TRANSACTION DATA TOKENIZATION

• US 20130297504A1
• Filed: 03/15/2013
• Published: 11/07/2013
• Est. Priority Date: 05/04/2012
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Nwokolo, Obinna, Goodman, Daniel
• Granted Patent: US 10,275,764 B2
• Time in Patent Office: Days
• US Class Current: 705/41
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes

Abstract

A system and method of tokenizing sensitive cardholder payment information for use in cashless transactions includes receiving a request to process a cashless transaction between a merchant and a purchaser using first payment data stored with an electronic wallet provider on behalf of the purchaser. First payment data is retrieved from the electronic wallet provider. The first payment data is tokenized into a payment token, and provided to the merchant for use in completing the cashless transaction. The merchant issues a request to process payment for the cashless transaction using the payment token. The payment token is detokenized into second payment data, with correspondence between the first and second payment data being indicative of payment token authenticity. Payment for the cashless transaction is processed using the second payment data, and the merchant is provided with a response indicating either the success or failure of the payment processing.

Claims

1. A method of tokenizing sensitive cardholder payment information for use in cashless transactions, the method comprising:

receiving a request to process a cashless transaction between a merchant and a purchaser using first payment data stored with an electronic wallet provider on behalf of the purchaser;

retrieving first payment data from the electronic wallet provider;

tokenizing the first payment data into a payment token;

providing the payment token to the merchant for use in completing the cashless transaction;

receiving, from the merchant, a request to process payment for the cashless transaction using the payment token;

detokenizing the payment token into second payment data, wherein correspondence between the first and second payment data is indicative of the authenticity of the payment token received from the merchant;

processing payment for the cashless transaction using the second payment data; and

providing an response to the merchant indicating either the success or failure of the payment processing.

2. The method according to claim 1, further comprising:

passing the payment data to one of a third party tokenizer and a payment service provider, wherein the third party tokenizer or payment service provider

tokenizes the payment data into a payment token;

provides the payment token to the merchant for use in completing the cashless transaction;

receives, from the merchant, the request to process payment for the cashless transaction using the payment token;

detokenizes the payment token;

processes payment for the cashless transaction using the payment data; and

provides the response to the merchant indicating either the success or failure of the payment processing; and

receiving from the merchant, the third party tokenizer, or the payment service provider an indication of the success or failure of the payment processing.

3. The method according to claim 1, wherein the payment token further comprises one or more of the following data

a transaction identifier, a name of the cardholder, an address of the cardholder, a postal code related to the address of the cardholder, an indicator that the transaction is related to an electronic wallet, a masked payment card number, a start date related to the payment card, an expiration date related to the payment card, a brand of the payment card, and a type of payment card.

4. The method according to claim 1, wherein the payment token is bound to the received transaction request, whereby the payment token is valid only under predetermined conditions including one or more of having been submitted by a predetermined merchant, requesting payment of a predetermined dollar amount or range of dollar amounts, and submitted for payment within a predetermined timeframe.

5. The method according to claim 1, wherein the tokenized payment data includes a virtual card number.

6. The method according to claim 1, wherein the method is performed by an operator of a network of wallets, and further the electronic wallet provider is one of the operator of the network of wallets on its own behalf, the operator of the network of wallets on behalf of a third party, and a third party provider of electronic wallet services.

7. A non-transitory computer readable storage medium embodying thereon a program of instruction which, when executed by a processor, cause the processor to carry out a method of tokenizing sensitive cardholder payment information for use in cashless transactions, the method comprising:

receiving a request to process a cashless transaction between a merchant and a purchaser using first payment data stored with an electronic wallet provider on behalf of the purchaser;

retrieving first payment data from the electronic wallet provider;

tokenizing the first payment data into a payment token;

providing the payment token to the merchant for use in completing the cashless transaction;

receiving, from the merchant, a request to process payment for the cashless transaction using the payment token;

detokenizing the payment token into second payment data, wherein correspondence between the first and second payment data is indicative of the authenticity of the payment token received from the merchant;

processing payment for the cashless transaction using the second payment data; and

providing an response to the merchant indicating either the success or failure of the payment processing.

8. The medium according to claim 7, wherein the method embodied in the program of instruction further comprises:

passing the payment data to one of a third party tokenizer and a payment service provider, wherein the third party tokenizer or payment service provider

tokenizes the payment data into a payment token;

provides the payment token to the merchant for use in completing the cashless transaction;

receives, from the merchant, the request to process payment for the cashless transaction using the payment token;

detokenizes the payment token;

processes payment for the cashless transaction using the payment data; and

provides the response to the merchant indicating either the success or failure of the payment processing; and

receiving from the merchant, the third party tokenizer, or the payment service provider an indication of the success or failure of the payment processing.

9. The medium according to claim 7, wherein according to the method embodied in the program of instruction, the payment token further comprises one or more of the following data

a transaction identifier, a name of the cardholder, an address of the cardholder, a postal code related to the address of the cardholder, an indicator that the transaction is related to an electronic wallet, a masked payment card number, a start date related to the payment card, an expiration date related to the payment card, a brand of the payment card, and a type of payment card.

10. The medium according to claim 7, wherein according to the method embodied in the program of instruction, the payment token is bound to the received transaction request, whereby the payment token is valid only under predetermined conditions including one or more of having been submitted by a predetermined merchant, requesting payment of a predetermined dollar amount or range of dollar amounts, and submitted for payment within a predetermined timeframe.

11. The medium according to claim 7, wherein according to the method embodied in the program of instruction, the tokenized payment data includes a virtual card number.

12. A system for tokenizing sensitive cardholder payment information for use in cashless transactions, the system comprising:

a processor;

a non-transitory computer readable storage medium embodying thereon a program of instruction which, when executed by a processor, cause the processor to carry out a method of tokenizing sensitive cardholder payment information for use in cashless transactions, the method comprising

receiving a request to process a cashless transaction between a merchant and a purchaser using first payment data stored with an electronic wallet provider on behalf of the purchaser;

retrieving first payment data from the electronic wallet provider;

tokenizing the first payment data into a payment token;

providing the payment token to the merchant for use in completing the cashless transaction;

receiving, from the merchant, a request to process payment for the cashless transaction using the payment token;

detokenizing the payment token into second payment data, wherein correspondence between the first and second payment data is indicative of the authenticity of the payment token received from the merchant;

processing payment for the cashless transaction using the second payment data; and

providing an response to the merchant indicating either the success or failure of the payment processing.

13. The system according to claim 12, wherein the method embodied in the program of instruction further comprises:

passing the payment data to one of a third party tokenizer and a payment service provider, wherein the third party tokenizer or payment service provider

tokenizes the payment data into a payment token;

provides the payment token to the merchant for use in completing the cashless transaction;

receives, from the merchant, the request to process payment for the cashless transaction using the payment token;

detokenizes the payment token;

processes payment for the cashless transaction using the payment data; and

provides the response to the merchant indicating either the success or failure of the payment processing; and

receiving from the merchant, the third party tokenizer, or the payment service provider an indication of the success or failure of the payment processing.

14. The system according to claim 12, wherein according to the method embodied in the program of instruction the payment token further comprises one or more of the following data

a transaction identifier, a name of the cardholder, an address of the cardholder, a postal code related to the address of the cardholder, an indicator that the transaction is related to an electronic wallet, a masked payment card number, a start date related to the payment card, an expiration date related to the payment card, a brand of the payment card, and a type of payment card.

15. The system according to claim 12, wherein according to the method embodied in the program of instruction the payment token is bound to the received transaction request, whereby the payment token is valid only under predetermined conditions including one or more of having been submitted by a predetermined merchant, requesting payment of a predetermined dollar amount or range of dollar amounts, and submitted for payment within a predetermined timeframe.

16. The system according to claim 12, wherein according to the method embodied in the program of instruction the tokenized payment data includes a virtual card number.

17. The system according to claim 12, operated by an operator of a network of wallets, and further the electronic wallet provider is one of the operator of the network of wallets on its own behalf, the operator of the network of wallets on behalf of a third party, and a third party provider of electronic wallet services.