Systems and Methods for Multi-Merchant Tokenization

• US 20140040144A1
• Filed: 07/31/2012
• Published: 02/06/2014
• Est. Priority Date: 07/31/2012
• Status: Active Grant

• Current Assignee: Worldpay, LLC (Fidelity National Information Services Incorporated)
• Original Assignee: Worldpay, LLC (Fidelity National Information Services Incorporated)
• Inventors: Plomske, Michelle K., Watts, Charles E., Ozvat, Matthew D.
• Granted Patent: US 10,339,524 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights

Abstract

Systems and methods for multi-merchant tokenization may include receiving a transaction from a point of sale terminal of a merchant, validating the merchant ID against merchant logs, and generating a token for the transaction. The token includes a primary account number, expiration, and a group ID. Additionally, the system provides the primary account number to a payment system and receives a response back. The response is then output back to the merchant along with the token. In subsequent transactions, the system may receive the token from a one point of sale terminal of the merchant. The system validates the merchant ID against merchant logs and ensures the merchant is configured for tokenization. The token is decrypted and the group ID is compared to the merchant ID in the merchant logs. When they match, the primary account number is provided to the payment system for approval.

Claims

1. A method for multi-merchant tokenization, useful in conjunction with a payment system, the method comprising:

receiving a transaction from a point of sale terminal of a merchant, wherein the transaction includes an account number, an amount, and a merchant ID;

validating the merchant ID against merchant logs, wherein the validation ensures the merchant is configured for tokenization;

generate, using a processor, a token for the transaction, wherein the token includes a primary account number, an expiration, and a group ID, wherein the expiration is the length of time the token is valid;

providing the primary account number to a payment system;

receiving a response from the payment system; and

outputting the response and the token to the merchant.

2. The method of claim 1, wherein the transaction is encrypted.

3. The method of claim 2, further comprising decrypting the transaction.

4. The method of claim 1, wherein the token is encrypted.

5. The method of claim 1, wherein the group ID enables only particular merchants to redeem the token.

6. The method of claim 5, further comprising associating merchants to the group ID.

7. The method of claim 1, further comprising querying a database for merchant configuration.

8. The method of claim 7, further comprising declining the transaction if the merchant configuration does not match the transaction.

9. The method of claim 7, further comprising updating the database for changes in merchant configuration.

10. The method of claim 1, further comprising:

receiving the token from at least one point of sale terminal of the merchant;

validating the merchant ID against merchant logs, wherein the validation ensures the merchant is configured for tokenization;

decrypting the token;

comparing the group ID to the merchant ID in the merchant logs;

providing the primary account number to a payment system;

receiving a second response from the payment system; and

outputting the second response to the merchant.

11. A system for multi-merchant tokenization, useful in conjunction with a payment system, the system comprising:

a payment service for receiving a transaction from a point of sale terminal of a merchant, wherein the transaction includes an account number, an amount, and a merchant ID;

an encryption service for validating the merchant ID against merchant logs, wherein the validation ensures the merchant is configured for tokenization; and

a hardware security module, including a processor, for generating a token for the transaction, wherein the token includes a primary account number, an expiration, and a group ID, wherein the expiration is the length of time the token is valid;

wherein the payment service further provides the primary account number to a payment system, receives a response from the payment system, and outputs the response and the token to the merchant.

12. The system of claim 11, wherein the transaction is encrypted.

13. The system of claim 12, wherein the hardware security module decrypts the transaction.

14. The system of claim 11, wherein the hardware security module encrypts the token.

15. The system of claim 11, wherein the group ID enables only particular merchants to redeem the token.

16. The system of claim 15, further comprising a database associating merchants to the group ID

17. The system of claim 11, wherein the encryption service queries the database for merchant configuration.

18. The system of claim 17, wherein the encryption service declines the transaction if the merchant configuration does not match the transaction.

19. The system of claim 17, further comprising at least one application for updating the database for changes in merchant configuration.

20. The system of claim 11, wherein:

the payment service receives the token from at least one point of sale terminal of the merchant;

the encryption service validates the merchant ID against merchant logs, wherein the validation ensures the merchant is configured for tokenization;

the hardware security module decrypts the token;

the encryption service compares the group ID to the merchant ID in the merchant logs; and

the payment service provides the primary account number to a payment system, receive a second response from the payment system, and output the second response to the merchant.