MULTIPLE TOKEN PROVISIONING

• US 20150199679A1
• Filed: 01/13/2015
• Published: 07/16/2015
• Est. Priority Date: 01/13/2014
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Prasanna Laxminarayanan
• Inventors: Powell, Glenn, Laxminarayanan, Prasanna, Palanisamy, Karthikeyan
• Application Number:
  US14/595,843
• Publication Number:
  US 20150199679A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

An issuer computer may store a primary account number, and may generate a series of first payment tokens for a plurality of payment devices used by a consumer. The issuer computer may then provide the first payment tokens to a payment processing server computer. The payment processing server computer may then generate a plurality of second payment tokens corresponding to the first payment tokens. The second payment tokens may then be provisioned onto the consumer'"'"'s payment devices.

Claims

1. A method comprising:

receiving, by a payment processor server computer, a provisioning request associated with a communication device, the provisioning request including a primary account identifier of an account associated with an issuer;

sending, by the payment processor server computer, the provisioning request to an issuer server computer;

receiving, by the payment processor server computer, a provisioning response from the issuer server computer, the provisioning response including a first payment token associated with the primary account identifier and generated by the issuer server computer, the first payment token being one of a plurality of first payment tokens associated with the primary account identifier;

generating, by the payment processor server computer, a second payment token associated with the first payment token;

storing, by the payment processor server computer, the first payment token and the second payment token in a payment token database;

providing, by the payment processor server computer, the second payment token to the communication device; and

notifying, by the payment processor server computer, the issuer server computer that the second payment token is associated with the first payment token.

2. The method of claim 1, wherein the issuer server computer is informed that the second payment token is compromised, and wherein the issuer server computer cancels the first payment token so that the second payment token is no longer valid.

3. The method of claim 2, wherein the primary account identifier and other first payment tokens associated with the primary account identifier remain active.

4. The method of claim 2, further comprising:

receiving, by the payment processor server computer, a replacement first payment token associated with the primary account identifier from the issuer server computer;

generating, by the payment processor server computer, a replacement second payment token associated with the replacement first payment token;

storing, by the payment processor server computer, the replacement first payment token and the replacement second payment token in the payment token database;

providing, by the payment processor server computer, the replacement second payment token to the communication device; and

notifying, by the payment processor server computer, the issuer server computer that the replacement second payment token is associated with the replacement first payment token.

5. The method of claim 1, wherein the provisioning response is not received from the issuer server computer within a predetermined amount of time, wherein the second payment token is generated and provided to the communication device after the predetermined amount of time and before receiving the provisioning response with the first payment token, and wherein the method further comprises:

notifying, by the server computer, the issuer server computer that the second payment token has been provided to the communication device before receiving the provisioning response.

6. A payment processor server computer comprising:

a processor; and

a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising a payment token database and code executable by the processor for implementing a method comprising;

receiving a provisioning request associated with a communication device, the provisioning request including a primary account identifier of an account associated with an issuer;

sending the provisioning request to an issuer server computer;

receiving a provisioning response from the issuer server computer, the provisioning response including a first payment token associated with the primary account identifier and generated by the issuer server computer, the first payment token being one of a plurality of first payment tokens associated with the primary account identifier;

generating a second payment token associated with the first payment token;

storing the first payment token and the second payment token in the payment token database;

providing the second payment token to the communication device; and

notifying the issuer server computer that the second payment token is associated with the first payment token.

7. The payment processor server computer of claim 6, wherein the communication device is capable of being used to conduct a payment transaction.

8. The payment processor server computer of claim 6, wherein the second payment token is a 16-digit number that is formatted as a primary account identifier.

9. The payment processor server computer of claim 6, wherein the first payment token is a channel-specific payment token.

10. The payment processor server computer of claim 6, wherein each first payment token from the plurality of first payment tokens is associated with a different communication device.

11. A method comprising:

receiving, by a payment processor server computer, an authorization request message comprising a second payment token for a transaction from a merchant server computer;

identifying, by the payment processor server computer, a first payment token that is associated with the second payment token in a payment token database, wherein the second payment token was previously generated by the payment processor server computer, and wherein the first payment token was previously generated by an issuer server computer;

reformatting, by the payment processor server computer, the authorization request message to include the first payment token instead of the second payment token;

transmitting, by the payment processor server computer, the authorization request message to the issuer server computer, wherein the issuer server computer authorizes the transaction based on a primary account identifier associated with the first payment token at the issuer server computer;

receiving, by the payment processor server computer, an authorization response message comprising the first payment token from the issuer server computer;

reformatting, by the payment processor server computer, the authorization response message to include the second payment token instead of the first payment token; and

transmitting, by the payment processor server computer, the authorization response message to the merchant server computer.

12. The method of claim 11, wherein the second payment token is provided to the merchant server computer for the transaction by a communication device.

13. The method of claim 11, wherein the first payment token is one of a plurality of first payment tokens associated with the primary account identifier at the issuer server computer.

14. The method of claim 13, wherein the first payment token can be replaced or canceled without affecting the primary account identifier or other first payment tokens associated with the primary account identifier.

15. The method of claim 11, wherein the payment processor server is in a payment processing network.

16. A payment processor server computer comprising:

a processor; and

a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising a payment token database and code executable by the processor for implementing a method comprising;

receiving an authorization request message comprising a second payment token for a transaction from a merchant server computer;

identifying a first payment token that is associated with the second payment token in a payment token database, wherein the second payment token was previously generated by the payment processor server computer, and wherein the first payment token was previously generated by an issuer server computer;

reformatting the authorization request message to include the first payment token instead of the second payment token;

transmitting the authorization request message to the issuer server computer, wherein the issuer server computer authorizes the transaction based on a primary account identifier associated with the first payment token at the issuer server computer;

receiving an authorization response message comprising the first payment token from the issuer server computer;

reformatting the authorization response message to comprise the second payment token instead of the first payment token; and

transmitting the authorization response message to the merchant server computer.

17. The server computer of claim 16, wherein the first payment token is associated with a communication device.

18. The server computer of claim 16, wherein the first payment token is one of a plurality of first payment tokens associated with the primary account identifier at the issuer server computer, and wherein each first payment token is associated with a different communication device.

19. The server computer of claim 18, wherein the first payment token can be replaced or canceled without affecting the primary account identifier or other first payment tokens associated with the primary account identifier.

20. The server computer of claim 16, wherein the first payment token and the second payment token have the same format and the same number of digits.