Token Provisioning via Detokenization for Faster Cryptogram Requests

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing process of generating and obtaining tokens for user interactions is time-consuming and requires excessive computing resources, necessitating manual input of credentials and waiting for token provisioning.

Innovation Solution

A system and method for automated token provisioning that allows users to initiate interactions using a linked credential, which is substituted by a token, enabling seamless communication between user devices, network processing computers, and token service computers to manage and provide cryptograms for secure transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If manual credential input is used for token generation, then user device can obtain tokens, but the process becomes time-consuming and requires excessive computing resources

Engineering Contradiction:
Improvetoken provisioning speedVSAvoiduser waiting time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by having the server computer automatically generate detokenization requests and retrieve second credentials from the token service computer before the user device needs to interact. This pre-provisioning of credentials eliminates the need for manual input during the interaction moment, thereby reducing user waiting time while maintaining token provisioning capability.

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If manual credential input is required, then security can be maintained, but user operation becomes complex and time-consuming

Engineering Contradiction:
Improveuser input requirementVSAvoidcredential provisioning time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The server computer performs self-service by automatically generating detokenization requests, retrieving second credentials from the token service computer, and providing them to the user device without requiring manual user input. This automation eliminates the need for users to manually enter credentials, significantly improving ease of operation while reducing the time required for credential provisioning.

Inventive Principle:
Principle #25Self-service

3Productivity

If automated token provisioning is implemented, then user experience improves, but additional communication and computing resources are consumed

Engineering Contradiction:
Improveinteraction processing efficiencyVSAvoidcomputing resource consumption
Core Design Contradiction:
ProductivityVSUse of energy by moving object

Solution Approach 1:

The server computer acts as an intermediary between the user device and the token service computer. It automatically generates detokenization requests, retrieves second credentials, and provides them to the user device during interaction. This intermediary approach streamlines the automated token provisioning process, improving interaction processing efficiency while managing computing resource consumption through centralized server-side operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP4210274B1Efficient token provisioning system and method
Publication Date: 2026.05.13 VISA INTERNATIONAL SERVICE ASSOCIATION
  • EP4210274B1 patent drawingFigure 1
  • EP4210274B1 patent drawingFigure 2
  • EP4210274B1 patent drawingFigure 3

AI summary

A method includes a server computer receiving a cryptogram request message comprising a token associated with a first credential during an interaction between a user of a user device and a resource provider of a resource provider application on the user device. The server computer generates a detokenization request message comprising the token. The server computer then provides the detokenization request message to a token service computer. The server computer receives a detokenization response message comprising a second credential from the token service computer. The server computer obtains a cryptogram for the interaction. The server computer generates a cryptogram response message comprising the second credential and the cryptogram, and then provides it in response to the cryptogram request message.