Transaction data tokenization

• US 10,275,764 B2
• Filed: 03/15/2013
• Issued: 04/30/2019
• Est. Priority Date: 05/04/2012
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Nwokolo, Obinna, Goodman, Daniel
• Primary Examiner(s): Gort, Elaine
• Assistant Examiner(s): Reichert, Rachelle L
• Application Number:
  US13/835,088
• Publication Number:
  US 20130297504A1
• Time in Patent Office: 2,237 Days
• Field of Search: None
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes

Abstract

A system and method of tokenizing sensitive cardholder payment information for use in cashless transactions includes receiving a request to process a cashless transaction between a merchant and a purchaser using first payment data stored with an electronic wallet provider on behalf of the purchaser. First payment data is retrieved from the electronic wallet provider. The first payment data is tokenized into a payment token, and provided to the merchant for use in completing the cashless transaction. The merchant issues a request to process payment for the cashless transaction using the payment token. The payment token is detokenized into second payment data, with correspondence between the first and second payment data being indicative of payment token authenticity. Payment for the cashless transaction is processed using the second payment data, and the merchant is provided with a response indicating either the success or failure of the payment processing.

Claims

1. A method of processing electronic cashless transactions utilizing a network of electronic wallets, the method being carried-out by an operator of the network of electronic wallets during a cashless transaction and comprising:

receiving, by the operator of the network of electronic wallets, a request from a merchant to process a cashless transaction between the merchant and a purchaser;

forwarding, by the operator of the network of electronic wallets, a URL to the merchant configured to direct the purchaser to a sign-in page for the network of electronic wallets;

with the purchaser having been directed by the URL to the sign-in page and with the purchaser having signed into the network of electronic wallets, receiving, by the operator of the network of electronic wallets, a selection of an electronic wallet by the purchaser from the network of electronic wallets;

in response to the selection of the electronic wallet, directing, by the operator of the network of electronic wallets, the purchaser to the selected electronic wallet;

receiving, by the operator of the network of electronic wallets, first payment data from the selected electronic wallet for a payment source selected by the purchaser from within the selected electronic wallet;

storing, by the operator of the network of electronic wallets, the first payment data;

generating, by one of the operator of the network of electronic wallets and a third party tokenizer, a payment token including a virtual card number related to the first payment data, wherein the payment token is not generated by, provided to, or used by the purchaser;

providing, by the operator of the network of electronic wallets, the payment token to the merchant for prompting completion of entry of details related to the cashless transaction;

receiving, by the operator of the network of electronic wallets, from the merchant, an authentication request including a total cost of the cashless transaction and the payment token;

detokenizing, by one of the operator of the network of electronic wallets and the third party tokenizer, the payment token received from the merchant to identify the virtual card number;

retrieving, by the operator of the network of electronic wallets, the first payment data utilizing the virtual card number;

passing, by the operator of the network of electronic wallets, the authentication request, including the first payment data, to a payment gateway or acquirer;

receiving, by the operator of the network of electronic wallets, a response to the authentication request from the payment gateway or acquirer; and

providing, by the operator of the network of electronic wallets, the response to the merchant, the response indicating whether approval of the cashless transaction may be confirmed by the merchant to the purchaser.

2. The method according to claim 1, wherein the payment token further comprises one or more of the following data:

a transaction identifier, a name of the holder of the payment source, an address of the holder of the payment source, a postal code related to the address of the holder of the payment source, an indicator that the transaction is related to an electronic wallet, a masked payment card number, a start date related to the payment source, an expiration date related to the payment source, a brand of the payment source, and a type of payment source.

3. The method according to claim 1, wherein the payment token is valid only under predetermined conditions including one or more of having been submitted by a predetermined merchant, requesting payment of a predetermined dollar amount or range of dollar amounts, and having been submitted for payment within a predetermined timeframe.

4. A non-transitory computer readable storage medium embodying thereon a program of instruction which, when executed by a processor, cause the processor to carry out a method of processing electronic cashless transactions utilizing a network of electronic wallets, the method being carried-out by an operator of the network of electronic wallets during a cashless transaction and comprising:

receiving, by the operator of the network of electronic wallets, a request from a merchant to process a cashless transaction between the merchant and a purchaser;

forwarding, by the operator of the network of electronic wallets, a URL to the merchant configured to direct the purchaser to a sign-in page for the network of electronic wallets;

with the purchaser having been directed by the URL to the sign-in page and with the purchaser having signed into the network of electronic wallets, receiving, by the operator of the network of electronic wallets, a selection of an electronic wallet by the purchaser from the network of electronic wallets;

in response to the selection of the electronic wallet, directing, by the operator of the network of electronic wallets, the purchaser to the selected electronic wallet;

receiving, by the operator of the network of electronic wallets, first payment data from the selected electronic wallet for a payment source selected by the purchaser from within the selected electronic wallet;

storing, by the operator of the network of electronic wallets, the first payment data;

generating, by one of the operator of the network of electronic wallets and a third party tokenizer, a payment token including a virtual card number related to the first payment data, wherein the payment token is not generated by, provided to, or used by the purchaser;

providing, by the operator of the network of electronic wallets, the payment token to the merchant for prompting completion of entry of details related to the cashless transaction;

receiving, by the operator of the network of electronic wallets, from the merchant, an authentication request including a total cost of the cashless transaction and the payment token;

detokenizing, by one of the operator of the network of electronic wallets and the third party tokenizer, the payment token received from the merchant to identify the virtual card number;

retrieving, by the operator of the network of electronic wallets, the first payment data utilizing the virtual card number;

passing, by the operator of the network of electronic wallets, the authentication request, including the first payment data, to a payment gateway or acquirer;

receiving, by the operator of the network of electronic wallets, a response to the authentication request from the payment gateway or acquirer; and

providing, by the operator of the network of electronic wallets, the response to the merchant, the response indicating whether approval of the cashless transaction may be confirmed by the merchant to the purchaser.

5. The medium according to claim 4, wherein according to the method embodied in the program of instruction, the payment token further comprises one or more of the following data:

a transaction identifier, a name of the holder of the payment source, an address of the holder of the payment source, a postal code related to the address of the holder of the payment source, an indicator that the transaction is related to an electronic wallet, a masked payment card number, a start date related to the payment source, an expiration date related to the payment source, a brand of the payment source, and a type of payment source.

6. The medium according to claim 4, wherein according to the method embodied in the program of instruction, wherein the payment token is valid only under predetermined conditions including one or more of having been submitted by a predetermined merchant, requesting payment of a predetermined dollar amount or range of dollar amounts, and having been submitted for payment within a predetermined timeframe.

7. A system for processing electronic cashless transactions, the system comprising:

a processor;

a non-transitory computer readable storage medium embodying thereon a program of instruction which, when executed by a processor, cause the processor to carry out a method of processing cashless transactions utilizing a network of electronic wallets, the method being carried-out by an operator of the network of electronic wallets during a cashless transaction and comprising;

receiving, by the operator of the network of electronic wallets, a request from a merchant to process a cashless transaction between the merchant and a purchaser;

forwarding, by the operator of the network of electronic wallets, a URL to the merchant configured to direct the purchaser to a sign-in page for the network of electronic wallets;

with the purchaser having been directed by the URL to the sign-in page and with the purchaser having signed into the network of electronic wallets, receiving, by the operator of the network of electronic wallets, a selection of an electronic wallet by the purchaser from the network of electronic wallets;

in response to the selection of the electronic wallet, directing, by the operator of the network of electronic wallets, the purchaser to the selected electronic wallet;

receiving, by the operator of the network of electronic wallets, first payment data from the selected electronic wallet for of a payment source selected by the purchaser from within the selected electronic wallet;

storing, by the operator of the network of electronic wallets, the first payment data;

generating, by one of the operator of the network of electronic wallets and a third party tokenizer, a payment token including a virtual card number related to the first payment data, wherein the payment token is not generated by, provided to, or used by the purchaser;

providing, by the operator of the network of electronic wallets, the payment token to the merchant for prompting completion of entry of details related to the cashless transaction;

receiving, by the operator of the network of electronic wallets, from the merchant, an authentication request including a total cost of the cashless transaction and the payment token;

detokenizing, by one of the operator of the network of electronic wallets and the third party tokenizer, the payment token received from the merchant to identify the virtual card number;

retrieving, by the operator of the network of electronic wallets, the first payment data utilizing the virtual card number;

passing, by the operator of the network of electronic wallets, the authentication request, including the first payment data, to a payment gateway or acquirer;

receiving, by the operator of the network of electronic wallets, a response to the authentication request from the payment gateway or acquirer; and

providing, by the operator of the network of electronic wallets, the response to the merchant, the response indicating whether approval of the cashless transaction may be confirmed by the merchant to the purchaser.

8. The system according to claim 7, wherein according to the method embodied in the program of instruction the payment token further comprises one or more of the following data:

a transaction identifier, a name of the holder of the payment source, an address of the holder of the payment source, a postal code related to the address of the holder of the payment source, an indicator that the transaction is related to an electronic wallet, a masked payment card number, a start date related to the payment source, an expiration date related to the payment source, a brand of the payment source, and a type of payment source.

9. The system according to claim 7, wherein according to the method embodied in the program of instruction the payment token is valid only under predetermined conditions including one or more of having been submitted by a predetermined merchant, requesting payment of a predetermined dollar amount or range of dollar amounts, and having been submitted for payment within a predetermined timeframe.