Systems and methods for multi-merchant tokenization
Systems and methods for multi-merchant tokenization may include receiving a transaction from a point of sale terminal of a merchant, validating the merchant ID against merchant logs, and generating a token for the transaction. The token includes a primary account number, expiration, and a group ID. Additionally, the system provides the primary account number to a payment system and receives a response back. The response is then output back to the merchant along with the token. In subsequent transactions, the system may receive the token from a one point of sale terminal of the merchant. The system validates the merchant ID against merchant logs and ensures the merchant is configured for tokenization. The token is decrypted and the group ID is compared to the merchant ID in the merchant logs. When they match, the primary account number is provided to the payment system for approval.
1. A method for multi-merchant tokenization, the method comprising:
receiving, by a multi-merchant tokenization system, an electronic request from a first point of sale (POS) terminal of a merchant, wherein the electronic request includes a transaction data, a merchant ID, an encrypted primary account number, and a tokenization indicator;
determining, by the multi-merchant tokenization system, that the tokenization indicator is present in the electronic request;
validating, by the multi-merchant tokenization system, the merchant ID against merchant logs comprising merchant Ds of merchants configured for tokenization;
correlating, by the multi-merchant tokenization system, the merchant ID with one or more group IDs among a plurality of group IDs;
decrypting, by the multi-merchant tokenization system, the encrypted primary account number in the electronic request;
generating, by the multi-merchant tokenization system, an encrypted token comprising an expiration date, the one or more group IDs, and the decrypted primary account number; and
outputting, by the multi-merchant tokenization system, the encrypted token to the first POS terminal.
2. The method of claim 1 , wherein generating, by the multi-merchant tokenization system, the encrypted token comprises:
tokenizing the expiration date, the one or more group IDs, and the decrypted primary account number; and
encrypting the tokenized expiration date, one or more group Ds, and decrypted primary account number.
3. The method of claim 1 , further comprising:
storing, by the multi-merchant tokenization system, a decryption key corresponding to the encrypted token.
4. The method of claim 1 , wherein the electronic request further includes a frequency element, and
when the frequency element is a recurring frequency element, the multi-merchant tokenization system sets the encrypted token expiration to a period allowing for multiple repeated transactions.
5. The method of claim 1 , wherein each of the one or more group IDs enables only a selected group of merchants to redeem the encrypted token.
6. The method of claim 1 , further comprising:
querying, by the multi-merchant tokenization system, a database for merchant configuration.
7. The method of claim 6 , further comprising:
declining, by the multi-merchant tokenization system, the electronic request if the merchant configuration does not match the electronic request.
8. The method of claim 1 , wherein the encrypted token is inserted into a token field of an electronic transaction authorization response.
9. The method of claim 1 , further comprising:
receiving, by the multi-merchant tokenization system, the encrypted token from a second POS terminal of the merchant;
validating, by the multi-merchant tokenization system, the merchant ID against the merchant logs;
retrieving, by the multi-merchant tokenization system, the expiration date, the one or more group IDs, and the primary account number from the encrypted token by decrypting the encrypted token;
comparing, by the multi-merchant tokenization system, the merchant ID to the retrieved one or more group IDs;
providing, by the multi-merchant tokenization system, the retrieved primary account number to a payment system;
receiving, by the multi-merchant tokenization system, an authorization response from the payment system; and
outputting, by the multi-merchant tokenization system, the authorization response to the second POS terminal.
10. A multi-merchant tokenization system comprising:
one or more processors;
a storage device comprising instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising:
receiving, by the multi-merchant tokenization system, an electronic request from a first point of sale (POS) terminal of a merchant, wherein the electronic request includes a transaction data, a merchant ID, an encrypted primary account number, and a tokenization indicator;
determining, by the multi-merchant tokenization system, that the tokenization indicator is present in the electronic request;
validating, by the multi-merchant tokenization system, the merchant ID against merchant logs comprising merchant IDs of merchants configured for tokenization;
correlating, by the multi-merchant tokenization system, the merchant ID with one or more group IDs among a plurality of group IDs;
decrypting, by the multi-merchant tokenization system, the encrypted primary account number in the electronic request;
generating, by the multi-merchant tokenization system, an encrypted token comprising an expiration date, the one or more group IDs, and the decrypted primary account number; and
outputting, by the multi-merchant tokenization system, the encrypted token to the first POS terminal.
11. The multi-merchant tokenization system of claim 10 , wherein generating the encrypted token comprises:
tokenizing the expiration date, the one or more group Ds, and the decrypted primary account number; and
encrypting the tokenized expiration date, one or more group Ds, and decrypted primary account number.
12. The multi-merchant tokenization system of claim 10 , wherein the method further comprises:
storing, by the multi-merchant tokenization system, a decryption key corresponding to the encrypted token.
13. The multi-merchant tokenization system of claim 10 , wherein the electronic request further includes a frequency element and the method further comprises:
when the frequency element is a recurring frequency element, setting, by the multi-merchant tokenization system, the encrypted token expiration to a period allowing for multiple repeated transactions.
14. The multi-merchant tokenization system of claim 10 , wherein each of the one or more group Ds enables only a selected group of merchants to redeem the encrypted token.
15. The multi-merchant tokenization system of claim 10 , wherein the method further comprises:
querying, by the multi-merchant tokenization system, a database for merchant configuration.
16. The multi-merchant tokenization system of claim 15 , wherein the method further comprises:
declining, by the multi-merchant tokenization system, the electronic request if the merchant configuration does not match the electronic request.
17. The multi-merchant tokenization system of claim 10 , wherein the encrypted token is inserted into a token field of an electronic transaction authorization response.
18. The multi-merchant tokenization system of claim 10 , wherein the method further comprises:
receiving, by the multi-merchant tokenization system, the encrypted token from a second POS terminal of the merchant;
validating, by the multi-merchant tokenization system, the merchant ID against the merchant logs;
retrieving, by the multi-merchant tokenization system, the expiration date, the one or more group IDs, and the primary account number from the encrypted token by decrypting the encrypted token;
comparing, by the multi-merchant tokenization system, the merchant ID to the retrieved one or more group IDs;
providing, by the multi-merchant tokenization system the retrieved primary account number to a payment system;
receiving, by the multi-merchant tokenization system, an authorization response from the payment system; and
outputting, by the multi-merchant tokenization system, the authorization response to the second POS terminal.
19. A non-transitory computer readable medium for multi-merchant tokenization, the non-transitory computer readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform a method comprising:
receiving, by a multi-merchant tokenization system, an electronic request from a first point of sale (POS) terminal of a merchant, wherein the electronic request includes a transaction data, a merchant ID, an encrypted primary account number, and a tokenization indicator;
determining, by the multi-merchant tokenization system, that the tokenization indicator is present in the electronic request;
validating, by the multi-merchant tokenization system, the merchant ID against merchant logs comprising merchant IDs of merchants configured for tokenization;
correlating, by the multi-merchant tokenization system, the merchant ID with one or more group IDs among a plurality of group IDs;
decrypting, by the multi-merchant tokenization system, the encrypted primary account number in the electronic request;
generating by the mufti-merchant tokenization system, an encrypted token comprising an expiration date, the one or more group IDs, and the decrypted primary account number; and
outputting, by the multi-merchant tokenization system, the encrypted token to the first POS terminal.
20. The non-transitory computer readable medium of claim 19 , wherein the method further comprises:
storing, by the multi-merchant tokenization system, a decryption key corresponding to the encrypted token.