SECURING EXTERNAL SYSTEMS WITH ACCOUNT TOKEN SUBSTITUTION

• US 20160224976A1
• Filed: 04/11/2016
• Published: 08/04/2016
• Est. Priority Date: 08/12/2010
• Status: Active Grant

• Current Assignee: Edward Katzin, Gourab Basu, Mark Carlson, Michael Mori, Millie Yee, Patrick Stan, Ross Sakata, Steve Cracknell, Surendra Keshan
• Original Assignee: Edward Katzin, Gourab Basu, Mark Carlson, Michael Mori, Millie Yee, Patrick Stan, Ross Sakata, Steve Cracknell, Surendra Keshan
• Inventors: Basu, Gourab, Mori, Michael, Sakata, Ross, Cracknell, Steve, Yee, Millie, Carlson, Mark, Stan, Patrick, Keshan, Surendra, Katzin, Edward
• Granted Patent: US 10,726,413 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography

Abstract

Systems, apparatuses, and methods for providing an account token to an external entity during the lifecycle of a payment transaction. In some embodiments, an external entity may be a merchant computer requesting authorization of a payment message. In other embodiments, the external entity may be a support computer providing a payment processing network or a merchant support functions.

Claims

1. A method comprising:

receiving, by a tokenization server, a message including an account identifier;

generating, by the tokenization server, an account token for the account identifier included in the message;

transmitting, by the tokenization server, an external request message with the account token to an external entity for processing by the external entity;

receiving, by the tokenization server, an external response message with the account token from the external entity in response to the external entity processing the external request message; and

sending, by the tokenization server, the message to a merchant computer or an issuer computer after receiving the external response message.

2. The method of claim 1, wherein the message is an authorization request message, the external response message includes a fraud score associated with the authorization request message, and the method further comprises:

sending, by the tokenization server, the message to the issuer computer along with the fraud score.

3. The method of claim 1, wherein the message is an authorization response message, the external entity includes a reporting system that generates reports of transaction histories based on a number of categories, and the method further comprises:

determining, by the tokenization server, the account identifier from the account token after receiving the external response message; and

sending, by the tokenization server, the message to the merchant computer.

4. The method of claim 1, wherein the external response message includes external system data, the method further comprising:

sending the message to the merchant computer along with the external system data.

5. The method of claim 4, wherein the external system data includes an offer or a reward.

6. The method of claim 1, wherein the external request message is sent to a support computer communicatively coupled to a payment processing network.

7. The method of claim 1, further comprising, before generating the account token, determining, by the tokenization server, that an account token associated with the account identifier has not been generated.

15. A computer readable medium storing instructions for causing a processor to implement the method of claim 1.

8. A server computer comprising:

a processor and a computer-readable storage medium coupled to the processor, the computer readable storage medium comprising code executable by the processor for implementing a method comprising;

receiving a message including an account identifier;

generating an account token for the account identifier included in the message;

transmitting an external request message with the account token to an external entity for processing by the external entity;

receiving an external response message with the account token from the external entity in response to the external entity processing the external request message; and

sending the message to a merchant computer or an issuer computer after receiving the external response message.

9. The server computer of claim 8, wherein the message is an authorization request message, the external response message includes a fraud score associated with the authorization request message, and the method further comprises:

sending, by the tokenization server, the message to the issuer computer along with the fraud score.

10. The server computer of claim 8, wherein the message is an authorization response message, the external entity includes a reporting system that generates reports of transaction histories based on a number of categories, and the method further comprises:

determining, by the tokenization server, the account identifier from the account token after receiving the external response message; and

sending, by the tokenization server, the message to the merchant computer.

11. The server computer of claim 8, wherein the external response message includes external system data, the method further comprising:

sending the message to the merchant computer along with the external system data.

12. The server computer of claim 11, wherein the external system data includes an offer or a reward.

13. The server computer of claim 8, wherein the external request message is sent to a support computer communicatively coupled to a payment processing network.

14. The server computer of claim 8, further comprising, before generating the account token, determining, by the tokenization server, that an account token associated with the account identifier has not been generated.