Securing external systems with account token substitution
First Claim
Patent Images
1. A method comprising:
- receiving, by a tokenization server, a transaction authorization message including an account identifier, wherein the tokenization server is communicatively coupled to a first external entity computer of a first external entity and a second external entity computer of a second external entity for performing transaction support processes that supplement an authorization process in connection with the transaction authorization message;
determining, by the tokenization server, that the first external entity computer is adapted to receive an account token in lieu of the account identifier whereas the second external entity computer is adapted to receive the account identifier;
identifying, by the tokenization server, a unique token derivation key assigned to the first external entity computer, wherein the unique token derivation key is available only to the tokenization server;
generating, by the tokenization server, the account token for the account identifier included in the transaction authorization message, generating comprising;
encrypting the account identifier using the unique token derivation key for the first external entity computer to obtain the account token;
transmitting, by the tokenization server, a first external transaction support request message with the account token to the first external entity computer for processing by the first external entity;
transmitting, by the tokenization server, a second external transaction support request message with the account identifier to the second external entity computer for processing by the second external entity;
receiving, by the tokenization server, a first external transaction support response message including the account token from the first external entity computer in response to the first external entity computer performing the transaction support process;
receiving, by the tokenization server, a second external transaction support response message including the account identifier from the second external entity computer in response to the second external entity computer performing the transaction support process;
sending, by the tokenization server, the transaction authorization message along with data from the first external transaction support response message or the second external transaction support response message to an issuer computer;
receiving, by the tokenization server, a transaction response message from the issuer computer; and
sending, by the tokenization server, the transaction response message along with data from the first external transaction support response message or the second external transaction support response message to a merchant computer.
0 Assignments
0 Petitions
Accused Products
Abstract
Systems, apparatuses, and methods for providing an account token to an external entity during the lifecycle of a payment transaction. In some embodiments, an external entity may be a merchant computer requesting authorization of a payment message. In other embodiments, the external entity may be a support computer providing a payment processing network or a merchant support functions.
600 Citations
11 Claims
-
1. A method comprising:
-
receiving, by a tokenization server, a transaction authorization message including an account identifier, wherein the tokenization server is communicatively coupled to a first external entity computer of a first external entity and a second external entity computer of a second external entity for performing transaction support processes that supplement an authorization process in connection with the transaction authorization message; determining, by the tokenization server, that the first external entity computer is adapted to receive an account token in lieu of the account identifier whereas the second external entity computer is adapted to receive the account identifier; identifying, by the tokenization server, a unique token derivation key assigned to the first external entity computer, wherein the unique token derivation key is available only to the tokenization server; generating, by the tokenization server, the account token for the account identifier included in the transaction authorization message, generating comprising; encrypting the account identifier using the unique token derivation key for the first external entity computer to obtain the account token; transmitting, by the tokenization server, a first external transaction support request message with the account token to the first external entity computer for processing by the first external entity; transmitting, by the tokenization server, a second external transaction support request message with the account identifier to the second external entity computer for processing by the second external entity; receiving, by the tokenization server, a first external transaction support response message including the account token from the first external entity computer in response to the first external entity computer performing the transaction support process; receiving, by the tokenization server, a second external transaction support response message including the account identifier from the second external entity computer in response to the second external entity computer performing the transaction support process; sending, by the tokenization server, the transaction authorization message along with data from the first external transaction support response message or the second external transaction support response message to an issuer computer; receiving, by the tokenization server, a transaction response message from the issuer computer; and sending, by the tokenization server, the transaction response message along with data from the first external transaction support response message or the second external transaction support response message to a merchant computer. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A server computer comprising:
-
a processor and a memory coupled to the processor, the memory storing instructions that, when executed by the processor, cause the processor to; receive a transaction authorization message including an account identifier, wherein the server computer is communicatively coupled to a first external entity computer of a first external entity and a second external entity computer of a second external entity for performing transaction support processes that supplement an authorization process in connection with the transaction authorization message; determine that the first external entity computer is adapted to receive an account token in lieu of the account identifier whereas the second external entity computer is adapted to receive the account identifier; identify a unique token derivation key assigned to the first external entity computer, wherein the unique token derivation key is available only to the server computer; generate the account token for the account identifier included in the transaction authorization message, wherein the instructions causing the processor to generate the account token further cause the processor to; encrypt the account identifier using the unique token derivation key for the first external entity computer to obtain the account token; transmit a first external transaction support request message with the account token to the first external entity computer for processing by the first external entity; transmit a second external transaction support request message with the account identifier to the second external entity computer for processing by the second external entity; receive a first external transaction support response message including the account token from the first external entity computer in response to the first external entity computer performing the transaction support process; and receive a second external transaction support response message including the account identifier from the second external entity computer in response to the second external entity computer performing the transaction support process; send the transaction authorization message along with data from the first external transaction support response message or the second external transaction support response message to an issuer computer; receive a transaction response message from the issuer computer; and send the transaction response message along with data from the first external transaction support response message or the second external transaction support response message to a merchant computer. - View Dependent Claims (8, 9, 10)
-
-
11. A non-transitory computer readable medium storing instructions that, when executed by a processor of a tokenization server, cause the processor to:
-
receive a transaction authorization message including an account identifier at a tokenization server, wherein the tokenization server is communicatively coupled to a first external entity computer of a first external entity and a second external entity computer of a second external entity for performing transaction support processes that supplement an authorization process in connection with the transaction authorization message; determine that the first external entity computer is adapted to receive an account token in lieu of the account identifier whereas the second external entity computer is adapted to receive the account identifier; identify a unique token derivation key assigned to the first external entity computer, wherein the unique token derivation key is available only to the tokenization server; generate the account token for the account identifier included in the transaction authorization message, wherein the instructions causing the processor to generate the account token further cause the processor to; encrypt the account identifier using the unique token derivation key for the first external entity computer to obtain the account token; transmit a first external transaction support request message with the account token to the first external entity computer for processing by the first external entity; transmit a second external transaction support request message with the account identifier to the second external entity computer for processing by the second external entity; receive a first external transaction support response message including the account token from the first external entity computer in response to the first external entity computer performing the transaction support process; receive a second external transaction support response message including the account identifier from the second external entity computer in response to the second external entity computer performing the transaction support process; send the transaction authorization message along with data from the first external transaction support response message or the second external transaction support response message to an issuer computer; receive a transaction response message from the issuer computer; and send the transaction response message along with data from the first external transaction support response message or the second external transaction support response message to a merchant computer.
-
Specification