METHODS AND SYSTEMS FOR TOKEN REQUEST MANAGEMENT

• US 20150142673A1
• Filed: 11/18/2014
• Published: 05/21/2015
• Est. Priority Date: 11/18/2013
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Nelsen, Mark, Sheets, John
• Application Number:
  US14/546,999
• Publication Number:
  US 20150142673A1
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules

Abstract

Embodiments of the present invention are directed to methods and systems for providing a payment token issuance system using account issuer-defined payment token request rules generated and stored by a token issuer computer. The token issuer computer allows an account issuer to define payment token request rules, and the token issuer computer can automatically apply the payment token request rules to a payment token request without requiring additional decisioning by the account issuer.

Claims

1. A method comprising:

receiving, at a server computer, a set of parameters from a client computer operated by an account issuer;

generating, by the server computer, a payment token request rule based on the set of parameters;

storing, by the server computer, the payment token request rule;

receiving, by the server computer, a payment token request message;

applying, by the server computer, the payment token request rule to the payment token request message; and

issuing, by the server computer, a payment token when the payment token request rule is satisfied.

2. The method of claim 1, wherein applying the payment token request rule to the token request message further comprises:

generating, by the server computer, a risk score associated with the payment token request message;

retrieving, by the server computer, the payment token request rule from a database using an identifier; and

evaluating, by the server computer, the payment token request rule with the risk score.

3. The method of claim 1, wherein applying the payment token request rule to the token request message further comprises:

retrieving, by the server computer, the payment token request rule from a database using an identifier; and

evaluating, by the server computer, data elements in the payment token request message with the payment token request rule.

4. The method of claim 1, wherein when the payment token request rule is not satisfied, the method further comprises:

generating, by the server computer, an authorization request message, the authorization request message including the payment token request message;

sending, by the server computer, the authorization request message to the client computer for approval of the payment token request message; and

receiving, by the server computer, an authorization response message from the client computer; and

issuing, by the server computer, the payment token when the authorization response message approves issuance of the payment token.

5. The method of claim 1, wherein sending the authorization request message to the client computer further comprises:

sending, by the server computer, a risk score associated with the payment token request message to the client computer.

6. A computer comprising:

a processor; and

a tangible non-transitory computer readable medium coupled to the processor, the tangible non-transitory computer readable medium comprising code, executable by the processor for implementing a method comprising;

receiving a set of parameters from a client computer operated by an account issuer;

generating a payment token request rule based on the set of parameters;

storing the payment token request rule;

receiving a payment token request message;

applying the payment token request rule to the payment token request message; and

issuing a payment token when the payment token request rule is satisfied.

7. The computer of claim 6, wherein applying the payment token request rule to the token request message further comprises:

generating a risk score associated with the payment token request message;

retrieving the payment token request rule from a database using an identifier; and

evaluating the payment token request rule with the risk score.

8. The computer of claim 6, wherein applying the payment token request rule to the token request message further comprises:

retrieving the payment token request rule from a database using an identifier; and

evaluating data elements in the payment token request message with the payment token request rule.

9. The computer of claim 6, wherein when the payment token request rule is not satisfied, the method further comprises:

generating an authorization request message, the authorization request message including the payment token request message;

sending the authorization request message to the client computer for approval of the payment token request message; and

receiving an authorization response message from the client computer; and

issuing the payment token when the authorization response message approves issuance of the payment token

10. The computer of claim 6, wherein sending the authorization request message to the client computer further comprises:

sending a risk score associated with the payment token request message to the client computer.

11. A method comprising:

receiving, by a server computer, from a token issuer computer a user interface for providing a set of parameters to generate a payment token request rule;

generating, by the server computer, the set of parameters; and

sending, by the server computer, the set of parameters to the token issuer computer.

12. The method of claim 11, wherein the set of parameters include an action to perform when the payment token request rule is not satisfied.

13. The method of claim 12, wherein the action is an account issuer authentication process, and wherein the method further comprises:

receiving, by the server computer, an authorization request message associated with a payment token request message;

performing, by the server computer, a risk analysis to determine a risk score for the payment token request message;

generating, by the server computer, an authorization response message; and

sending, by the server computer, the authorization response message to the token issuer computer for issuance of a payment token when the risk score is on a first side of a risk threshold, and wherein the payment token is not issued when the risk score is on a second side of the risk threshold.

14. The method of claim 11, further comprising:

receiving, by the server computer, a password from the token issuer computer when additional authentication of a token requestor is required for the token request message; and

sending, by the server computer, the password to a token requestor device, wherein the password is provided to the token issuer computer to authenticate the token requestor.

15. The method of claim 11, wherein the set of parameters includes a risk score, an account issuer identifier, an account range, and a token requestor device type.

16. A computer comprising:

a processor; and

a tangible non-transitory computer readable medium coupled to the processor, the tangible non-transitory computer readable medium comprising code, executable by the processor for implementing a method comprising;

receiving from a token issuer computer a user interface for providing a set of parameters to generate a payment token request rule;

generating the set of parameters; and

sending the set of parameters to the token issuer computer.

17. The computer of claim 16, wherein the set of parameters include an action to perform when the payment token request rule is not satisfied.

18. The computer of claim 17, wherein the action is an account issuer authentication process, and wherein the method further comprises:

receiving an authorization request message associated with a payment token request message;

performing a risk analysis to determine a risk score for the payment token request message;

generating an authorization response message; and

sending the authorization response message to the token issuer computer for issuance of a payment token when the risk score is on a first side of a risk threshold, and wherein the payment token is not issued when the risk score is on a second side of the risk threshold.

19. The computer of claim 16, further comprising:

receiving a password from the token issuer computer when additional authentication of a token requestor is required for the token request message; and

sending the password to a token requestor device, wherein the password is provided to the token issuer computer to authenticate the token requestor.

20. The computer of claim 16, wherein the set of parameters includes a risk score, an account issuer identifier, an account range, and a token requestor device type.