Methods and systems for securely facilitating cross-platform token compatibility via multi-tokenization
Systems and methods are disclosed for cross-platform token compatibility. One method comprises receiving, by a token exchange service system, a primary tokenization request from an upstream entity, generating, by the token exchange service system, one or more ancillary tokenization requests based on the primary tokenization request, and transmitting, by the token exchange service system, the one or more ancillary tokenization requests to respective one or more output token vaults. One or more ancillary tokenization responses may then be received from the one or more output token vaults, and a primary tokenization response may be generated based on the one or more ancillary tokenization responses. The primary tokenization response may be transmitted to the upstream entity.
1. A computer-implemented method for cross-platform token compatibility, comprising:
providing, by a token exchange service system, a portal to a merchant system through which the merchant system provides output token service provider configuration identifiers and activates token service providers corresponding to the output token service provider configuration identifiers;
receiving, by the token exchange service system, the output token service provider configuration identifiers and an activation of the token service providers corresponding to the output token service provider configuration identifiers from the merchant system via the portal;
receiving, by the token exchange service system, a primary tokenization request including sensitive data of a user of the merchant system and the output token service provider configuration identifiers from an intermediary system that is provided between the merchant and the token exchange service system;
generating, by the token exchange service system, a globally unique identifier (GUID) based on the received primary tokenization request, the GUID stored in a database of the token exchange system;
determining, by the token exchange service system, a plurality of output token vaults that are associated with the plurality of token service providers communicating with the token exchange service system to which the sensitive data is to be routed for tokenization based on the output token service provider configuration identifiers included in the primary tokenization request and based on the activation of the token service providers corresponding to the output token service provider configuration identifiers received from the merchant system via the generating, by the token exchange service system, ancillary tokenization requests based on determining the plurality of output token vaults to which the sensitive data is to be routed for tokenization;
transmitting, by the token exchange service system, the ancillary tokenization requests to the plurality of output token vaults that are associated with a plurality of token service providers and that are configured to generate a plurality of output tokens based on the sensitive data of the user;
receiving, by the token exchange service system, ancillary tokenization responses generated from the plurality of output token vaults;
generating, by the token exchange service system, a primary tokenization response based on the ancillary tokenization responses, wherein the primary tokenization response includes the GUID and the plurality of output tokens generated by the plurality of output token vaults associated with the plurality of token service providers; and
transmitting, by the token exchange service system, the primary tokenization response including the plurality of output tokens generated based on the sensitive data of the user to the intermediary system to permit the intermediary system to use the plurality of output tokens in services rendered by the intermediary system, store the plurality of output tokens in storage, or transmit an output token, of the plurality of output tokens, to the merchant system.
2. The method of claim 1 , wherein the primary tokenization request is an application programming interface (API) request.
3. The method of claim 1 , wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user.
4. The method of claim 1 , wherein the primary tokenization request further comprises supplemental information.
5. The method of claim 4 , wherein the supplemental information comprises at least one of: a payment vehicle expiration date, an address, and a card security code.
6. The method of claim 4 , wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user, and at least one of the ancillary tokenization requests further comprises supplemental information.
7. The method of claim 6 , wherein each of the plurality of output token vaults generates an output token that corresponds to the sensitive data of the user, and at least one of the plurality of output token vaults generates an output token that corresponds to the sensitive data associated with the user and the supplemental information.
8. A token exchange service system for cross-platform token compatibility, the system comprising:
one or more processors; and
at least one data storage comprising instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising:
providing, by the token exchange service system, a portal to a merchant system through which the merchant system provides output token service provider configuration identifiers and activates token service providers corresponding to the output token service provider configuration identifiers;
receiving, by the token exchange service system, the output token service provider configuration identifiers and an activation of the token service providers corresponding to the output token service provider configuration identifiers from the merchant system via the portal;
receiving, by the token exchange service system, a primary tokenization request including sensitive data of a user of the merchant system and the output token service provider configuration identifiers from an intermediary system that is provided between the merchant and the token exchange service system;
generating, by the token exchange service system, a globally unique identifier (GUID) based on the received primary tokenization request, the GUID stored in a database of the token exchange system;
determining, by the token exchange service system, a plurality of output token vaults that are associated with the plurality of token service providers communicating with the token exchange service system to which the sensitive data is to be routed for tokenization based on the output token service provider configuration identifiers included in the primary tokenization request and based on the activation of the token service providers corresponding to the output token service provider configuration identifiers received from the merchant system via the portal;
generating, by the token exchange service system, ancillary tokenization requests based on determining the plurality of output token vaults to which the sensitive data is to be routed for tokenization;
transmitting, by the token exchange service system, the ancillary tokenization requests to the plurality of output token vaults that are associated with a plurality of token service providers and that are configured to generate a plurality of output tokens based on the sensitive data of the user;
receiving, by the token exchange service system, ancillary tokenization responses generated from the plurality of output token vaults;
generating, by the token exchange service system, a primary tokenization response based on the ancillary tokenization responses, wherein the primary tokenization response includes the GUID and the plurality of output tokens generated by the plurality of output token vaults associated with the plurality of token service providers; and
transmitting, by the token exchange service system, the primary tokenization response including the plurality of output tokens generated based on the sensitive data of the user to the intermediary system to permit the intermediary system to use the plurality of output tokens in services rendered by the intermediary system, store the plurality of output tokens in storage, or transmit an output token, of the plurality of output tokens, to the merchant system.
9. The system of claim 8 , wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user.
10. The system of claim 8 , wherein the primary tokenization request further comprises supplemental information.
11. The system of claim 10 , wherein the supplemental information comprises at least one of: a payment vehicle expiration date, an address, and a card security code.
12. The system of claim 10 , wherein each of the ancillary tokenization requests comprises the sensitive data associated with the user, and at least one of the ancillary tokenization requests further comprises supplemental information.
13. The system of claim 12 , wherein each of the plurality of output token vaults generates an output token that corresponds to the sensitive data of the user, and at least one of the plurality of output token vaults generates an output token that corresponds to the sensitive data associated with the user and the supplemental information.
14. A non-transitory computer-readable medium for cross-platform token compatibility, the non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:
providing, by a token exchange service system, a portal to a merchant system through which the merchant system provides output token service provider configuration identifiers and activates token service providers corresponding to the output token service provider configuration identifiers;
receiving, by the token exchange service system, the output token service provider configuration identifiers and an activation of the token service providers corresponding to the output token service provider configuration identifiers from the merchant system via the portal;
receiving, by the token exchange service system, a primary tokenization request including sensitive data of a user of the merchant system and the output token service provider configuration identifiers from an intermediary system that is provided between the merchant and the token exchange service system;
generating, by the token exchange service system, a globally unique identifier (GUID) based on the received primary tokenization request, the GUID stored in a database of the token exchange system;
determining, by the token exchange service system, a plurality of output token vaults that are associated with the plurality of token service providers communicating with the token exchange service system to which the sensitive data is to be routed for tokenization based on the output token service provider configuration identifiers included in the primary tokenization request and based on the activation of the token service providers corresponding to the output token service provider configuration identifiers received from the merchant system via the generating, by the token exchange service system, ancillary tokenization requests based on determining the plurality of output token vaults to which the sensitive data is to be routed for tokenization;
transmitting, by the token exchange service system, the ancillary tokenization requests to the plurality of output token vaults that are associated with a plurality of token service providers and that are configured to generate a plurality of output tokens based on the sensitive data of the user;
receiving, by the token exchange service system, ancillary tokenization responses generated from the plurality of output token vaults;
generating, by the token exchange service system, a primary tokenization response based on the ancillary tokenization responses, wherein the primary tokenization response includes the GUID and the plurality of output tokens generated by the plurality of output token vaults associated with the plurality of token service providers; and
transmitting, by the token exchange service system, the primary tokenization response including the plurality of output tokens generated based on the sensitive data of the user to the intermediary system to permit the intermediary system to use the plurality of output tokens in services rendered by the intermediary system, store the plurality of output tokens in storage, or transmit an output token, of the plurality of output tokens, to the merchant system.