Credit card tokenization techniques

摘要

The present invention provides techniques in connection with payment transactions. Techniques are included in which a non-merchant entity generates, stores, and provides to a merchant a token that can be stored and used by the merchant, for example, in place of a credit card number, in connection with a desired payment transaction. The token may be randomized, including alphanumeric characters, be of equal length to the credit card number, and include a configurable character sequence that is identical to a sequence of numbers in the credit card number. Additionally, the token may have a configurable maximum amount of time between generation and expiry, and may be useable in connection with only a single desired payment transaction. Storage and use of a token, instead of a credit card number, by the merchant in connection with the payment transaction may prevent the merchant from being subject to Payment Card Industry Data Security Standard requirements.

主权项

1. A method comprising:
using one or more computers, obtaining, from a merchant and by a non-merchant entity, information regarding a desired payment transaction, including information specifying the desired payment transaction and a payment card number to be used for payment in the payment transaction; using one or more computers, the non-merchant entity storing the information specifying the desired payment transaction and the payment card number in a database; using one or more computers, the non-merchant entity transmitting the information specifying the desired payment transaction and the payment card number to one or more payment processing entities for processing; using one or more computers, the non-merchant entity obtaining, from the one or more payment processing entities, outcome information regarding the processing; using one or more computers, the non-merchant entity generating and storing a token in association with the payment card number and with information specifying the desired transaction,
wherein the token comprises a randomized, alphanumeric character set, equal in amount of characters to an amount of characters in the payment card number,wherein the token has a configurable amount of time between generation and expiry, andwherein the token is not useable in connection with any transaction or attempted transaction, except for the desired payment transaction; and using one or more computers, the non-merchant entity transmitting to the merchant, in association with the purchase transaction, the token and outcome information regarding the processing, for use by the merchant in connection with the desired transaction.