Private label account number protection
A system and method for private label account number protection is described. A method receives, at a retail computing system, a private label credit account number being proffered to make a private label credit purchase. A request for authorization for the purchase is provided from the retail computing system to a private label credit account provider over a dedicated connection between the retail computing system and the private label credit account provider. The retail computing system receives an authorization token from the credit account provider and stores the authorization token in place of the private label credit account number.
1 . A method for protecting a consumer's private label card number at a retailer database, said method comprising:
receiving, at a retail computing system, a private label credit account number;
generating, at said retail computing system, a purchase request, said purchase request comprising:
requesting authorization for said private label credit account number; and
indicating how said private label credit account number was presented to said retail computing system, said indicating comprising a channel and a device;
providing, from said retail computing system, said purchase request to a private label credit account provider computing system;
generating, at said private label credit account provider computing system, an authorization token, said authorization token not including said private label credit account number, said authorization token comprising a token limited scope, said token limited scope:
identifying said channel and said device, and
restricting said token usage to only said channel and said device such that an attempt to utilize said authorization token in a manner inconsistent with said channel and said device will be declined;
providing, from said private label credit account provider computing system, said authorization token to said retail computing system;
receiving, at said retail computing system, said authorization token from said private label credit account provider computing system;
replacing, at said retail computing system, said private label credit account number with said authorization token;
storing, at said retail computing system, said authorization token;
not storing, at said retail computing system, said private label credit account number;
linking, at said retail computing system, a detail of a goods purchased with said stored authorization token; and
performing, at said retail computing system, a return utilizing said stored authorization token stored at said retail computing system in conjunction with said detail of said goods purchased linked with said stored authorization token without requiring said private label credit account number.
2 . The method of claim 1 , further comprising:
linking, at a database of said private label credit account provider computing system, said authorization token with said private label credit account number.
3 . The method of claim 2 , further comprising:
tallying, at said database of said private label credit account provider computing system, a plurality of metrics for every authorization token linked with said private label credit account number.
4 . The method of claim 3 , further comprising:
calculating a rewards information for said private label credit account number utilizing a result of said tallying of one or more of said plurality of metrics for every authorization token linked with said private label credit account number.
5 . The method of claim 1 , further comprising:
receiving said private label credit account number at said retail computing system during a physical in-store interaction;
said purchase request comprising:
an indication that said private label credit account number was received at said retail computing system during said physical in-store interaction.
6 . The method of claim 5 , wherein said physical in-store interaction is selected from a group consisting of: a physical card swipe, a physical card chip read, a scan of a display screen of a customer's mobile device, and a wireless transmission of said private label credit account number from said customer's mobile device.
7 . The method of claim 1 , further comprising:
receiving said private label credit account number at said retail computing system during an e-commerce interaction;
said purchase request comprising:
an indication that said private label credit account number was received at said retail computing system during said e-commerce interaction.
8 . A system comprising:
a retail computing system, said retail computing system comprising:
a retail database; and
a retail processor, said retail processor configured to:
receive a private label credit account number;
generate a purchase request, said purchase request comprising:
a request for authorization for said private label credit account number; and
an indicator identifying how said private label credit account number was presented to said retail computing system, said indicator comprising a channel and a device; and
provide said purchase request to a private label credit account provider computing system;
said private label credit account provider computing system, said retail computing system comprising:
a private label credit account provider processor, said private label credit account provider processor configured to:
generate an authorization token linked to said private label credit account number, said authorization token not including said private label credit account number, said authorization token comprising a token limited scope, said token limited scope:
identifying said channel and said device, and
restricting said token usage to only said channel and said device such that an attempt to utilize said authorization token in a manner inconsistent with said channel and said device will be declined; and
provide said authorization token to said retail computing system;
said retail processor of said retail computing system configured to:
receive said authorization token from said private label credit account provider computing system;
replace, at said retail database, said private label credit account number with said authorization token;
store, at said retail database, said authorization token;
not store, at said retail database, said private label credit account number;
link, at said retail database, a detail of a goods purchased with said stored authorization token; and
utilize said stored authorization token stored at said retail database to perform a customer refund system in conjunction with said detail of said goods purchased linked with said stored authorization token without requiring said private label credit account number.
9 . The system of claim 8 , wherein said private label credit account provider computing system is further configured to:
tally a plurality of metrics for every authorization token linked with said private label credit account number; and
calculate a rewards information for said private label credit account number from a result of said tally.
10 . The system of claim 8 , wherein said channel is selected from a group consisting of: a physical in-store interaction at a point of sale (POS), and an e-commerce interaction.
11 . The system of claim 10 , wherein said physical in-store interaction at said POS is selected from a group consisting of: a physical card swipe, a physical card chip read, a scan of a display screen of a customer's mobile device, and a wireless transmission of said private label credit account number from said customer's mobile device.