Managing customer uniqueness in tokenised systems
According to a first aspect there is provided a method of identifying the funding source of an electronic transaction, said method comprising a payment terminal: receiving a transaction request comprising one or more credentials from a payment device; and determining whether said credentials comprise a funding source proxy (FSP) and, if not, generating the FSP from one or more of said credentials according to a predetermined algorithm stored on said payment terminal; wherein the funding source proxy is derived from a funding primary account number (FPAN) of a funding source of said payment device. Other aspects provide a method of blocking an electronic transaction, a method of authorising an electronic transaction, a method performed by a payment terminal and a method of provisioning a device with payment capability.
1. A method of improving security of an electronic transaction comprising a payment terminal:
receiving a primary device transaction request comprising a funding primary account number (FPAN) of a funding source;
responsive thereto, generating a funding source proxy (FSP) from said FPAN according to a predetermined algorithm stored on the payment terminal;
responsive thereto, determining that said generated FSP is not present on a deny list stored at the payment terminal;
responsive thereto, authorising said primary device transaction request;
responsive thereto, issuing a request comprising the FPAN to a payment network for settlement of said transaction;
subsequent to issuing said request comprising the FPAN to said payment network, receiving a primary device transaction failed message from the payment network; and
responsive thereto, adding the FSP to said deny list;
the payment terminal subsequently:
receiving a secondary payment device transaction request comprising a device primary account number (DPAN) and the FSP;
determining that the received FSP is present on the deny list; and
declining said secondary payment device transaction request;
wherein the FSP corresponds to the funding source such that an identical FSP is generated from the primary device transaction request and received with the secondary payment device transaction request.
2. The method of claim 1 , wherein said predetermined algorithm generates the FSP such that:
said FPAN cannot be determined from the FSP; and/or
each possible value of said FPAN uniquely maps to a different FSP.
3. The method of claim 2 , wherein the predetermined algorithm comprises a cryptographic hash function.
4. The method of claim 1 , wherein said predetermined algorithm uses an expiry date and/or a serial number.
5. A payment terminal for improving security of an electronic transaction comprising:
a receiver configured to receive a primary device transaction request comprising a funding primary account number (FPAN) of a funding source;
a memory; and
a processor, operatively coupled to said receiver and said memory, configured to, responsive to said reception:
generate a funding source proxy (FSP) from said FPAN according to a predetermined algorithm stored in the memory;
responsive thereto, determine that said generated FSP is not present on a deny list stored in the memory;
responsive thereto, authorise said primary device transaction request;
said terminal further comprising a transmitter configured to, responsive thereto, issue a request comprising the FPAN to a payment network for settlement of said transaction;
the receiver being further configured to subsequently receive a primary device transaction failed message from the payment network;
the processor being further configured to, responsive thereto, add the FSP to said deny list;
the receiver being further configured to subsequently receive a secondary payment device transaction request comprising a device primary account number (DPAN) and the FSP; and
the processor being further configured to:
determine that the received FSP is present on the deny list; and
decline said secondary payment device transaction request;
wherein the FSP corresponds to the funding source such that an identical FSP is generated from the primary device transaction request and received with the secondary payment device transaction request.