RESOURCE PROVIDER ACCOUNT TOKEN PROVISIONING AND PROCESSING

• US 20170228723A1
• Filed: 02/09/2016
• Published: 08/10/2017
• Est. Priority Date: 02/09/2016
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Taylor, Mary, Long, Laura A., Das, Rajat, Mori, Michael
• Granted Patent: US 11,501,288 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Embodiments are directed to issuing tokens for identifiers associated with a resource provider account specific to the resource provider issuing the account. A resource provider processor system interfaces with a resource provider computer to validate account eligibility upon receiving a token request message. If the account is eligible for token generation, the resource provider processor system generates a universal identifier corresponding to the identifier associated with the resource provider account and returns the universal identifier to the token requestor. The token requestor may send a token request message to a token issuer for obtaining a token using the universal identifier. Accordingly, the universal account identifier can be used to provision a token into a digital wallet. Transactions using the token may be processed with the resource provider processor system acting as an account issuer.

Claims

1. A method comprising:

receiving, by a resource provider processor system, a token request message from a token requestor, wherein the token request message includes a first identifier associated with a resource provider account;

identifying, by the resource provider processor system, a resource provider computer associated with the first identifier;

validating, by the resource provider processor system, the first identifier with the resource provider computer;

generating, by the resource provider processor system, a universal identifier associated with the resource provider account, the universal identifier identifying the resource provider account and the resource provider processor system; and

transmitting, by the resource provider processor system, the universal identifier to the token requestor, wherein the token requestor requests a token for the universal identifier from a token issuer server computer.

2. The method of claim 1, wherein the token issuer server computer includes a universal account processor server computer.

3. The method of claim 1, further comprising:

determining, by the resource provider processor system, one or more restrictions associated with the resource provider account; and

transmitting, by the resource provider processor system, the one or more restrictions to the token issuer server computer such that the token generated by the token issuer server computer is associated with the one or more restrictions.

4. The method of claim 1, further comprising:

contacting, by the resource provider processor system, the resource provider computer to inactivate the first identifier associated with the resource provider account.

5. The method of claim 1, wherein a format of the universal identifier is attributed to the resource provider processor system.

6. The method of claim 1, wherein a format of the first identifier included in the token request message is different than a format of the universal identifier generated by the resource provider processor system.

7. The method of claim 1, further comprising:

storing a mapping between the universal identifier and the first identifier associated with the resource provider account at a token vault.

8. The method of claim 1, further comprising:

receiving, by the resource provider processor system, identification and verification data associated with account holder of the resource provider account; and

verifying an identity of the account holder using the identification and verification data.

9. The method of claim 1, further comprising, prior to generating the universal identifier:

determining, by the resource provider processor system, that the resource provider account is eligible for tokenization.

10. A resource provider account issuer server computer, comprising:

one or more processors; and

a non-transitory computer readable storage medium communicatively coupled with the one or more processors and storing instructions which, when executed by the one or more processors, cause the server computer to perform the method comprising;

receiving a token request message from a token requestor, wherein the token request message includes a first identifier associated with a resource provider account;

identifying a resource provider computer associated with the first identifier;

validating the first identifier with the resource provider computer;

generating a universal identifier associated with the resource provider account, the universal identifier identifying the resource provider account and the resource provider processor system; and

transmitting the universal identifier to the token requestor, wherein the token requestor requests a token for the universal identifier from a token issuer server computer.

11. The system of claim 10, wherein the method further comprises:

determining one or more restrictions associated with the resource provider account; and

transmitting the one or more restrictions to the token issuer such that the token generated by the token issuer is associated with the one or more restrictions.

12. The system of claim 10, wherein a format of the first identifier included in the token request message is different than a format of the universal identifier generated by the resource provider processor system.

13. The system of claim 10, wherein the method further comprises:

storing a mapping between the universal identifier and the first identifier associated with the resource provider account at a token vault.

14. The system of claim 10, wherein the method further comprises:

receiving identification and verification data associated with account holder of the resource provider account; and

verifying an identity of the account holder using the identification and verification data.

15. The system of claim 10, wherein the method further comprises, prior to generating the universal identifier:

determining that the resource provider account is eligible for tokenization.

16. A method comprising:

receiving, by a token issuer server computer, a token request message including a first identifier from a token requestor;

determining, by the token issuer server computer, that the first identifier is associated with a resource provider account;

transmitting, by the token issuer server computer, a universal identifier request to a resource provider processor system, wherein the universal identifier request includes the first identifier and requests a universal identifier corresponding to the first identifier;

receiving, by the token issuer server computer, the universal identifier corresponding to the first identifier from the resource provider processor system;

generating, by the token issuer server computer, a token for the universal identifier, wherein the token represents the universal identifier;

storing, by the token issuer server computer, a mapping between the token and the universal identifier at a token vault; and

transmitting, by the token issuer server computer, the token to the token requestor.

17. The method of claim 16, wherein the token issuer server computer includes an universal account processing server computer.

18. The method of claim 17, further comprising:

receiving, at the universal account processing server computer, a transaction request including the token;

retrieving, by the universal account processing server computer, the universal identifier represented by the token from the token vault;

modifying, by the universal account processing server computer, the transaction request to include the universal identifier represented by the token; and

transmitting, by the universal account processing server computer, the modified transaction request including the universal identifier to the resource provider processor system for processing.

19. The method of claim 16, further comprising:

receiving, by the token issuer server computer, one or more restrictions associated with the resource provider account; and

storing the one or more restrictions along with the generated token at the token vault such that the generated token is subject to the one or more restrictions.

20. The method of claim 16, wherein a format of the first identifier included in the token request message is different than a format of the universal identifier generated by the resource provider account issuer server computer.