Recurring token transactions

1. A method comprising:

receiving, by a resource provider computer, a communication comprising a real credential from a communication device;

providing, by the resource provider computer, the real credential to a token computer, wherein the token computer obtains a token and a cryptogram, wherein the cryptogram is formed using a resource provider initiated transaction indicator;

receiving, by the resource provider computer from the token computer, the token and the cryptogram;

transmitting, by the resource provider computer to a processing computer, a first authorization request message comprising the token, the cryptogram, a resource provider identifier, and a first transaction amount for a first transaction, wherein the processing computer validates the cryptogram, exchanges the token for the real credential, stores the resource provider identifier, and forwards the first authorization request message including the real credential, and the first transaction amount to an authorizing entity computer;

receiving, by the resource provider computer, an authorization response message from the authorizing entity computer;

generating, by the resource provider computer, a second authorization request message comprising the token, a second transaction amount for a second transaction, and the resource provider identifier, without interacting with the communication device for the second transaction, wherein the second authorization request message comprises a cryptogram data field, the cryptogram data field comprising no cryptogram; and

transmitting, by the resource provider computer, the second authorization request message to the processing computer, wherein the processing computer analyzes the second authorization request message and determines that the cryptogram data field contains no cryptogram and allows the second transaction to proceed even though the cryptogram data field contains no cryptogram.

2. The method of claim 1 , wherein the second transaction is a recurring transaction.

3. The method of claim 1 , wherein allowing the first transaction to proceed includes exchanging the token for the real credential in the second authorization request message, and transmitting the second authorization request message comprising the real credential and the second transaction amount to the authorizing entity computer for authorization, even though the cryptogram data field contains no cryptogram.

4. The method of claim 1 , wherein the cryptogram is formed by encrypting data including the resource provider initiated transaction indicator and additional data using a cryptographic key that is shared with the processing computer.

5. The method of claim 4 , wherein the additional data comprises the real credential or a portion thereof.

6. The method of claim 1 , wherein the token and the real credential are in similar formats and have the same length.

7. A computer comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor, for implementing a method comprising:

receiving a communication comprising a real credential from a communication device;

providing the real credential to a token computer, wherein the token computer obtains a token and a cryptogram, wherein the cryptogram is formed using a resource provider initiated transaction indicator;

receiving, from the token computer, the token and the cryptogram;

transmitting, to a processing computer, a first authorization request message comprising the token, the cryptogram, a resource provider identifier, and a first transaction amount for a first transaction, wherein the processing computer validates the cryptogram, exchanges the token for the real credential, stores the resource provider identifier, and forwards the first authorization request message including the real credential, and the first transaction amount to an authorizing entity computer;

receiving an authorization response message from the authorizing entity computer;

generating a second authorization request message comprising the token, a transaction amount for a second transaction, and the resource provider identifier without interacting with the communication device for the second transaction, wherein the second authorization request message comprises a cryptogram data field, the cryptogram data field containing no cryptogram; and

transmitting the second authorization request message to the processing computer, wherein the processing computer analyzes the second authorization request message and determines that the cryptogram data field contains the cryptogram included in the first authorization request message or no cryptogram, and allows the second transaction to proceed, even though the cryptogram data field contains no cryptogram.

8. The computer of claim 7 , wherein the second transaction is a recurring transaction.

9. The computer of claim 7 , wherein the cryptogram is formed by encrypting data including the resource provider initiated transaction indicator and additional data.

10. The computer of claim 7 , wherein the cryptogram is formed by encrypting data including the resource provider initiated transaction indicator and additional data using a cryptographic key that is shared with the processing computer.

11. A method comprising:

receiving, by a token computer, a communication comprising a real credential from a communication device for a first transaction conducted with a resource provider computer,

obtaining, by the token computer, a token and a cryptogram, wherein the cryptogram is formed using a resource provider initiated transaction indicator;

receiving, by the token computer, a request to exchange the token for the real credential from a processing computer;

transmitting, by the token computer, a response including the token to the processing computer, wherein the processing computer exchanges the token with the real credential in a first authorization request message from the resource provider computer, the first authorization request message including the real credential and a first transaction amount, and processes the first authorization request message;

receiving, by the token computer, a second request to exchange the token for the real credential from the processing computer; and

transmitting, by the token computer, the real credential to the processing computer, which exchanges the token with the real credential in a second authorization request message from the resource provider computer, the second authorization request message including a cryptogram data field that contains no cryptogram, and processes the second authorization request message.

12. The method of claim 11 , wherein the processing computer processes the authorization request message by transmitting the authorization request message to an authorizing entity computer.

13. The method of claim 11 , further comprising,

receiving, by the processing computer, the first authorization request message comprising the token, the first transaction amount, and the cryptogram in a cryptogram data field.

14. The method of claim 13 , further comprising:

validating, by the processing computer, the cryptogram.

15. The method of claim 13 , wherein the method further comprises:

receiving the second authorization request message, wherein the second authorization request message comprises the cryptogram data field for the second transaction, the cryptogram data field containing no cryptogram; and

analyzing the second authorization request message and determining that the cryptogram data field contains no cryptogram, and allowing the second transaction to proceed, even though the cryptogram data field contains no cryptogram.

16. The method of claim 15 , wherein allowing the transaction to proceed includes exchanging the token for the real credential in the second authorization request message, and transmitting the second authorization request message comprising the real credential and the second transaction amount to the authorizing entity computer for authorization, even though the cryptogram data field contains no cryptogram.

17. The method of claim 11 , wherein the communication device is a mobile phone comprising a resource provider application associated with the resource provider computer.

18. The method of claim 1 , wherein responsive to determining that the cryptogram data field comprises no cryptogram, the processing computer is configured to retrieve the stored resource provider identifier and the token in a database, and wherein the processing computer allows the second transaction proceed responsive to determining that the stored resource provider identifier and/or the token is associated with the resource provider initiated transaction indicator.