Multi-network token bin routing with defined verification parameters

• US 10,489,779 B2
• Filed: 10/21/2014
• Issued: 11/26/2019
• Est. Priority Date: 10/21/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Kumnick, Phillip
• Primary Examiner(s): Choo, Johann Y
• Application Number:
  US14/520,230
• Publication Number:
  US 20150112871A1
• Time in Patent Office: 1,862 Days
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]

Abstract

Techniques described herein relate to using tokenization with BIN table routing by configuring a computer system, such as an acquirer computer, to utilize a token BIN translation table to determine which payment processing network(s) are eligible to route a transaction based upon a utilized token. In an embodiment, each token BIN translation table entry associates a token BIN with one or more payment processing networks that are eligible to route transactions. An acquirer computer, upon receiving a token for a transaction, thus may flexibly route the transaction to an eligible network from the set of payment processing networks identified by the entry corresponding to the token'"'"'s BIN value. The entry may further identify verification methods for the eligible payment processing networks, and may identify product type attributes of the account associated with the token, either of which may be used in determining which payment processing network to select.

Claims

1. A method, comprising:

receiving, at a computing device, a first transaction information for a first transaction, wherein the first transaction information includes a first verification method and a first token value associated with a first account serving as a payment account for the first transaction, wherein the first token value is a substitute for a first primary account number of the first account and includes a first token issuer identifier;

identifying, by the computing device based upon the first token issuer identifier, a first entry of a plurality of entries of a token translation table comprising a plurality of token issuer identifiers, each token issuer identifier associated with multiple payment processing networks, and each payment processing network associated with one or more verification methods, wherein the first entry is associated with the first token issuer identifier and identifies a plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier;

selecting, by the computing device, a first payment processing network of the plurality of payment processing networks to process the first transaction based at least in part upon the first token issuer identifier and the first verification method;

transmitting, by the computing device, the first transaction information to the selected first payment processing network, wherein the first payment processing network de-tokenizes the first token value to obtain the first primary account number, and transmits a first payment authorization request message including the first primary account number to a first issuer for authorization;

updating, by the computing device, the token issuer identifiers in the token translation table with updated token issuer identifiers without altering the multiple payment processing networks and their associated verification methods in the token translation table to form an updated token translation table;

receiving, at the computing device, a second transaction information for a second transaction, wherein the second transaction information includes a second verification method different than the first verification method and a first updated token value associated with the first account, wherein the first updated token value includes a first updated token issuer identifier;

identifying, by the computing device based upon the second verification method and the first updated token issuer identifier, a first entry of the updated token translation table;

selecting, by the computing device, a second payment processing network of the plurality of payment processing networks identified by the first entry of the updated token translation table, wherein the second payment processing network is different than the first payment processing network selected for the first transaction; and

transmitting, by the computing device, the second transaction information to the second payment processing network, wherein the second payment processing network de-tokenizes the first updated token value to obtain the first primary account number, and transmits a second payment authorization request message including the first primary account number to the first issuer for authorization.

2. The method of claim 1, wherein:

at least one of the plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier is a credit network; and

at least one of the plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier is a debit network.

3. The method of claim 1, wherein:

at least one of the one or more verification methods indicates that the corresponding payment processing network is a personal identification number (PIN) verification network; and

at least one of the one or more verification methods indicates that the corresponding payment processing network is a signature verification network.

4. The method of claim 1, wherein:

the first token issuer identifier comprises a token bank identification number (BIN); and

the plurality of entries of the token translation table include a plurality of token BINs.

5. The method of claim 1, further comprising:

receiving, at the computing device, a third transaction information for a third transaction, wherein the third transaction information includes a second token value associated with a second account, wherein the second token value includes a second token issuer identifier;

identifying, by the computing device based upon the second token issuer identifier, a second entry of the token translation table, wherein the second entry identifies only one payment processing network that is eligible to process transactions associated with the second token issuer identifier, and wherein the second entry further identifies one verification method corresponding to the identified one payment processing network;

selecting, by the computing device, the identified one payment processing network identified by the second entry, which is a third payment processing network, wherein the third payment processing network is different than the first payment processing network selected for the first transaction; and

transmitting the second transaction information to the third payment processing network, wherein the third payment processing network de-tokenizes the second token value to obtain a second primary account number, and transmits a third payment authorization request message including the second primary account number to a second issuer for authorization.

6. The method of claim 1, wherein the updated token issuer identifiers are received from an issuer of primary account numbers associated with tokens using the updated token issuer identifiers.

7. The method of claim 1, wherein the first payment processing network receives an authorization response message from the first issuer.

8. The method of claim 1, further comprising:

identifying, based on the first transaction information, an account enhancement attribute corresponding to the first account,

wherein the first payment processing network of the plurality of payment processing networks to process the first transaction is further selected based upon the account enhancement attribute.

9. A non-transitory computer-readable storage medium storing instructions which, when executed by one or more processors of a computing device, cause the computing device to perform operations comprising:

receiving a first transaction information for a first transaction, wherein the first transaction information includes a first verification method and a first token value associated with a first account serving as a payment account for the first transaction, wherein the first token value is a substitute for a first primary account number of the first account and includes a first token issuer identifier;

identifying, based upon the first token issuer identifier, a first entry of a plurality of entries of a token translation table comprising a plurality of token issuer identifiers, each token issuer identifier associated with multiple payment processing networks, and each payment processing network associated with one or more verification methods, wherein the first entry is associated with the first token issuer identifier and identifies a plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier;

selecting a first payment processing network of the plurality of payment processing networks to process the first transaction based at least in part upon the first token issuer identifier and the first verification method;

transmitting the first transaction information to the selected first payment processing network, wherein the first payment processing network de-tokenizes the first token value to obtain the first primary account number, and transmits a first payment authorization request message including the first primary account number to a first issuer for authorization;

updating the token issuer identifiers in the token translation table with updated token issuer identifiers without altering the multiple payment processing networks and their associated verification methods in the token translation table to form an updated token translation table;

receiving a second transaction information for a second transaction, wherein the second transaction information includes a second verification method different than the first verification method and a first updated token value associated with the first account, wherein the first updated token value includes a first updated token issuer identifier;

identifying, based upon the second verification method and the first updated token issuer identifier, a first entry of the updated token translation table;

selecting a second payment processing network of the plurality of payment processing networks identified by the first entry of the updated token translation table, wherein the second payment processing network is different than the first payment processing network selected for the first transaction; and

transmitting the second transaction information to the second payment processing network, wherein the second payment processing network de-tokenizes the first updated token value to obtain the first primary account number, and transmits a second payment authorization request message including the first primary account number to the first issuer for authorization.

10. The non-transitory computer readable storage medium of claim 9, wherein:

at least one of the plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier is a credit network; and

at least one of the plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier is a debit network.

11. The non-transitory computer readable storage medium of claim 9, wherein:

at least one of the one or more verification methods indicates that the corresponding payment processing network is a personal identification number (PIN) verification network; and

at least one of the one or more verification methods indicates that the corresponding payment processing network is a signature verification network.

12. The non-transitory computer readable storage medium of claim 9, wherein the first transaction information is received within an authorization request message.

13. The non-transitory computer readable storage medium of claim 9, wherein the identified first entry further identifies a type of account associated with the first token issuer identifier.

14. The non-transitory computer readable storage medium of claim 9, further comprising:

identifying, based on the first transaction information, an account enhancement attribute corresponding to the first account,

wherein the first payment processing network of the plurality of payment processing networks to process the first transaction is further selected based upon the account enhancement attribute.

15. A computing device, comprising:

one or more processors;

one or more network interfaces communicatively coupled with the one or more processors; and

a non-transitory computer readable storage medium, coupled to the one or more processors, that stores instructions which, when executed by the one or more processors, cause the computing device to perform operations comprising;

receiving, at the one or more network interfaces, a first transaction information for a first transaction, wherein the first transaction information includes a first verification method and a first token value associated with a first account serving as a payment account for the first transaction, wherein the first token value is a substitute for a first primary account number of the first account and includes a first token issuer identifier;

identifying, based upon the first token issuer identifier, a first entry of a plurality of entries of a token translation table comprising a plurality of token issuer identifiers, each token issuer identifier associated with multiple payment processing networks, and each payment processing network associated with one or more verification methods, wherein the first entry is associated with the first token issuer identifier and identifies a plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier;

selecting a first payment processing network of the plurality of payment processing networks to process the first transaction based at least in part upon the first token issuer identifier and the first verification method;

transmitting, by the one or more network interfaces, the first transaction information to the selected first payment processing network, wherein the first payment processing network de-tokenizes the first token value to obtain the first primary account number, and transmits a first payment authorization request message including the first primary account number to a first issuer for authorization;

updating, by the computing device, the token issuer identifiers in the token translation table with updated token issuer identifiers without altering the multiple payment processing networks and their associated verification methods in the token translation table to form an updated token translation table;

receiving, at the one or more network interfaces, a second transaction information for a second transaction, wherein the second transaction information includes a second verification method different than the first verification method and a first updated token value associated with the first account, wherein the first updated token value includes a first updated token issuer identifier;

identifying, based upon the second verification method and the first updated token issuer identifier, a first entry of the updated token translation table;

selecting a second payment processing network of the plurality of payment processing networks identified by the first entry of the updated token translation table, wherein the second payment processing network is different than the first payment processing network selected for the first transaction; and

transmitting, by the one or more network interfaces, the second transaction information to the second payment processing network, wherein the second payment processing network de-tokenizes the first updated token value to obtain the first primary account number, and transmits a second payment authorization request message including the first primary account number to the first issuer for authorization.

16. The computing device of claim 15, wherein:

at least one of the plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier is a credit network; and

at least one of the plurality of payment processing networks that are eligible to process transactions associated with the first token issuer identifier is a debit network.

17. The computing device of claim 15, wherein:

at least one of the one or more verification methods indicates that the corresponding payment processing network is a personal identification number (PIN) verification network; and

at least one of the one or more verification methods indicates that the corresponding payment processing network is a signature verification network.

18. The computing device of claim 15, wherein:

The first token issuer identifier comprises a token bank identification number (BIN); and

the plurality of entries of the token translation table include a plurality of token BINs.

19. The computing device of claim 15, wherein the identified first entry further identifies a type of account associated with the first token issuer identifier.

20. The computing device of claim 15, further comprising:

identifying, based on the first transaction information, an account enhancement attribute corresponding to the first account,

wherein the first payment processing network of the plurality of payment processing networks to process the first transaction is further selected based upon the account enhancement attribute.