Virtualization and secure processing of data
Systems, methods, and non-transient machine-interpretable data representing executable instruction sets and/or other products for the processing of data for the secure creation, administration, manipulation, processing, and storage of electronic data useful in the processing of payment transactions and other secure data processes. In various aspects and embodiments the disclosure provides secure means for the authorization of sensitive and other data processes subject to controlled access. Such processes include, for example the creation, administration, authorization, virtualization, storage, and other manipulation or processing of electronic data representing characteristics of, instructions for, and information associated with consumer, business, and other payment accounts, and other forms of secure payment elements, such as payment tokens; and data useful in processing transactions using such accounts and elements. Information associated with particular payment means, such as accounts or payment tokens, can be stored, for example, in a data set, usually secure, sometimes referred to as a virtual or electronic wallet, or a secure payment token.
1. A mobile communication device comprising:
at least one wireless communication system;
at least one data processor; and
at least one persistent memory device, the at least one persistent memory device comprising stored data representing at least:
at least one secure pre-authorized payment token, the at least one secure pre-authorized payment token comprising data representing at least a pre-authorized transaction amount and a payment service provider by which a transaction in accordance with the amount was pre-authorized;
at least one authorization data set comprising data representing data known only to the payment service provider and the mobile communication device, said at least one authorization data set corresponding to a copy stored at a tokenization ermine associated with the payment service provider; and
one or more sets of machine-interpretable instructions;
the at least one data processor adapted, by execution of the one or more sets of stored, machine-interpretable instructions, to:
receive transaction information from a vendor point-of-sale (POS) device, the transaction information including a purchase amount;
in accordance with an instruction of a user of the mobile communication device, access the at least one authorization data set;
generate a transaction cryptogram comprising:
the purchase amount;
a vendor identifier; and
at least one secure identifier comprising data from the authorization data set;
send the transaction cryptogram to the vendor POS device;
send payment data associated with the transaction cryptogram to the tokenization engine associated with the payment service provider; and
receive confirmation that the transaction is complete.
2. The mobile communication device of claim 1 , wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the mobile communication device.
3. The mobile communication device of claim 2 , wherein the at least one identifier designated by a user of the mobile communication device is designated by the user using an input system of the mobile communication device.
4. The mobile communication device of claim 1 , wherein the at least one authorization data set comprises data representing an identifier associated with the mobile communication device.
5. The mobile communication device of claim 1 , wherein the at least one authorized transaction amount is associated with a currency.
6. The mobile communication device of claim 1 , wherein the at least one authorized transaction amount is associated with at least one of a loyalty account and a pre-paid value.
7. A network communication device comprising:
at least one network communication system;
at least one data processor; and
at least one persistent memory device, the at least one persistent memory device comprising stored data representing at least:
at least one secure pre-authorized payment token, the at least one secure pre-authorized payment token comprising data representing at least a stored value and a financial service provider by which a transaction associated with the stored value was pre-authorized;
at least one authorization data set comprising data representing data known only to the payment service provider and the mobile communication device, said at least one authorization data set corresponding to a copy stored at a tokenization ermine associated with the payment service provider; and
one or more sets of machine-interpretable instructions;
the at least one data processor adapted, by execution of the one or more sets of stored, machine-interpretable instructions, to:
receive transaction information from a vendor point-of-sale (POS) device, the transaction information including a purchase amount;
in accordance with an instruction of a user of the mobile communication device, access the at least one authorization data set;
generate a transaction cryptogram comprising:
the purchase amount;
a vendor identifier; and
at least one secure identifier comprising data from the authorization data set;
send the transaction cryptogram to the vendor POS device;
send payment data associated with the transaction cryptogram to the tokenization ermine associated with the payment service provider; and
receive confirmation that the transaction is complete.
8. The network communication device of claim 7 , wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device.
9. The network communication device of claim 8 , wherein the at least one identifier designated by a user of the network communication device is designated by the user using an input system of the network communication device.
10. The network communication device of claim 7 , wherein the at least one authorization data set comprises data representing an identifier associated with the network communication device.
11. The network communication device of claim 7 , wherein the stored value is associated with a currency.
12. The network communication device of claim 7 , wherein the stored value is associated with at least one of a loyalty account and a pre-paid value.
13. A method of processing data pertaining to a financial transaction, the method performed by a processor of a network communication device executing machine-interpretable instructions and comprising:
accessing, in at least one persistent memory of the network communication device, stored data representing at least:
at least one secure pre-authorized payment token, the at least one secure pre-authorized payment token comprising data representing at least a stored value and a financial service provider by which a transaction associated with the stored value was pre-authorized; and
at least one authorization data set comprising data representing data known only to the payment service provider and the mobile communication device, said at least one authorization data set corresponding to a copy stored at a tokenization engine associated with the payment service provider;
receiving transaction information from a vendor point-of-sale (POS) device, the transaction information including a purchase amount;
in accordance with one or more signals representing an instruction of a user of the mobile communication device generated by an input system of the network communication device, accessing the at least one authorization data set;
generating a transaction cryptogram comprising:
the purchase amount;
a vendor identifier; and
at least one secure identifier comprising data from the authorization data set;
sending the transaction cryptogram to the vendor POS device;
sending payment data associated with the transaction cryptogram to the tokenization engine associated with the payment service provider; and
receiving confirmation that the transaction is complete.
14. The method of claim 13 , wherein the routing of the transaction cryptogram to the transaction processing system by the network communication system occurs at a time when communication with a server associated with the financial service provider by which the transaction associated with the stored value was authorized is not available.
15. The method of claim 13 , wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device.
16. The method of claim 15 , wherein the at least one identifier designated by a user of the network communication device is designated by the user using an input system of the network communication device.
17. The method of claim 16 , wherein the at least one authorization data set comprises data representing at least one identifier designated by a user of the network communication device at the time the at least one payment token is configured for routing to the transaction processing system.
18. The method of claim 13 , wherein the at least one authorization data set comprises data representing an identifier associated with the network communication device.
19. The method of claim 13 , wherein the stored value is associated with a currency.
20. The method of claim 13 , wherein the stored value is associated with at least one of a loyalty account and a pre-paid value.