Granted Patent B2

US 12,314,920 · App. 16/141,330 · Granted May 27, 2025

Inventors: Milos Dunjic (Oakville, CA); Zhihong Luo (Vaughan, CA)

Assignee: The Toronto-Dominion Bank

G06Q20/202G06Q20/342G06Q20/3821G06Q20/40

Abstract

Claims (79)

1. A token management server comprising:

a memory storing a token database, a subledger database and a plurality of computer processing instructions; and

a data processor in communication with the memory, wherein the computer processing instructions cause the data processor to:

save in the token database a limited-use token in a token record in association with a ledger identifier and a subledger identifier;

receive from a point-of-sale station, via a payment network, a token authorization request including the limited-use token and an authorization value;

locate in the token database the token record including the limited-use token, extract the subledger identifier from the located token record, locate in the subledger database a subledger associated with the subledger identifier, and confirm that a balance value associated with the located subledger is at least equal to the authorization value; and

extract the ledger identifier from the located token record, and initiate a transfer from a pooling ledger associated with the ledger identifier of a transfer amount equal to the authorization value.

2. The token management server according to claim 1 , wherein the memory further stores a funding database, and the computer processing instructions cause the data processor to save in the token record by:

receiving from one communications device, via one communications channel, a token request including a reference identifier and a credential;

locating in the funding database a database record associated with the reference identifier, extracting a validation code from the located database record, and confirming that the credential matches the validation code;

generating the subledger identifier, initializing the balance value of the located subledger equal to the authorization limit, and saving the subledger identifier in the token record in association with the limited-use token; and

providing the one communications device with the limited-use token via another communications channel different from the one communications channel.

3. The token management server according to claim 2 , wherein the computer processing instructions cause the data processor to:

prior to receiving the token request, receive from another communications device a funding request including the validation code and an authorization limit;

initiate a transfer into the pooling ledger of a funding amount equal to the authorization limit; and

save the reference identifier in the located database record of the funding database in association with the validation code.

4. The token management server according to claim 3 , wherein the computer processing instructions cause the data processor to:

receive from the one communications device a user identifier;

confirm an identity from at least the user identifier; and

initiate the transfer of the funding amount by obtaining authorization for a funds transfer of the funding amount from a source ledger associated with the user identifier.

5. The token management server according to claim 2 , wherein the computer processing instructions cause the data processor to initiate the transfer from the pooling ledger by:

obtaining authorization for a funds transfer of the transfer amount from the pooling ledger; and

reducing the balance value of the located subledger by the authorization value.

6. The token management server according to claim 2 , wherein the token request includes a device identifier, and the computer processing instructions cause the data processor to provide the one communications device by:

locating in an address database a destination address associated with the device identifier; and

transmitting the limited-use token to the destination address.

7. A token processing network comprising:

a token service provider server;

a token management server;

a token database; and

a subledger database;

wherein the token service provider server is configured to:

save in the token database a limited-use token in a token record in association with a ledger identifier and a subledger identifier; and

wherein the token management server is configured to:

receive from a point-of-sale station, via a payment network, a token authorization request including the limited-use token and an authorization value;

locate in the token database the token record including the limited-use token, extract the subledger identifier from the located token record, locate in the subledger database a subledger associated with the subledger identifier, and confirm that a balance value associated with the located subledger is at least equal to the authorization value; and

extract the ledger identifier from the located token record, and initiate a transfer from a pooling ledger associated with the ledger identifier of a transfer amount equal to the authorization value.

8. The token processing network according to claim 7 , further comprising a funding database, wherein the token management server is further configured to:

receive from one communications device, via one communications channel, a token request including a reference identifier and a credential;

locate in the funding database a database record associated with the reference identifier, extract a validation code from the located database record, and confirm that the credential matches the validation code; and

generate the subledger identifier, initialize the balance value of the located subledger equal to the authorization limit, and save the subledger identifier in the token record in association with the limited-use token,

wherein the token service provider server is further configured to provide the one communications device with the limited-use token via another communications channel different from the one communications channel.

9. The token processing network according to claim 8 , wherein the token management server is further configured to:

prior to receiving the token request, receive from another communications device a funding request including the validation code and an authorization limit;

initiate a transfer into the pooling ledger of a funding amount equal to the authorization limit; and

save the reference identifier in the located database record of the funding database in association with the validation code.

10. The token processing network according to claim 9 , wherein the token management server is further configured to:

receive from the one communications device a user identifier; and

initiate the transfer of the funding amount by obtaining authorization for a funds transfer of the funding amount from a source ledger associated with the user identifier.

11. The token processing network according to claim 8 , wherein the token management server is configured to initiate the transfer from the pooling ledger by:

obtaining authorization for a funds transfer of the transfer amount from the pooling ledger; and

reducing the balance value of the located subledger by the authorization value.

12. The token processing network according to claim 8 , further comprising an address database, wherein the token request includes a device identifier, and the token service provider server is configured to provide the one communications device by:

locating in the address database a destination address associated with the device identifier; and

transmitting the limited-use token to the destination address.

13. A method of processing limited-use tokens, the method comprising a computer server:

saving a limited-use token in a token record in association with a ledger identifier and a subledger identifier;

receiving from a point-of-sale station, via a payment network, a token authorization request including the limited-use token and an authorization value;

locating the token record including the limited-use token, extracting the subledger identifier from the located token record, locating a subledger associated with the subledger identifier, and confirming that a balance value associated with the located subledger is at least equal to the authorization value; and

extracting the ledger identifier from the located token record, and initiating a transfer from a pooling ledger associated with the ledger identifier of a transfer amount equal to the authorization value.

14. The method according to claim 13 , wherein the saving in a token record comprises the computer server:

receiving from one communications device, via one communications channel, a token request including a reference identifier and a credential;

locating in a funding database a database record associated with the reference identifier, extracting a validation code from the located database record, and confirming that the credential matches the validation code;

generating the subledger identifier, initializing the balance value of the located subledger equal to the authorization limit, and saving the subledger identifier in the token record in association with the limited-use token; and

providing the one communications device with the limited-use token via another communications channel different from the one communications channel.

15. The method according to claim 14 , further comprising, prior to the receiving a token request, the computer server:

receiving from another communications device a funding request including the validation code and an authorization limit;

initiating a transfer into the pooling ledger of a funding amount equal to the authorization limit; and

saving the reference identifier in the located database record of the funding database in association with the validation code.

16. The method according to claim 15 , further comprising the computer server:

receiving from the one communications device a user identifier; and

confirming an identity from at least the user identifier,

wherein the initiating a transfer of a funding amount comprises the computer server obtaining authorization for a funds transfer of the funding amount from a source ledger associated with the user identifier.

17. The method according to claim 14 , wherein the initiating a transfer from a pooling ledger comprises the computer server:

obtaining authorization for a funds transfer of the transfer amount from the pooling ledger; and

reducing the balance value of the located subledger by the authorization value.

18. The method according to claim 14 , wherein the token request includes a device identifier, and the providing the one communications device comprises the computer server:

locating in an address database a destination address associated with the device identifier; and

transmitting the limited-use token to the destination address.

Assignments (1)

Continuity (1)

References Cited (32)