Dependent Claims (14, 15, 16, 17)
-
Specification