System and method for payment card industry enterprise account number elimination
View Patent ↗A system and method replaces credit card numbers in systems that are customer facing with token Ids to thereby reduce exposure to credit card number theft.
1. A system, comprising:
a vault infrastructure in communication with client-facing applications, the vault infrastructure being configured to receive a credit card number of a credit card;
a credit card authorization system in communication with the client-facing applications;
wherein the vault infrastructure is configured to substitute, in real-time, a token id for the credit card number upon receipt of the credit card number from a customer and prior to communication with the credit card authorization system; and
a mini-vault in communication with a vault of the vault infrastructure, the mini-vault being configured to locally cache token ids and credit card numbers to help distribute calls to the vault over the course of a particular time period.
2. The system according to claim 1 , wherein the token id includes a number of digits equal to a number of digits provided to the credit card.
3. The system according to claim 1 , wherein the token id includes a bin that is different than a bin of the credit card.
4. The system according to claim 1 , wherein the particular time period is a day.
5. The system according to claim 1 , wherein the mini-vault resides on a customer-facing system server.
6. The system according to claim 1 , wherein the mini-vault communicates with the vault via batch transfers.
7. The system according to claim 1 , wherein the cached token ids and the credit card numbers are incapable of being correlated to one another outside of the system.
8. The system according to claim 1 , wherein the cached credit card numbers are encrypted.
9. A method, comprising:
receiving, by a vault infrastructure in communication with client-facing applications, a credit card number of a credit card;
communicating between a credit card authorization system and the client-facing applications;
substituting, by the vault infrastructure in real-time, a token id for the credit card number upon receipt of the credit card number from a customer and prior to communication with the credit card authorization system; and
locally caching, by a mini-vault in communication with a vault of the vault infrastructure, token ids and credit card numbers to help distribute calls to the vault over the course of a particular time period.
10. The method according to claim 9 , wherein the token id includes a number of digits equal to a number of digits provided to the credit card.
11. The method according to claim 10 , wherein the token id includes a bin that is different than a bin of the credit card.
12. The method according to claim 9 , wherein the particular time period is a day.
13. The method according to claim 9 , wherein the mini-vault resides on a customer-facing system server.
14. The method according to claim 9 , wherein the mini-vault communicates with the vault via batch transfers.
15. The method according to claim 9 , wherein the cached token ids and the credit card numbers are incapable of being correlated to one another outside of the system.
16. The method according to claim 9 , wherein the cached credit card numbers are encrypted.