Visa International Service Association

Andrew Carpenter

Glenn Leon Powell

John F Sheets

Prasanna L Narayan

Paul Tait

Matthew Leland Dill

Barbara Elizabeth Patterson

Dan Kurland

Mark Andrew Carlson

Patrick Stan

Ryan Hagey

Michael Kenji Mori

Gourab Basu

Glen Powell

Steve Cracknell

L Prasanna Narayan

Systems and methods for interoperable network token processing are provided. A network token system provides a platform that can be leveraged by external entities (e.g., third party wallets, e-commerce merchants, payment enablers/payment service providers, etc.) or internal payment processing network systems that have the need to use the tokens to facilitate payment transactions. A token registry vault can provide interfaces for various token requestors (e.g., mobile device, issuers, merchants, mobile wallet providers, etc.), merchants, acquirers, issuers, and payment processing network systems to request generation, use and management of tokens. The network token system further provides services such as card registration, token generation, token issuance, token authentication and activation, token exchange, and token life-cycle management.

Systems and methods for communicating risk using token assurance data

Systems, apparatuses, and methods are provided for enabling a transaction using a token associated with a first payment network to be conducted using a second payment network. When a transaction using a token is submitted to a payment network, the payment network can determine the payment network associated with the token. If the token is associated with a second payment network, a token verification request including the token can be sent to the second payment network. The second payment network can then return a token verification response including a primary account identifier such as a primary account number (PAN) corresponding to the token and a validation result. The transaction may then be processed using the primary account identifier.

Multi-network tokenization processing

Systems and methods for communicating token attributes associated with a token vault

Embodiments are directed to a first token vault managed by a token service provider and a second token vault managed by a second entity. The first token vault is continuously synchronized with the second token vault in real-time. That is, the data in the second token vault is updated simultaneously with or immediately after the data in the first token vault is updated. In some embodiments, the first token vault may be a master token vault and the second token vault may be a mirror token vault. The mirror token vault may store the same information as the master token vault. Alternatively, the mirror token vault may store a subset of the information stored at the master token vault. In other embodiments, the information stored at the first token vault and the information stored at the second token vault may be mutually exclusive.

Mirrored token vault

Embodiments are directed to optimizing the secure provisioning of credentials to mobile devices through use of risk decision non-overrides. In some embodiments, a service provider receives a request from a wallet provider to provision a credential associated with an account to a mobile device. The request includes a first risk level associated with the provisioning. The service provider receives a second risk level associated with the provisioning request from an issuer of the account. Based upon determining that a non-override condition exists, the service provider uses the first risk level from the wallet provider and accordingly causes a user authentication to occur. A non-override condition may be determined based upon scenario indicators received within the provisioning request. In some embodiments, the non-override condition may be ignored when the first risk level indicates medium risk and the second risk level indicates high risk.

Secure mobile device credential provisioning using risk decision non-overrides

Methods are provided for enabling a transaction using a token associated with a first payment network to be conducted using a second payment network. When a transaction using a token is submitted to a payment network, the payment network can determine the payment network associated with the token. If the token is associated with a second payment network, a token verification request including the token can be sent to the second payment network. The second payment network can then return a token verification response including a primary account identifier such as a primary account number (PAN) corresponding to the token and a validation result. The transaction may then be processed using the primary account identifier.

Processing of a transaction involving one or more third-parties and offers is described. Certain embodiments allow for suspending a received authorization request message which includes a transaction amount and a token mapped to a primary account number. One or more third-parties may be queried for an offer or discount eligible towards the transaction. The authorization request message may be adjusted to reflect one or more eligible offers from the one or more third-parties. The authorization request message may also be adjusted to replace the token with the mapped PAN. The authorization request message may then be sent to an issuer for further processing.

Growing community of inventors

Belmont, CA, United States of America

Andrew Carpenter