Offline Contactless Card Tokenization Without Network Dependency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing tokenization processes for payment cards require online connectivity to obtain a token, which is not always available, leading to delays and security risks when accessing issuer systems or networks.
Innovation Solution
A system and method for offline tokenization that enables a payment card to generate a token and associated data locally on a user device through contactless communication, eliminating the need for online connectivity by using a microchip to create a token primary account number and account specific key, which can be stored in a digital wallet.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If online connectivity is required to obtain a token through traditional tokenization processes, then security protection through issuer system verification is improved, but system availability and transaction speed deteriorate due to network dependency and delays
Solution Approach 1:
The patent segments the tokenization process into two independent parts: (1) token generation and storage in the digital wallet application, and (2) token usage for transactions. This allows the token to be generated and stored locally without requiring continuous online connectivity to the issuer system, while still maintaining security through the use of encrypted token data and secure storage mechanisms. The segmentation enables fast local transactions while preserving security through the token's cryptographic design.
Solution Approach 2:
The patent implements preliminary action by generating and storing the token in the digital wallet application before any transaction occurs. The token is created through a one-time online process where the issuer system provides the token data, which is then stored securely in the mobile device's digital wallet. This preliminary token generation eliminates the need for real-time online connectivity during transactions, as the token is already available locally and ready for immediate use.
2Reliability
If online connectivity is required to obtain a token, then security verification through issuer systems is improved, but system availability deteriorates when network connections are unavailable
Solution Approach 1:
The patent implements self-service by enabling the digital wallet application to generate and store tokens locally on the mobile device without requiring continuous connection to external issuer systems. The tokenization data is processed and stored within the device itself, allowing the system to serve its own tokenization needs independently. This self-service capability ensures that the system remains available and functional even when network connections are unavailable, while maintaining security through the use of cryptographically secure token generation and storage mechanisms.
3Extent of automation
If traditional online tokenization processes are used, then centralized control through issuing systems is improved, but security risks from network exposure and data transmission increase
Solution Approach 1:
The patent extracts the sensitive tokenization data and storage functionality from the centralized issuer system and places it locally in the digital wallet application on the mobile device. By taking out the token generation and storage processes from the network-dependent centralized system, the patent eliminates the security risks associated with data transmission over networks and exposure to potential network threats. The token data remains securely stored in the device's local storage, accessible only through the secure digital wallet application, thereby removing the attack surface presented by network communication.
Data Source
AI summary
Disclosed herein are system, method, and computer program product embodiments for tokenization in an offline environment. A tokenization system may initiate a tokenization transaction with a payment card. The tokenization system may acquire from the payment card a token primary account number, an account specific key, and tokenization data associated with the tokenization transaction. The tokenization system may store in a digital wallet an association between the token primary account number and a digitized version of the payment card.