TOKENIZATION OF CO-NETWORK ACCOUNTS

• US 20170295155A1
• Filed: 04/07/2016
• Published: 10/12/2017
• Est. Priority Date: 04/07/2016
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Wong, Erick
• Granted Patent: US 10,313,321 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

The present disclosure relates generally to tokenization of a co-network account. A co-network account, as used herein, refers to an account associated with a first transaction processing network for processing transactions initiated using the account and a second transaction processing network for processing transactions initiated using the account. During provisioning of a co-network account onto a user device, a first token is generated for use with the first transaction processing network and a second token is generated for use with the second transaction processing network. Embodiments use the authentication result generated during the provisioning of the first token for the provisioning of the second token. Embodiments automatically provision multiple payment tokens on the user device upon determining that the account is associated with more than one transaction processing networks (e.g. the account is a co-network account).

Claims

1. A method comprising:

receiving, at a server computer of a first transaction processing network, a first token provisioning request message from a token requestor, the first token provisioning request message including an account identifier;

determining, by the server computer, a second transaction processing network associated with the account identifier;

performing, by the server computer, an authentication process with a user;

generating, by the server computer, a first token associated with the account identifier; and

sending, by the server computer, the first token and result of the authentication process to the token requestor, wherein the token requestor sends a token provisioning message including the account identifier and the result of the authentication process to the second transaction processing network to request a second token for the account identifier.

2. The method of claim 1, further comprising:

upon determining the second transaction processing network, informing the token requestor of the second transaction processing network.

3. The method of claim 1, further comprising:

sending a provisioning request message to an authorizing computer to request authorization prior to generating the first token.

4. The method of claim 3, wherein the provisioning request message includes the account identifier and the result of the authentication process.

5. The method of claim 1, further comprising:

determining, prior to generating the first token, that an account identified by the account identifier is eligible for provisioning.

6. The method of claim 1, wherein an account identified by the account identifier is a co-network account.

7. The method of claim 1, wherein the first token and the second token are provisioned on a user device of the user.

8. The method of claim 1, wherein the authentication process is performed based on determining the second transaction processing network associated with the account identifier.

9. The method of claim 1, wherein the first token or the second token is used to access a building or data in a database.

10. A method comprising:

sending, by a token requestor computer, a first token request message to a first transaction processing network, wherein the first token request message includes an account identifier;

receiving, by the token requestor computer, a message from the first transaction processing network indicating that the account identifier is associated with a second transaction processing network;

receiving, by the token requestor computer, a first token from the first transaction processing network;

sending, by the token requestor computer, a second token request message to the second transaction network; and

receiving, by the token requestor computer, a second token from the second transaction processing network.

11. The method of claim 10, wherein the second token request message includes the account identifier and the first token.

12. The method of claim 10, further comprising:

receiving, by the token requestor computer, result of an authentication process performed by the first transaction processing network.

13. The method of claim 12, wherein the second token request message includes the account identifier and the result of the authentication process performed by the first transaction processing network.

14. The method of claim 10, further comprising:

receiving, by the token requestor computer, the account identifier from a user of an account associated with the account identifier prior to sending the first token request message.

15. The method of claim 10, wherein the first token and the second token are provisioned on a user device of a user of an account identified by the account identifier.

16. A server computer of a first transaction processing network;

comprising;

one or more processors; and

a non-transitory computer readable storage medium communicatively coupled with the one or more processors and storing instructions which, when executed by the one or more processors, cause the server computer to;

receive a token provisioning request message from a token requestor, the token provisioning request message including an account identifier;

determine a second transaction processing network associated with the account identifier;

perform an authentication process with a user based on determining the second transaction processing network associated with the account identifier;

generate a first token associated with the account identifier; and

send the first token and result of the authentication process to the token requestor, wherein the token requestor requests a second token for the account identifier from the second transaction processing network associated with the account identifier.

17. The server computer of claim 16, wherein the instructions, when executed by the one or more processors, further cause the server computer to:

upon determining the second transaction processing network, inform the token requester of the second transaction processing network.

18. The server computer of claim 16, wherein the instructions, when executed by the one or more processors, further cause the server computer to:

send a provisioning request message to an authorizing computer to request authorization prior to generating the first token.

19. The server computer of claim 18, wherein the provisioning request message includes the account identifier and the result of the authentication process.

20. The server computer of claim 16, wherein the instructions, when executed by the one or more processors, further cause the server computer to:

determine, prior to generating the first token, that an account identified by the account identifier is eligible for provisioning.

21. The server computer of claim 16, wherein an account identified by the account identifier is a co-network account.

22. The server computer of claim 16, wherein the first token and the second token are provisioned on a user device of the user.