Granted Patent B2

US 12,223,502 · App. 16/443,169 · Granted Feb 11, 2025

Inventors: Vijay Royyuru (Norristown, PA); Benjamin Rewis, Sr. (Oakland, CA); Lanny Byers (Ridgfield, CT); Renee Goodheart (Midland Park, NJ); Cindy White (Hockessin, DE); Kelly Urban (Omaha, NE); Skyler Fox (Park Ridge, NJ)

Assignee: FIRST DATA CORPORATION

G06Q20/401G06Q2220/00H04L2209/56

Abstract

Claims (78)

1. One or more non-transitory computer-readable media comprising computer-readable instructions stored thereon that when executed by one or more processors causes the one or more processors to perform a process for provisioning instant digital access to a user payment source using a mobile device pay wallet comprising:

receiving, at a gateway encryption service, from an issuer mobile application server, user information for a user and account information for provisioning the user payment source;

transmitting, by the gateway encryption service, the user information and the account information to a gateway lookup service to request primary account number data for the user payment source from an issuing host platform;

receiving, at the gateway lookup service, from the issuing host platform, the primary account number data comprising an account number for the user payment source;

encrypting, by the gateway encryption service, the primary account number data to generate encrypted provision data by:

identifying a first set of encryption requirements associated with a token service provider, wherein the first set of encryption requirements include a type of encryption algorithm and a minimum length of an encryption key;

identifying, by the gateway encryption service, an encryption key from a plurality of encryption keys stored in a database using the primary account number data, the encryption key set with token service provider information;

identifying, by the gateway encryption service, a second set of encryption requirements for the mobile device pay wallet using wallet data from the mobile device pay wallet;

ensuring that the encryption key complies with the combination of the first set of encryption requirements and the second set of encryption requirements; and

applying the encryption key set by the token service provider to the primary account number data based on an encryption algorithm and a minimum length of the encryption key identified from the first set of encryption requirements;

transmitting, by the gateway encryption service, the encrypted provision data to the issuer mobile application server.

2. The one or more non-transitory computer-readable media of claim 1 ,

wherein identifying the encryption key comprises:

identifying an issuer using the primary account number data, wherein provision requests for issuers that use the token service provider have data that is encrypted with the encryption key; and

searching the database for the encryption key using the issuer.

3. The one or more non-transitory computer-readable media of claim 1 , wherein encrypting the primary account number data further comprises:

identifying a validation key from a plurality of validation keys using the primary account number data; and

signing, using the validation key, the encrypted provision data.

4. The one or more non-transitory computer-readable media of claim 1 , wherein the user payment source is a credit card or debit card.

5. The one or more non-transitory computer-readable media of claim 1 , wherein the user information for the user and the account information for the user payment source comprise one or more of a name of the user, a digital wallet data of the user, or an issuer nonce.

6. The one or more non-transitory computer-readable media of claim 1 , wherein the primary account number data comprises one or more of a sixteen-digit primary account number of the user payment source, an address of the user, or a nickname of the user payment source.

7. The one or more non-transitory computer-readable media of claim 1 , wherein the one or more processors further execute computer-readable instructions for:

receiving, at an issuer mobile application using a software development kit, a list of accounts for the user, wherein the user payment source is selected from the list of accounts.

8. The one or more non-transitory computer-readable media of claim 1 , wherein the one or more processors further execute computer-readable instructions for:

receiving, at an issuer mobile application using a software development kit, the encrypted provision data;

generating, by the software development kit, a request to provision the user payment source in the mobile pay wallet of the user using the encrypted provision data; and

receiving, by the software development kit, a result of the request to provision the user payment source in the mobile device pay wallet.

9. The one or more non-transitory computer-readable media of claim 1 , wherein the one or more processors further execute computer-readable instructions for:

receiving from the issuer mobile application server, an issuer nonce indicating that the user was authenticated by the issuer mobile application server;

wherein encrypting the primary account number data comprises encrypting the issuer nonce along with the primary account number data.

10. The one or more non-transitory computer-readable media of claim 9 , wherein the one or more processors further execute computer-readable instructions for:

receiving, at the token service provider, the encrypted primary account number data with the issuer nonce;

decrypting, by the token service provider, the encrypted primary account number data and the issuer nonce using the encryption key;

validating, by the token service provider, a signature of the primary account number data with a validation key; and

in response to validating the signature, transmitting, by the token service provider, a provision request comprising the issuer nonce.

11. The one or more non-transitory computer-readable media of claim 1 , wherein the one or more processors further execute computer-readable instructions for:

receiving, by a software development kit, an indication from an issuer mobile application to add the user payment source to the pay wallet, the indication being sent responsive to the issuer mobile application receiving the encrypted provision data from the issuer mobile application server;

transmitting, by the software development kit, the encrypted provision data to a pay wallet upon receiving the indication;

receiving, by the software development kit, a message from the pay wallet in response to transmitting the encrypted provision data to the pay wallet, the message indicating whether the user payment source was successfully provisioned to the pay wallet or not; and

transmitting, by the software development kit, the message to the issuer mobile application for displaying a notification to the user indicating whether the user payment source was provisioned or not.

12. A gateway system comprising:

one or more processors, and

one or more memories having stored thereon computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to:

receive, by a gateway encryption service, from an issuer mobile application server, user information for a user and account information for a payment source of the user;

transmit, by the gateway encryption service, the user information and the account information to a gateway lookup service;

receive, at the gateway lookup service, from an issuing host platform, primary account number data comprising an account number for the payment source;

transmit, by the gateway lookup service, the primary account number data to the gateway encryption service;

encrypt, by the gateway encryption service, the primary account number data using an encryption key associated with a token service provider to generate encrypted provision data,

wherein the encrypting comprises:

identifying

a first set of encryption requirements associated with a token service provider, wherein the first set of encryption requirements include a type of encryption algorithm and a minimum length of an encryption key;

identifying, by the gateway encryption service, an encryption key from a plurality of encryption keys stored in a database using the primary account number data, the encryption key set with token service provider information;

identifying, by the gateway encryption service, a second set of encryption requirements for the mobile device pay wallet using wallet data from the mobile device pay wallet;

ensuring that the encryption key complies with the combination of the first set of encryption requirements and the second set of encryption requirements; and

applying the encryption key set by the token service provider to the primary account number data based on an encryption algorithm and a minimum length of the encryption key identified from the first set of encryption requirements; and

transmitting the encrypted provision data to the issuer mobile application server.

13. The gateway system of claim 12 , wherein

identifying the encryption key comprises:

identifying an issuer using the primary account number data, wherein provision requests for issuers that use the token service provider have data that is encrypted with the encryption key; and

searching the database for the encryption key using the issuer.

14. The gateway system of claim 12 , wherein the user information for the user and the account information for the payment source of the user comprises one or more of a name of the user, a digital wallet data of the user, or an issuer nonce.

15. The gateway system of claim 12 , wherein the primary account number data comprises one or more of a sixteen-digit primary account number of the payment source, an address of the user, or a nickname of the payment source.

16. The gateway system of claim 12 , wherein for encrypting the primary account number data, the one or more processors further execute computer-readable instructions to:

identify a validation key from a plurality of validation keys using the primary account number data; and

sign, using the validation key, the encrypted provision data.

17. The gateway system of claim 12 , wherein the payment source is a credit card or debit card.

18. The gateway system of claim 12 , wherein the one or more processors further execute computer-readable instructions to receive a list of accounts for the user, wherein the payment source is selected from the list of accounts.

19. The gateway system of claim 12 , wherein the one or more processors further execute computer-readable instructions to:

receive, at an issuer mobile application using a software development kit, the encrypted provision data;

generate, by the software development kit, a request to provision the payment source in a mobile device pay wallet of the user using the encrypted provision data; and

receive, by the software development kit, a result of the request to provision the payment source in the mobile device pay wallet.

20. The gateway system of claim 12 , wherein the one or more processors further execute computer-readable instructions to:

receive from the issuer mobile application server an issuer nonce indicating that the user was authenticated by the issuer mobile application server, wherein encrypting the primary account number data comprises encrypting the issuer nonce along with the primary account number data.

21. The gateway system of claim 12 , wherein the one or more processors further execute computer-readable instructions to:

receive, by a software development kit, an indication from an issuer mobile application to add the user payment source to the pay wallet, the indication being sent responsive to the issuer mobile application receiving the encrypted provision data from the issuer mobile application server;

transmit, by the software development kit, the encrypted provision data to a pay wallet upon receiving the indication;

receive, by the software development kit, a message from the pay wallet in response to transmitting the encrypted provision data to the pay wallet, the message indicating whether the user payment source was successfully provisioned to the pay wallet or not; and

transmit, by the software development kit, the message to the issuer mobile application for displaying a notification to the user indicating whether the user payment source was provisioned or not.

Assignments (1)

Continuity (2)

References Cited (68)