Integrated global tokenization system

Abstract

An integrated selling system platform includes a point-of-sale application and middleware to perform global tokenization orchestration, that in combination, provide credit card reading device agnostic global token and provisioning operations. The middleware includes communication interfaces, each of which corresponds to a particular communication protocol. The middleware receives a token create request from the point of sale application and directly communicates, via one of the communication protocols, to a point-of-interaction payment device, to receive and securely encrypt the credit card number, then transmit that information to a hosted network token provisioning system to request a network token. Upon receiving the network token, the middleware communicates directly, via one or more protocols, to a global merchant tokenization host, to create a merchant specific token, to be returned by the middleware back to the point- of-sale client to use as a card-on-file payment method.

Description

The integrated point-of-sale (POS) system platform comprises a point-of-sale (POS) application and middleware for performing global tokenization orchestration. Together, they provide global tokenization and configuration operations independent of credit card readers. The middleware includes communication interfaces, each corresponding to a specific communication protocol. The middleware receives token creation requests from the POS application and communicates directly with the payment terminal via one of the communication protocols to receive and securely encrypt the credit card number. This information is then transmitted to a hosted online tokenization system to request online tokens. Upon receiving the online tokens, the middleware communicates directly with the global merchant tokenization host via one or more protocols to create merchant-specific tokens and sends these tokens back to the POS user for use as a payment method for linked cards.

Claims

CLAIMSWhat is claimed is:

1. An integrated selling system platform with integrated global tokenization orchestration middleware, comprising: a workstation comprising one or more processors and a memory system comprising a plurality of instructions executable by the one or more processors to provide a point-of-sale (POS) application and a middleware, wherein source code of the middleware is configured to be compiled and run on a variety of workstation operation systems, and the middleware comprises multiple communication interfaces, each of the multiple communication interfaces corresponding to one of multiple communication protocols, and the middleware is POS and point-of-interaction (POI) device agnostic; wherein the workstation is configured to interface with a hosted platform used to perform both payments and global tokenization services inside, or outside, of a restricted jurisdiction for primary account number (PAN) export and storage, and a hosted network token provisioning system; and wherein the middleware is configured to: receive a request from the POS application to obtain a global token from the hosted platform; receive a request via one of the communication protocols to obtain the global token through a POI device that reads and encrypts credit card data; receive and forward the request to obtain the global token to an in-region hosted system to decrypt the encrypted credit card data using a hardware security module that provisions an international credit card scheme network token;receive the international credit card scheme network token via one of the communication protocols; execute a request to the hosted platform to provision a merchant-specific global token using the international credit card scheme network token; and receive the merchant- specific global token and return the merchant- specific global token back to the POS application for storage and future usage to orchestrate a future payment authorization transaction via the merchant- specific global token.

2. The integrated selling system platform of claim 1, wherein the middleware is further configured to: receive an encrypted credit card number from the POT device that recognizes a POI device type, automatically connects and communicates based on the POI device type, initiates a command to accept a credit card read or a manually entered credit card number, and encrypts the credit card number, within a payment card industry (PCI) validated point-point encryption (P2PE) solution; recognize the communication protocol of the hosted network token provisioning system; construct an information, including the encrypted card number; and transmits the information to the hosted network token provisioning system to decrypt the information and provision a network token, and in turn is exchanged for the merchant- specific global token.

3. A computer- implemented method, within a middleware of an integrated selling system platform, to provide a credit card account number linked with a user account comprising: transmitting a plurality of instructions to a hosted platform used for merchant specific global token provisioning, when requesting a token, to identify a user account number linked to the credit card account number obtained from a point-of-interaction(POI) device, using a network token, and subsequently communicate to a platform with a user account and payment information; interrogating the user account and payment information to determine whether the user account is eligible for accruing units and / or eligible to redeem units based on information returned to the hosted platform; receiving information on a plurality of options for accrual and / or redemption from the hosted platform; and presenting to a customer associated with the credit card account number one or more of the options.

4. The computer-implemented method of claim 3, wherein the one or more of the options comprise presenting to the customer associated with the credit card account number, a number of units earned for an associated payment transaction.

5. The computer-implemented method of claim 3, wherein the one or more of the options comprise redeeming or accruing units instead of completing a credit card payment or in addition to the credit card payment.

6. The computer-implemented method of claim 3, further comprising: receiving input from the customer; transmitting an accrual or redemption request back to the hosted platform to subsequently communicate to the platform, the units of accrual or redemption; receiving a response back from the hosted platform; displaying, on the POI device, the number of units accrued or redeemed; and returning a result to a point-of-sale (POS) application to add to an order and receipt.

7. A computer program product comprising a storage medium embodied with computer program instructions that when executed by one or more processors cause the one or more processors to implement: receiving a request from a point-of-sale (POS) application to obtain a global token from a hosted platform; receiving a request via a communication protocol of multiple communication protocols supported by a middleware to obtain the global token through a point-of- interaction (POI) device that reads and encrypts credit card data; receiving and forwarding the request to obtain the global token to an in-region hosted system to decrypt the encrypted credit card data using a hardware security module that provisions an international credit card scheme network token; receiving the international credit card scheme network token via one of the communication protocols; executing a request to the hosted platform to provision a merchant- specific global token using the international credit card scheme network token; receiving the merchant-specific global token; and returning the merchant- specific global token back to the POS application for storage and future usage to orchestrate a future payment authorization transaction via the merchant- specific global token.

8. The computer program product of claim 7, wherein the POS application and middleware are executable by a workstation.

9. The computer program product of claim 8, wherein the workstation is configured to interface with the hosted platform used to perform both payments and global tokenization services inside, or outside, of a restricted jurisdiction for primary account number (PAN) export and storage, and a hosted network token provisioning system.

10. The computer program product of claim 9, further comprising computer program instructions that when executed by the one or more processors cause the one or more processors to implement: receiving an encrypted credit card number from the POI device that recognizes a POI device type, automatically connects and communicates based on the POI device type, initiates a command to accept a credit card read or a manually entered credit card number, and encrypts the credit card number, within a payment card industry (PCI) validated point-point encryption (P2PE) solution; recognizing the communication protocol of the hosted network token provisioning system; constructing an information, including the encrypted card number; and transmitting the information to the hosted network token provisioning system to decrypt the information and provision a network token, and in turn is exchanged for the merchant- specific global token.

11. The computer program product of claim 8, wherein source code of the middleware is configured to be compiled and run on a variety of workstation operation systems.

12. The computer program product of claim 8, wherein the middleware comprises multiple communication interfaces, each of the multiple communication interfaces corresponding to one of the multiple communication protocols.

13. The computer program product of claim 12, wherein the middleware is POS and POI device agnostic.

14. The computer program product of claim 7, wherein the POS application and middleware are executable by an application server.

15. The computer program product of claim 7, further comprising computer program instructions that when executed by the one or more processors cause the one or more processors to implement: transmitting a plurality of instructions to the hosted platform used for merchant specific global token provisioning, when requesting a token, to identify a user account number linked to the credit card account number obtained from the POI device, using a network token, and subsequently communicate to a platform with a user account and payment information; interrogating the user account and payment information to determine whether the user account is eligible for accruing units and / or eligible to redeem units based on information returned to the hosted platform; receiving information on a plurality of options for accrual and / or redemption from the hosted platform; and presenting to a customer associated with the credit card account number one or more of the options.

16. The computer program product of claim 15, wherein the one or more of the options comprise presenting to the customer associated with the credit card account number, a number of units earned for an associated payment transaction.

17. The computer program product of claim 15, wherein the one or more of the options comprise redeeming or accruing units instead of completing a credit card payment or in addition to the credit card payment.

18. The computer program product of claim 15, further comprising computer program instructions that when executed by the one or more processors cause the one or more processors to implement: receiving input from the customer;transmitting an accrual or redemption request back to the hosted platform to subsequently communicate to the platform, the units of accrual or redemption; receiving a response back from the hosted platform; displaying, on the POI device, the number of units accrued or redeemed; and returning a result to the POS application to add to an order and receipt.

Images