Tokenization of co-network accounts

• US 10,313,321 B2
• Filed: 04/07/2016
• Issued: 06/04/2019
• Est. Priority Date: 04/07/2016
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Wong, Erick
• Primary Examiner(s): Vu, Phy Anh T
• Application Number:
  US15/093,656
• Publication Number:
  US 20170295155A1
• Time in Patent Office: 1,153 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

The present disclosure relates generally to tokenization of a co-network account. A co-network account, as used herein, refers to an account associated with a first transaction processing network for processing transactions initiated using the account and a second transaction processing network for processing transactions initiated using the account. During provisioning of a co-network account onto a user device, a first token is generated for use with the first transaction processing network and a second token is generated for use with the second transaction processing network. Embodiments use the authentication result generated during the provisioning of the first token for the provisioning of the second token. Embodiments automatically provision multiple payment tokens on the user device upon determining that the account is associated with more than one transaction processing networks (e.g. the account is a co-network account).

Claims

1. A method comprising:

receiving, at a server computer of a first transaction processing network, a first token provisioning request message from a token requestor, the first token provisioning request message including an account identifier identifying a co-network account managed by the first transaction processing network and a second transaction processing network such that transactions initiated using the account identifier is processed by one of the first transaction processing network or the second transaction processing network;

determining, by the server computer of the first transaction processing network, the second transaction processing network associated with the account identifier;

performing, by the server computer of the first transaction processing network, an authentication process with a user;

generating, by the server computer of the first transaction processing network, a first token associated with the account identifier; and

sending, by the server computer of the first transaction processing network, the first token and result of the authentication process to the token requestor, wherein the token requestor sends a second token provisioning message including the account identifier and the result of the authentication process performed by the server computer of the first transaction processing network to the second transaction processing network to request a second token for the account identifier, wherein, the second transaction processing network generates the second token based on the first token and the result of the authentication process, the first token and the second token are associated with the account identifier, and the first token and the second token are provisioned on a user device of the user.

2. The method of claim 1, further comprising:

upon determining the second transaction processing network, informing, by the server computer of the first transaction processing network, the token requestor about the second transaction processing network.

3. The method of claim 1, further comprising:

sending, by the server computer of the first transaction processing network, a provisioning request message to an authorizing computer to request authorization prior to generating the first token.

4. The method of claim 3, wherein the provisioning request message includes the account identifier and the result of the authentication process.

5. The method of claim 1, further comprising:

determining, by the server computer of the first transaction processing network and prior to generating the first token, that the co-network account identified by the account identifier is eligible for provisioning.

6. The method of claim 1, wherein the authentication process is performed based on the determining the second transaction processing network associated with the account identifier.

7. The method of claim 1, wherein the first token or the second token is used to access a building or data in a database.

8. A method comprising:

sending, by a token requestor computer, a first token request message to a first transaction processing network, wherein the first token request message includes an account identifier identifying a co-network account managed by the first transaction processing network and a second transaction processing network such that transactions initiated using the account identifier is processed by one of the first transaction processing network or the second transaction processing network;

receiving, by the token requestor computer, a message from the first transaction processing network indicating that the account identifier is associated with the second transaction processing network;

receiving, by the token requestor computer, a first token from the first transaction processing network;

sending, by the token requestor computer, a second token request message to the second transaction processing network, wherein the second token request message includes the account identifier, the first token and a result of an authentication process performed by the first transaction processing network, wherein the second transaction processing network generates a second token based on the first token and the result of the authentication process; and

receiving, by the token requestor computer, the second token from the second transaction processing network, wherein the first token and the second token are provisioned on a user device of a user of the co-network account associated with the account identifier.

9. The method of claim 8, further comprising:

receiving, by the token requestor computer, the result of the authentication process performed by the first transaction processing network.

10. The method of claim 8, further comprising:

receiving, by the token requestor computer, the account identifier from the user of the co-network account associated with the account identifier prior to sending the first token request message.

11. A server computer of a first transaction processing network, comprising:

one or more processors; and

a non-transitory computer readable storage medium communicatively coupled with the one or more processors and storing instructions which, when executed by the one or more processors, cause the server computer to;

receive a token provisioning request message from a token requestor, the token provisioning request message including an account identifier identifying a co-network account managed by the first transaction processing network and a second transaction processing network such that transactions initiated using the account identifier is processed by one of the first transaction processing network or the second transaction processing network;

determine the second transaction processing network associated with the account identifier;

perform an authentication process with a user based on the determining the second transaction processing network associated with the account identifier;

generate a first token associated with the account identifier; and

send the first token and result of the authentication process performed by the server computer of the first transaction processing network to the token requestor, wherein the token requestor requests a second token for the account identifier from the second transaction processing network associated with the account identifier, wherein the second transaction processing network generates the second token based on the first token and the result of the authentication process, the first token and the second token are associated with the account identifier, and the first token and the second token are provisioned on a user device of the user.

12. The server computer of claim 11, wherein the instructions, when executed by the one or more processors, further cause the server computer to:

upon determining the second transaction processing network, inform the token requestor of the second transaction processing network.

13. The server computer of claim 11, wherein the instructions, when executed by the one or more processors, further cause the server computer to:

send a provisioning request message to an authorizing computer to request authorization prior to generating the first token.

14. The server computer of claim 13, wherein the provisioning request message includes the account identifier and the result of the authentication process.

15. The server computer of claim 11, wherein the instructions, when executed by the one or more processors, further cause the server computer to:

determine, prior to generating the first token, that the co-network account identified by the account identifier is eligible for provisioning.