Unique token authentication cryptogram

1. A method of processing a transaction initiated by a communication device provisioned with a token, the method comprising:

receiving, by a service provider computer, from an application operating on the communication device, a token request message for a token authentication cryptogram;

generating, by the service provider computer, the token authentication cryptogram derived from user exclusive data, wherein the token authentication cryptogram is generated by encrypting at least the user exclusive data utilizing a triple data encryption algorithm; and

sending, by the service provider computer to the application, the token authentication cryptogram, wherein the token authentication cryptogram can be used to validate the transaction, and the user exclusive data subsequently is extracted from the token authentication cryptogram during validation by a processing computer which then uses the user exclusive data for additional analysis.

2. The method of claim 1 , wherein the user exclusive data comprises at least one of: a resource provider identifier, user preference information, or a user identifier.

3. The method of claim 1 , wherein the token authentication cryptogram is sent to the application utilizing a token response message.

4. The method of claim 1 , wherein the application is hosted by a resource provider computer.

5. The method of claim 1 , wherein receipt of the token authentication cryptogram causes the application to transmit the token authentication cryptogram in an authorization request message to a transaction processing computer.

6. The method of claim 1 , wherein content of the user exclusive data is specified by the service provider computer.

7. A method of processing a transaction initiated by a communication device, the method comprising:

sending, by a service provider computer, to a token provider computer, a token request message for a token authentication cryptogram, wherein the token request message comprises user exclusive data;

receiving, by the service provider computer, from the token provider computer, a token and the token authentication cryptogram, the token authentication cryptogram derived from the user exclusive data, wherein the token authentication cryptogram is generated by encrypting at least the user exclusive data utilizing a triple data encryption algorithm; and

sending, by the service provider computer to the communication device, the token and the token authentication cryptogram, wherein the token authentication cryptogram can be used to validate the transaction, and the user exclusive data is subsequently extracted from the token authentication cryptogram during validation by a processing computer which then uses the user exclusive data for additional analysis.

8. The method of claim 7 , wherein the user exclusive data comprises at least one of: a resource provider identifier, user preference information, or a user identifier.

9. The method of claim 7 , wherein the token and the token authentication cryptogram is sent to the communication device utilizing a token response message.

10. The method of claim 7 , wherein the token and the token authentication cryptogram is sent to an application operating on the communication device.

11. The method of claim 10 , wherein the application is hosted by a resource provider computer.

12. The method of claim 11 , wherein receipt of the token authentication cryptogram causes the application to transmit the token authentication cryptogram in an authorization request message to a transaction processing computer.

13. The method of claim 7 , wherein content of the user exclusive data is specified by the service provider computer.

14. A service provider computer comprising,

a processor, and

a computer readable medium coupled to the processor, the computer readable medium comprising code for causing the processor to perform operations comprising:

sending, to a server computer, a request for a token authentication cryptogram, wherein the request comprises user exclusive data;

receiving, from the server computer, a token and the token authentication cryptogram derived from the user exclusive data, wherein the token authentication cryptogram is generated by encrypting at least the user exclusive data utilizing a triple data encryption algorithm; and

sending, to an application operating on a user device, the token and the token authentication cryptogram with transaction data, wherein the token authentication cryptogram can be used to validate the transaction data, and the user exclusive data is subsequently extracted from the token authentication cryptogram during validation by a processing computer when then uses the user exclusive data for additional analysis.

15. The service provider computer of claim 14 , wherein the user exclusive data comprises at least one of: a resource provider identifier, user preference information, or a user identifier.

16. The service provider computer of claim 14 , wherein the token authentication cryptogram is requested utilizing a token request message.

17. The service provider computer of claim 14 , wherein the token authentication cryptogram is sent to the application in a token response message.

18. The method of claim 1 , wherein the token authentication cryptogram further encrypts the token and a transaction type indicator.

19. The method of claim 1 , further comprising:

receiving, by the processing computer, an authorization request message comprising the token and the token authentication cryptogram;

extracting, by the processing computer, the user exclusive data; and

performing, by the processing computer, the additional analysis on the user exclusive data.

20. The method of claim 1 , wherein the additional analysis comprises performing a fraud analysis on the user exclusive data.