Limited-Use Token Mapping for Cross-Wallet Transaction Interoperability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing interaction processing systems face incompatibility issues across regions and require users to download and register with the same digital wallet application for transactions, consuming resources and time, and data security is compromised due to sensitive information exposure.
Innovation Solution
A computer-implemented method using a token service computer to map user identifiers to limited-use tokens, enabling seamless interactions by transforming authorization requests across different systems without requiring users to re-register, and ensuring secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users download and register with the same digital wallet application for transactions, then transaction compatibility is improved, but user convenience deteriorates and resource consumption increases
Solution Approach 1:
The patent introduces a token service as an intermediary component that mediates between different digital wallet applications and transaction processing systems. The token service receives token requests from various wallet applications, generates appropriate tokens, and returns them to enable transactions without requiring users to register with multiple applications. This intermediary layer resolves the contradiction by maintaining transaction compatibility while preserving user convenience.
2Adaptability or versatility
If users download and register with the same digital wallet application, then transaction compatibility is improved, but processing time increases
Solution Approach 1:
The token service performs preliminary actions by pre-generating and storing tokens in its database before they are needed for transactions. When a wallet application requests a token, the service can quickly retrieve or generate tokens without requiring real-time user registration or authentication with multiple applications. This preliminary preparation eliminates registration delays while maintaining compatibility across different transaction systems.
3Ease of operation
If user credentials and tokens are stored and transmitted, then transaction functionality is improved, but data security deteriorates
Solution Approach 1:
The patent extracts sensitive user credentials from the wallet applications and stores them securely in the token service's database. The wallet applications no longer need to store or transmit actual credentials; instead, they request tokens from the token service, which provides temporary authentication tokens. This extraction of sensitive data from the applications eliminates the security risk of credentials being intercepted during transmission or storage in client devices, while maintaining full transaction functionality.
4Adaptability or versatility
If multiple interaction applications are used across regions, then regional adaptability is improved, but system complexity increases
Solution Approach 1:
The token service is designed as a universal system that can serve multiple regional transaction systems and wallet applications through a single interface. It supports different token formats, authentication methods, and transaction protocols, enabling one token service to replace multiple region-specific authentication systems. This multi-functionality reduces system complexity by consolidating what would otherwise require separate applications and infrastructure for each region.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
One embodiment is related to a method. The method includes receiving from a storage application server computer, a token request message comprising a user identifier associated with a storage application on a user device, and determining a token. The token is a limited use token. The method includes mapping the token to the user identifier, transmitting, a token response message comprising the token to the storage application server computer. The method includes receiving from a processing network computer, a de-tokenization request message comprising the token, after the processing network computer receives an authorization request message comprising the token from a resource provider computer via a transport computer. The method also includes determining the user identifier using the token, and transmitting the user identifier to the processing network computer.