Transaction Tokenization Using Supplemental Data Identifiers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems face limitations due to fixed communication protocols and size constraints, which hinder the integration of new functionalities such as installment plans in payment transactions, and are vulnerable to security threats like man-in-the-middle attacks.

Innovation Solution

A token service computer is introduced to manage supplemental data identifiers, enabling the integration of installment plans by using tokens linked to credentials, allowing secure and efficient communication between resource providers, service providers, and authorizing entities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If fixed communication protocols with size limits are used, then system stability and security are maintained, but functionality and adaptability are limited

Engineering Contradiction:

ImprovefunctionalityVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

A token service computer is introduced as an intermediary between resource provider computers and authorizing entity computers. This mediator handles supplemental data identifiers and tokens, allowing new functionalities like installment plans to be added without modifying existing communication protocols. The token service computer acts as a buffer that translates between old protocol constraints and new functional requirements.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is segmented into distinct functional components: resource provider computers, token service computers, and authorizing entity computers. Each component has a specific role in handling tokens and supplemental data. This segmentation allows the token service computer to manage complexity centrally while keeping other system components relatively simple and unchanged.

Inventive Principle:

Principle #1Segmentation

2Ease of operation

If sensitive credentials are transmitted by resource provider computers, then authorization functionality is enabled, but security against hacking and man-in-the-middle attacks deteriorates

Engineering Contradiction:

Improveauthorization functionalityVSAvoidsecurity vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

Instead of transmitting sensitive credentials through the communication network, the system creates a copy (token) of the credential relationship. The token service computer establishes a mapping between tokens and credentials locally, allowing authorization requests to use tokens rather than actual credentials during transmission. This copying approach maintains functionality while eliminating the need to send sensitive data over networks.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The token service computer serves as a security intermediary that handles credential tokenization. It receives credentials from resource providers, creates secure token mappings, and returns tokens to be used in authorization requests. This intermediary layer prevents credentials from being exposed in communication channels while maintaining the authorization functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Adaptability or versatility

If existing systems are updated to include new functionality, then adaptability improves, but device complexity and implementation cost increase

Engineering Contradiction:

Improvenew functionalityVSAvoidimplementation cost

Core Design Contradiction:

Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

The token service computer provides universal functionality that can accommodate various new features (installment plans, rewards programs, etc.) through a single unified mechanism. Instead of requiring separate system updates for each new functionality, the token service computer handles all supplemental data identifiers and tokens, making the system highly adaptable with minimal implementation changes.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

By centralizing token management in a dedicated service computer, the patent avoids the need for widespread system updates across all resource provider and authorizing entity computers. The intermediary handles the complexity of new functionality centrally, reducing implementation costs and complexity at individual system points.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12500766B2Tokenizing transactions using supplemental data

Publication Date: 2025.12.16 VISA INTERNATIONAL SERVICE ASSOCIATION

AI summary

A method is disclosed. The method includes receiving, from a resource provider computer, a token request message comprising a credential, after a user provides the credential to the resource provider computer. The method also includes transmitting, to the resource provider computer, a token response message comprising one or more supplemental data identifiers and one or more tokens associated with the one or more supplemental data identifiers. The one or more tokens are linked to the credential. Then, a user selects a supplemental data identifier. The method also comprises receiving, from the resource provider computer, an authorization request message comprising a token of the one or more tokens, the token linked to the selected supplemental data identifier, and a value, determining the credential using the token; and transmitting, to an authorizing entity computer, a modified authorization request message comprising the credential, the value, and the supplemental data identifier.