TOKENIZATION REVOCATION LIST

• US 20150106239A1
• Filed: 10/10/2014
• Published: 04/16/2015
• Est. Priority Date: 10/11/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Gaddam, Ajit, Aissi, Selim, Nagasundaram, Sekhar
• Granted Patent: US 9,978,094 B2
• Time in Patent Office: Days
• US Class Current: 705/26.82
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06Q 20/08 Payment architectures
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0637 Approvals

Abstract

A method for providing a token revocation list is disclosed. The method includes maintaining a status for each of a plurality of tokens in a token revocation database. Token validation requests are received, and the statuses of payment tokens can be determined. Response messages with the statuses of the payment tokens are then sent to token status requesters so that they may make decisions on whether or not to use them to process transactions.

Claims

1. A method comprising:

maintaining, by a token revocation list computer system, a status for each of a plurality of tokens issued by the server computer in a token revocation database;

receiving, by the token revocation list computer system, a token validation request from a requester device, wherein the token validation request includes at least one payment token of the plurality of tokens;

determining, by the token revocation list computer system, the status of the at least one payment token of the plurality of tokens by searching the token revocation database for the status of the at least one of the plurality of tokens; and

sending, by a token revocation list computer system, a token validation response including the determined status of the at least one payment token of the plurality of tokens.

2. The method of claim 1, wherein the at least one of the plurality of tokens was sent to the requester by a consumer or merchant.

3. The method of claim 1, further comprising:

determining, by the server computer, that the requester is registered with the token revocation list computer system for sending token validation requests.

4. The method of claim 1 wherein the status is at least one of on hold, revoked, or active.

5. The method of claim 1 wherein the token validation request comprises one or more of a requester name, hashed information, the at least one payment token, and a nonce.

6. The method of claim 1 wherein the token validation response comprises one or more of token response status, a TRL computer system ID, a timestamp, a nonce, hashed information, the at least one payment token and a TRL computer system status code.

7. The method of claim 1 therein the token validation response is sent to the requester device.

8. The method of claim 1 wherein the token validation request and response are transmitted through a communications network that is insecure.

9. The method of claim 1 wherein the at least one payment token is a single payment token that is a pseudo account number with the same format as a real account identifier associated with a payment account associated with a consumer.

10. The method of claim 9 wherein the payment account is a credit card account.

11. A token revocation list computer system comprising:

a token status list database; and

token status list computer comprising a processor, and a computer readable medium coupled to the processor, the computer readable medium comprising, code executable by the processor, to implement a method comprising

maintaining a status for each of a plurality of tokens issued by the server computer in a token revocation database,

receiving a token validation request from a requester, wherein the token validation request includes at least one payment token of the plurality of tokens,

determining the status of the at least one of the plurality of tokens by searching the token revocation database for the status of the at least one payment token of the plurality of tokens, and

sending a token validation response including the determined status of the at least one payment token of the plurality of tokens.

12. The token revocation list computer system of claim 11 wherein the status is at least one of hold, revoked, or active.

13. The token revocation list computer system of claim 11 wherein the token validation request comprises one or more of a requester name, hashed information, the at least one payment token, and a nonce.

14. The token revocation list computer system of claim 11 wherein the token validation response comprises one or more of token response status, a TRL computer system ID, a timestamp, a nonce, hashed information, the at least one payment token and a TRL computer system status code.

15. A token validation system comprising:

a requester device; and

a token revocation list computer system in communication with the requester device, the token revocation list computer system comprising (a) a token status list database, and (b) a token status list computer comprising a processor, and a computer readable medium coupled to the processor, the computer readable medium comprising, code executable by the processor, to implement a method comprising (i) maintaining a status for each of a plurality of tokens issued by the server computer in a token revocation database, (ii) receiving a token validation request from a requester, wherein the token validation request includes at least one payment token of the plurality of tokens, (iii) determining the status of the at least one of the plurality of tokens by searching the token revocation database for the status of the at least one payment token of the plurality of tokens, and (iv) sending a token validation response including the determined status of the at least one payment token of the plurality of tokens.

16. The token validation system of claim 15 further comprising:

a token provider system in communication with the token list computer system.

17. The token validation system of claim 15 wherein the token validation request comprises a requester name, hashed information, the at least one payment token, and a nonce.

18. The token validation system of claim 17 wherein the token validation response comprises a token response status, a TRL computer system ID, a timestamp, a nonce, hashed information, the at least one payment token and a TRL computer system status code.