Systems communications with non-sensitive identifiers

• US 10,325,261 B2
• Filed: 11/25/2015
• Issued: 06/18/2019
• Est. Priority Date: 11/25/2014
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Dimmick, James
• Primary Examiner(s): Ebersman, Bruce I
• Application Number:
  US14/952,514
• Publication Number:
  US 20160148212A1
• Time in Patent Office: 1,301 Days
• Field of Search: 705 44
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/407 Cancellation of a transaction
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05

Abstract

A method is disclosed for enabling transaction reversal processes without utilizing sensitive information. Instead of being identified by sensitive information, the transaction associated with a reversal can be identified by a transaction identifier that is generated by a resource provider.

Claims

1. A method comprising:

receiving, by a transaction processing computer, from a resource provider computer associated with a resource provider, an authorization request message for a transaction between a user and the resource provider, the authorization request message including, a transaction identifier that was generated by the resource provider computer, a resource provider identifier that was generated by the transaction processing computer, a primary account number associated with an account of the user, and at least one of a timestamp, a transaction amount, information about purchased items, geo-location information associated with the transaction, or a digital certificate associated with the resource provider;

determining, by the transaction processing computer, an authorizing entity identifier associated with an authorizing entity based on the authorization request message;

storing, by the transaction processing computer, a transaction record including the resource provider identifier, the transaction identifier, the authorizing entity identifier, and at least one of the timestamp, the transaction amount, the information about purchased items, the geo-location information associated with the transaction, or the digital certificate associated with the resource provider, wherein the primary account number is not stored;

transmitting, by the transaction processing computer, the authorization request message to an authorizing entity computer associated with the authorizing entity identifier, wherein the authorizing entity computer authorizes the transaction based on the primary account number;

receiving, by the transaction processing computer, an authorization response message including the resource provider identifier and the transaction identifier, and not including the primary account number;

transmitting, by the transaction processing computer, the authorization response message to the resource provider computer;

receiving, by the transaction processing computer, from the resource provider computer, a request for reversing the transaction, the request including the resource provider identifier, the transaction identifier, and at least one of the timestamp, the transaction amount, the information about purchased items, the geo-location information associated with the transaction, or the digital certificate associated with the resource provider, the request not including the primary account number, wherein the transaction is uniquely identified by a combination of the resource provider identifier and the transaction identifier;

identifying, by the transaction processing computer, the transaction record based on the resource provider identifier and the transaction identifier;

obtaining, by the transaction processing computer, the authorizing entity identifier from the transaction record; and

forwarding, by the transaction processing computer, the request to the authorizing entity computer associated with the authorizing entity identifier, wherein the authorizing entity computer determines the primary account number based on the resource provider identifier and the transaction identifier, and wherein the authorizing entity computer approves of the transaction reversal.

2. The method of claim 1, wherein the resource provider computer sent the transaction reversal request in response to receiving the transaction identifier and the resource provider identifier from a user device.

3. The method of claim 1, further comprising:

receiving, by the transaction processing computer, from a user device, a request for transaction data, the request including a time, user information, and resource provider information;

identifying, by the transaction processing computer, based on the request, the transaction identifier and the resource provider identifier; and

providing, by the transaction processing computer, the transaction identifier and the resource provider identifier to the user device.

4. The method of claim 1, wherein the request for reversing the transaction between the user and the resource provider also does not include a user name, an expiration date, a payment token, or a card verification value.

5. The method of claim 1, further comprising:

generating, by the transaction processing computer, the resource provider identifier for the resource provider; and

transmitting, by the transaction processing computer, the resource provider identifier to the resource provider computer.

6. The method of claim 1, wherein the authorizing entity identifier is an issuer bank identification number.

7. The method of claim 1, wherein the transaction processing computer is associated with a transaction processing network, wherein the resource provider is a merchant, and wherein the authorizing entity is an issuer.

8. A transaction processing computer comprising:

a processor; and

a computer readable medium, the computer readable medium comprising code, executable by the processor, for implementing a method comprising;

receiving, from a resource provider computer associated with a resource provider, an authorization request message for a transaction between a user and the resource provider, the authorization request message including a transaction identifier that was generated by the resource provider computer, a resource provider identifier that was generated by the transaction processing computer, a primary account number associated with an account of the user, and at least one of a timestamp, a transaction amount, information about purchased items, geo-location information associated with the transaction, or a digital certificate associated with the resource provider;

determining an authorizing entity identifier associated with an authorizing entity based on the authorization request message;

storing a transaction record including the resource provider identifier, the transaction identifier, the authorizing entity identifier, and at least one of the timestamp, the transaction amount, the information about purchased items, the geo-location information associated with the transaction, or the digital certificate associated with the resource provider, wherein the primary account number is not stored;

transmitting the authorization request message to an authorizing entity computer associated with the authorizing entity identifier, wherein the authorizing entity computer authorizes the transaction based on the primary account number;

receiving an authorization response message including the resource provider identifier and the transaction identifier, and not including the primary account number;

transmitting the authorization response message to the resource provider computer;

receiving, from the resource provider computer, a request for reversing the transaction, the request including the resource provider identifier, the transaction identifier, and at least one of the timestamp, the transaction amount, the information about purchased items, the geo-location information associated with the transaction, or the digital certificate associated with the resource provider, the request not including the primary account number, wherein the transaction is uniquely identified by a combination of the resource provider identifier and the transaction identifier;

identifying the transaction record based on the resource provider identifier and the transaction identifier;

obtaining the authorizing entity identifier from the transaction record; and

forwarding the request to the authorizing entity computer associated with the authorizing entity identifier, wherein the authorizing entity computer determines the primary account number based on the resource provider identifier and the transaction identifier, and wherein the authorizing entity computer approves of the transaction reversal.

9. The transaction processing computer of claim 8, wherein the resource provider computer sent the transaction reversal request in response to receiving the transaction identifier and the resource provider identifier from a user device.

10. The transaction processing computer of claim 8, wherein the authorizing entity identifier is a portion of the primary account number.

11. The transaction processing computer of claim 8, wherein the request for reversing the transaction between the user and the resource provider also does not include a user name, an expiration date, a payment token, or a card verification value.

12. The transaction processing computer of claim 8, the method further comprising:

generating the resource provider identifier; and

transmitting the resource provider identifier to the resource provider computer.

13. The transaction processing computer of claim 8, wherein the authorizing entity identifier is an issuer bank identification number.

14. The transaction processing computer of claim 8, wherein the transaction processing computer is associated with a transaction processing network, wherein the resource provider is a merchant, and wherein the authorizing entity is an issuer.