Systems and methods for multi-merchant tokenization
Systems and methods for multi-merchant tokenization may include receiving a transaction from a point of sale terminal of a merchant, validating the merchant ID against merchant logs, and generating a token for the transaction. The token includes a primary account number, expiration, and a group ID. Additionally, the system provides the primary account number to a payment system and receives a response back. The response is then output back to the merchant along with the token. In subsequent transactions, the system may receive the token from a one point of sale terminal of the merchant. The system validates the merchant ID against merchant logs and ensures the merchant is configured for tokenization. The token is decrypted and the group ID is compared to the merchant ID in the merchant logs. When they match, the primary account number is provided to the payment system for approval.
1. A method for multi-merchant tokenization, the method comprising:
receiving, by a first point of sale (POS) terminal, transaction data associated with a first electronic request;
encrypting, by the first POS terminal via an encryption protocol, sensitive information of the transaction data at a reader head of the first POS terminal;
receiving, by a multi-merchant tokenization system, the first electronic request from the first POS terminal, wherein the first electronic request includes a first merchant ID and an encrypted primary account number;
processing. by the multi-merchant tokenization system, the first electronic request to validate the first merchant ID and the encrypted primary account number;
identifying, by the multi-merchant tokenization system, at least one key for the encrypted primary account number;
correlating, by the multi-merchant tokenization system, the first merchant ID with at least one group ID from a plurality of group IDs;
decrypting, by the multi-merchant tokenization system via the at least one key, the encrypted primary account number in the first electronic request into a primary account number;
generating, by the multi-merchant tokenization system, an encrypted token comprising the at least one correlated group ID and the decrypted primary account number; and
outputting, by the multi-merchant tokenization system, the encrypted token in a user interface of the first POS terminal.
2. The method of claim 1 , wherein generating, by the multi-merchant tokenization system, the encrypted token comprises:
tokenizing the primary account number; and
encrypting the tokenized primary account number.
3. The method of claim 1 , further comprising:
storing, by the multi-merchant tokenization system, a decryption key corresponding to the encrypted token.
4. The method of claim 1 , wherein the first electronic request further includes a frequency element, and
when the frequency element is a recurring frequency element, the multi-merchant tokenization system sets a token expiration date in the encrypted token to a period allowing for multiple repeated transactions.
5. The method of claim 1 , wherein the at least one group ID defines a selected group of merchants to redeem the encrypted token.
6. The method of claim 1 , further comprising:
upon detecting a tokenization indicator in the first electronic request, validating, by the multi-merchant tokenization system, the first merchant ID against merchant IDs of merchants configured for tokenization.
7. The method of claim 1 , further comprising:
querying, by the multi-merchant tokenization system, a database for merchant configuration; and
declining, by the multi-merchant tokenization system, the first electronic request if the merchant configuration does not match the first electronic request.
8. The method of claim 1 , further comprising:
inserting, by the multi-merchant tokenization system, the encrypted token into a token field of an electronic transaction authorization response; and
transmitting, by the multi-merchant tokenization system, the electronic transaction authorization response to a payment system.
9. The method of claim 1 , further comprising:
receiving, by the multi-merchant tokenization system, a second electronic request comprising the encrypted token and a second merchant ID from a second POS terminal;
retrieving, by the multi-merchant tokenization system, the at least one group ID and the primary account number from the encrypted token by decrypting the encrypted token;
comparing, by the multi-merchant tokenization system, the second merchant ID to the retrieved at least one group ID;
providing, by the multi-merchant tokenization system, the retrieved primary account number to a payment system;
receiving, by the multi-merchant tokenization system, an authorization response from the payment system; and
outputting, by the multi-merchant tokenization system, the authorization response to the second POS terminal.
10. A system for multi-merchant tokenization, the system comprising;
one or more processors; and
one or more computer readable media comprising instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, by a first point of sale (POS) terminal, transaction data associated with a first electronic request;
encrypting, by the first POS terminal via an encryption protocol, sensitive information of the transaction data at a reader head of the first POS terminal;
receiving, by a multi-merchant tokenization system, the first electronic request from the first POS terminal, wherein the first electronic request includes a first merchant ID and an encrypted primary account number;
processing, by the multi-merchant tokenization system, the first electronic request to validate the first merchant ID and the encrypted primary account number:
identifying, by the multi-merchant tokenization system, at least one key for the encrypted primary account number;
correlating, by the multi-merchant tokenization system, the first merchant ID with at least one group ID from a plurality of group IDs;
decrypting, by the multi-merchant tokenization system via the at least one key, the encrypted primary account number in the first electronic request into a primary account number;
generating, by the multi-merchant tokenization system, an encrypted token comprising the at least one correlated group ID and the decrypted primary account number; and
outputting, by the multi-merchant tokenization system, the encrypted token in a user interface of the first POS terminal.
11. The system of claim 10 , wherein generating, by the multi-merchant tokenization system, the encrypted token comprises:
tokenizing the primary account number; and
encrypting the tokenized primary account number.
12. The system of claim 10 , the operations further comprising:
storing, by the multi-merchant tokenization system, a decryption key corresponding to the encrypted token.
13. The system of claim 10 , wherein the first electronic request further includes a frequency element, and
when the frequency element is a recurring frequency element, the multi-merchant tokenization system sets a token expiration date in the encrypted token to a period allowing for multiple repeated transactions.
14. The system of claim 10 , wherein the at least one group ID defines a selected group of merchants to redeem the encrypted token.
15. The system of claim 10 , the operations further comprising:
upon detecting a tokenization indicator in the first electronic request, validating, by the multi-merchant tokenization system, the first merchant D against merchant IDs of merchants configured for tokenization.
16. The system of claim 10 , the operations further comprising:
querying, by the multi-merchant okenization system, a database for merchant configuration; and
declining, by the multi-merchant tokenization system, the first electronic request if the merchant configuration does not match the first electronic request.
17. The system of claim 10 , the operations further comprising:
inserting, by the multi-merchant tokenization system, the encrypted token into a token field of an electronic transaction authorization response; and
transmitting, by the multi-merchant tokenization system, the electronic transaction authorization response to a payment system.
18. The system of claim 10 , the operations further comprising:
receiving, by the multi-merchant tokenization system, a second electronic request comprising the encrypted token and a second merchant ID from a second POS terminal;
retrieving, by the multi-merchant tokenization system, the at least one group ID and the primary account number from the encrypted token by decrypting the encrypted token;
comparing, by the multi-merchant tokenization system, the second merchant ID to the retrieved at least one group ID;
providing, by the multi-merchant tokenization system, the retrieved primary account number to a payment system;
receiving, by the multi-merchant tokenization system, an authorization response from the payment system; and
outputting, by the multi-merchantokenization system, he authorization response to the second POS terminal.
19. One or more non-transitory computer readable media comprising instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, by a first point of sale (POS) terminal, transaction data associated with a first electronic request;
encrypting, by the first POS terminal via an encryption protocol, sensitive information of the transaction data at a reader head of the first POS terminal;
receiving, by a multi-merchant tokenization system, the first electronic request from the first POS terminal, wherein the first electronic request includes a first merchant ID and an encrypted primary account number;
processing, by the mufti-merchant tokenization system, the first electronic request to validate the first merchant ID and the encrypted primary account number;
identifying, by the multi-merchant tokenization system, at least one key for the encrypted primary account number;
correlating, by the multi-merchant tokenization system, the first merchant ID with at least one group ID from a plurality of group IDs;
decrypting, by the multi-merchant tokenization system via the at least one key, the encrypted primary account number in the first electronic request into a primary account number;
generating, by the multi-merchant tokenization system, an encrypted token comprising the at least one correlated group ID and the decrypted primary account number; and
outputting, by the multi-merchant tokenization system, the encrypted token in a user interface of the first POS terminal.
20. The one or more non-transitory computer readable media of claim 19 , wherein the at least one group ID defines a selected group of merchants to redeem the encrypted token.