Proxy device for representing multiple credentials
Payment devices and the systems and methods for securely managing financial transactions using the payment devices are provided. In one implementation, a portable proxy device comprises a memory configured to store a plurality of credentials. Each of the plurality of credentials pertains to one of a financial credential, an identification credential, or contractual credential. The portable proxy device also includes at least one interface, wherein each of the at least one interface is configured to communicate one of the plurality of credentials to an external device to complete one of a financial function, identification function, or contractual function.
1. A system for processing financial transaction messages, comprising:
a user device storing a proxy credential of a user;
a point of sale device configured to receive, as part of a financial transaction, the proxy credential from the user device, and to send an encrypted POS device transaction message, including the proxy credential, to a merchant acquirer;
a merchant acquirer configured receive, decrypt, and re-encrypt the encrypted POS device transaction message to create an encrypted original transaction message including the proxy credential and to send the encrypted original transaction message to a payment switch;
the payment switch configured to receive the encrypted original transaction message from the merchant acquirer and to send the encrypted original transaction message to a proxy issuer processor of the issuer of the proxy credential;
the proxy issuer processor configured to receive the encrypted original transaction message from the payment switch send the proxy credential to an account correlating device,
the account correlating device configured to receive the encrypted original transaction message from the proxy issuer processor, to decrypt the encrypted original transaction message and to create an edited original transaction message that includes tokenized information including the user's actual valid credential corresponding to the proxy credential, and to re-encrypt the edited original transaction message; and
an issuer processor of the issuer of the user's actual valid credential configured to receive the re-encrypted edited transaction message from the account correlating device and, based at least in part of the contents of the re-encrypted edited transaction message, to send a response message indicating whether the financial transaction should be accepted or denied;
wherein the account correlating device is further configured to create an edited response message created from the response message by reversing the mapping from the proxy credential to the user's actual valid credential, and to communicate the edited response message to the merchant acquirer.
2. The system of claim 1 , wherein the account correlating device is configured to create the edited original transaction message using a customizable rules engine.
3. The system of claim 1 , further comprising:
a transaction vault, configured to:
decrypt and tokenize the encrypted original transaction message to create a tokenized message; and
transmit the tokenized message.
4. The system of claim 1 , further comprising: a transaction guardian configured to receive, requested transaction edits and a token of a selected valid credential.
5. The system of claim 4 , wherein the transaction guardian is further configured to validate an original transaction of the encrypted original transaction message and the requested transaction edits.
6. The system of claim 1 , wherein a user uses the POS device to conduct a transaction with a proxy card.
7. The system of claim 1 , wherein a user uses the POS device to conduct a transaction with a mobile proxy device.
8. A method of processing financial transaction messages, comprising:
receiving, by a payment switch, an encrypted original transaction message from a merchant acquirer, the encrypted original transaction message including a proxy credential of a user read from a user device by a merchant terminal as part of a financial transaction;
sending by the payment switch, the encrypted original transaction message to an issuer processor of the issuer of the proxy credential;
receiving by an account correlating device the encrypted original transaction message from the issuer processor of the issuer of the proxy credential;
decrypting by the account correlating device, the encrypted original transaction message and creating an edited transaction message that includes the user's actual valid credentials-corresponding to the proxy credentials;
re-encrypting, by the account correlating device the edited transaction message;
sending the re-encrypted edited transaction message to the payment switch; and
sending, by the account correlating device, the re-encrypted edited transaction message to an issuer processor of an issuer of the user's actual valid credential;
receiving, by the account correlating device from the issuer processor of the issuer of the user's actual valid credential, a response message, based at least in part on the contents of the edited transaction message, indicating the financial transaction should be confirmed or denied; and
producing an edited response message by reversing a mapping of the proxy credential to user's actual valid credential in the response message before sending the edited response message back to the merchant acquirer.
9. The method of claim 8 , further comprising:
receiving, by a point-of-sale (POS) device, a user's proxy credential from a user proxy device;
sending, by the POS device an encrypted POS device transaction message including the user's proxy credential to the merchant acquirer.
10. The method of claim 9 , further comprising:
receiving, decrypting, and re-encrypting, by the merchant acquirer, the encrypted POS device transaction message to create the encrypted original transaction message; and
transmitting, by the merchant acquirer, the encrypted original transaction message to the payment switch.
11. The method of claim 8 , further comprising:
forwarding, by the issuer processor of the issuer of the proxy credential, the encrypted original transaction message to a transaction vault;
decrypting and tokenizing, by the transaction vault, the encrypted original transaction message to create a tokenized message including the user's actual credential corresponding to the proxy credential; and
transmitting, by the transaction vault, the tokenized message.
12. The method of claim 8 , further comprising:
receiving, at a transaction guardian, requested transaction edits and a token of a selected valid credential from the issuer processor of the issuer of the proxy credential.
13. The method of claim 12 , further comprising:
validating, by the transaction guardian, an original transaction of the encrypted original transaction message and the requested transaction edits.
14. The system of claim 1 , wherein the account correlating device is configured to map the proxy credential to the user's actual valid credential based on configurable rules selected by the user or an issuing institution of the proxy credential.
15. The system of claim 14 , wherein the configurable rules are dependent on a calculated location of the user.
16. The system of claim 14 , wherein the configurable rules are dependent on the presence of a user's mobile device.
17. The system of claim 14 , wherein the configurable rules are dependent on a value of the transaction.