MULTIPLE TOKENIZATION FOR AUTHENTICATION

• US 20120259782A1
• Filed: 04/10/2012
• Published: 10/11/2012
• Est. Priority Date: 04/11/2011
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Granted Patent: US 9,280,765 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 9/30196 using decoder, e.g. decoder per instruction set, adaptable or programmable decoders
• CPC Class Codes: G06F 9/3822 Parallel decoding, e.g. parallel decode units
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Embodiments of the present invention are directed generally to systems, methods, and apparatuses for authenticating a cardholder using multiple tokenization authentication. Embodiments of the invention are directed at a method. The method includes receiving at a first entity a first token from a consumer and determining a second token associated with the first token. Once the second token is determined, the second token is sent to a server computer at a second entity. The server computer then determines an account identifier associated with the second token and processes a transaction using the account identifier.

Claims

1. A method comprising:

receiving at a first entity a first token from a consumer;

determining a second token associated with the first token; and

sending the second token to a server computer at a second entity, wherein the server computer determines an account identifier associated with the second token and processes a transaction using the account identifier.

2. The method of claim 1 wherein the first entity is a merchant and the second entity is an acquirer.

3. The method of claim 1 wherein determining the second token associated with the first token further comprises generating the second token by altering information from the first token, wherein the second token is derived from a first entity identifier, and wherein the second entity uses the first entity identifier to determine the account identifier associated with the second token.

4. The method of claim 3 wherein altering information from the first token further comprises using a predetermined algorithm to generate the second token, and wherein the second entity uses the first entity identifier to determine the predetermined algorithm, and wherein the second entity uses the predetermined algorithm to convert the second token into a recognizable value associated with the first token, and wherein the recognizable value associated with the first token is used by the server computer to electronically search a consumer account database for the account identifier.

5. The method of claim 1 wherein determining a second token associated with the first token further comprises electronically searching a second token database for a second token associated with the first token;

wherein the second token is derived from a first entity identifier, and wherein the second entity uses a predetermined algorithm to determine the account identifier associated with the second token.

6. The method of claim 1 wherein the second token is in a format of a payment card number, wherein the format of the payment card number comprises a payment processing network indicator and a check sum digit.

7. The method of claim 1 wherein determining a second token associated with the first token further comprises electronically searching a database to determine a second token associated with the first token, wherein the second token was generated during consumer registration, and wherein the second token is not generated by altering data in the first token.

8. The method of claim 1 wherein the method further comprises generating an authorization request message comprising the second token;

and wherein sending the second token to the server computer further comprises;

sending the authorization request message to the server computer at the second entity, wherein the server computer receives the authorization request message, determines the account identifier by electronically searching a database for an account identifier associated with the second token, modifies the authorization request message to include the account identifier, and sends the modified authorization request message to an account issuer computer for processing.

9. The method of claim 7 wherein the first token includes information that is less sensitive than information of the second token.

10. An apparatus comprising:

a processor and a non-transitory computer-readable storage medium coupled to the processor, the computer-readable storage medium comprising code executable by the processor for implementing a method comprising;

receiving a first token from a consumer;

determining a second token associated with the first token; and

sending the second token to a server computer at a second entity, wherein the server computer determines an account identifier associated with the second token and processes a transaction using the account identifier.

11. The method of claim 10 wherein determining the second token associated with the first token further comprises generating the second token by altering information from the first token, wherein the second token is derived from a first entity identifier, and wherein the second entity uses the first entity identifier to determine the account identifier associated with the second token.

12. The method of claim 10 wherein determining a second token associated with the first token further comprises electronically searching a database to determine a second token associated with the first token, wherein the second token was generated during consumer registration, and wherein the second token is not generated by altering data in the first token.

13. The apparatus of claim 10 wherein the method further comprises generating an authorization request message comprising the second token;

and wherein sending the second token to the server computer further comprises;

sending the authorization request message to the server computer at the second entity, wherein the server computer receives the authorization request message, determines the account identifier by electronically searching a database for an account identifier associated with the second token, modifies the authorization request message to include the account identifier, and sends the modified authorization request message to an account issuer computer for processing.

14. The apparatus of claim 10 wherein the first token includes information that is less sensitive than information of the second token.

15. A method comprising:

receiving a second token at a second entity from a first entity, wherein the second token is associated with a first token that is received by the first entity from a consumer;

determining an account identifier associated with the second token;

processing a transaction using the account identifier.

16. The method of claim 15 wherein the first entity is a merchant and the second entity is an acquirer.

17. The method of claim 15 wherein determining the account identifier associated with the second token further comprises:

determining a first entity identifier from the second token; and

using the first entity identifier to determine the account identifier associated with the second token.

18. The method of claim 17 wherein using the first entity identifier to determine the account identifier associated with the second token further comprises:

using the first entity identifier to electronically search for a corresponding predetermined algorithm;

using the predetermined algorithm to convert the second token into a recognizable value associated with the first token, and

searching the consumer account database for the account identifier associated with the recognizable value associated with the first token.

19. The method of claim 15 wherein the second token is in a format of a payment card number, wherein the format of the payment card number comprises a payment processing network indicator and a check sum digit.

20. The method of claim 15 wherein receiving the second token further comprises receiving an authorization request message comprising the second token and wherein processing the transaction using the account identifier further comprises modifying the authorization request message to include the account identifier and sending the modified authorization request message to an account issuer for processing.

21. The method of claim 15 wherein the first token includes information that is less sensitive than information of the second token.

22. An apparatus comprising:

a processor and a non-transitory computer-readable storage medium coupled to the processor, the computer-readable storage medium comprising code executable by the processor for implementing a method comprising;

receiving a second token from a first entity, wherein the second token is associated with a first token that is received by the first entity from a consumer;

determining an account identifier associated with the second token, and

processing a transaction using the account identifier.

23. The apparatus of claim 22 wherein receiving the second token further comprises receiving an authorization request message comprising the second token and wherein processing the transaction using the account identifier further comprises modifying the authorization request message to include the account identifier and sending the modified authorization request message to an account issuer for processing.

24. The apparatus of claim 22 wherein the method further comprises:

determining a first entity identifier from the second token; and

using the first entity identifier to determine the account identifier associated with the second token, wherein using the first entity identifier to determine the account identifier associated with the second token further comprises;

using the first entity identifier to electronically search for a corresponding predetermined algorithm;

using the predetermined algorithm to convert the second token into a recognizable value associated with the first token, and

searching the consumer account database for the account identifier associated with the recognizable value associated with the first token.

25. The apparatus of claim 22 wherein the first token includes information that is less sensitive than information of the second token.