Virtual Authentication Token Validation for Locked Card Transactions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems decline transactions due to inactive or locked funding PANs, limiting the use of virtual tokens when the corresponding physical card is unavailable.

Innovation Solution

Implementing a computing platform that generates a second authentication token based on predetermined conditions, allowing further authentication measures even if the funding PAN is inactive or locked, thereby enabling transaction processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a hold or lock is placed on a first instrument (physical card), then security is improved, but transaction processing capability deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidtransaction processing capability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system creates a virtual token as a copy representation of the physical card (first instrument). This virtual token can be used for transactions without requiring the physical card to be active or unlocked. The virtual token maintains security associations with the physical card while enabling independent transaction processing, thus resolving the contradiction between security through locking and transaction capability.

Inventive Principle:
Principle #26Copying

2Reliability

If transactions are declined due to inactive or locked physical cards, then security is maintained, but user convenience deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The virtual token acts as an intermediary between the user and the physical card system. Instead of directly requiring the physical card to be active for transactions, the virtual token serves as a mediator that can be generated and used independently. This intermediary enables transactions to proceed even when the physical card is inactive or locked, maintaining security while significantly improving user convenience.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Device complexity

If a singular instrument (physical card) is required for authentication, then authentication simplicity is maintained, but system flexibility deteriorates

Engineering Contradiction:
Improveauthentication simplicityVSAvoidsystem flexibility
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The authentication system is segmented into two independent components: the physical card (first instrument) and the virtual token. The physical card remains for initial authentication and security, while the virtual token handles transaction processing. This segmentation allows the system to maintain authentication simplicity through the physical card while achieving flexibility through the virtual token's independent operation.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12598176B2Token validation for event processing approval
Publication Date: 2026.04.07 BANK OF AMERICA CORP
  • US12598176B2 patent drawing
  • US12598176B2 patent drawing
  • US12598176B2 patent drawing

AI summary

Aspects of the disclosure relate to virtual tokens. A computing platform may generate, based on approval of a first authentication token, a second authentication token corresponding to an individual. The computing platform may receive an event processing request corresponding to the individual and the second authentication token. The computing platform may analyze the second authentication token to identify whether or not the second authentication token satisfies one or more predetermined conditions. Based on identifying that at least one of the one or more predetermined conditions is satisfied, the computing platform may execute further authentication measures for the event processing request. Based on identifying that the further authentication measures are satisfied, the computing platform may process the event processing request.