Managing customer uniqueness in tokenised systems

1. A method of improving security of an electronic transaction comprising a secondary payment device:

receiving a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm; and

transmitting a secondary payment device transaction request comprising said DPAN and said FSP to a payment terminal;

wherein the DPAN is specific to said secondary payment device, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for at least another payment device associated with the funding source;

further comprising the payment terminal, prior to receiving said secondary payment device transaction request:

receiving a primary device transaction request comprising said FPAN;

responsive thereto, generating the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;

responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal;

responsive thereto, authorizing said primary device transaction request;

issuing a request comprising the FPAN to a payment network for settlement of said transaction;

subsequent to issuing said request comprising the FPAN to said payment network, receiving a primary device transaction failed message from the payment network; and

responsive thereto, adding the FSP to a deny list stored at the payment terminal;

the payment terminal subsequently:

receiving said secondary payment device transaction request;

responsive thereto, determining that the received FSP is present on said deny list; and

responsive thereto, declining said secondary payment device transaction request;

wherein the FSP generated for the primary device transaction request is identical to the FSP derived for the secondary device transaction request.

2. A method of improving security of an electronic transaction comprising a payment terminal:

receiving a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm, wherein the DPAN is specific to a secondary payment device from which the transaction request is received, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for at least another payment device associated with the funding source;

responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal;

responsive thereto, authorizing said secondary payment device transaction request;

issuing a request comprising the DPAN to a payment network for settlement of said transaction;

subsequently receiving a secondary payment device transaction failed message from the payment network;

responsive thereto, adding the FSP to said deny list;

subsequently receiving a second primary device transaction request comprising said FPAN;

responsive thereto, generating the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;

responsive thereto, determining that said generated FSP is present on the deny list; and

responsive thereto, declining said second primary device transaction request;

wherein the FSP generated for the second primary device transaction request is identical to the FSP derived for the secondary payment device transaction request.

3. The method of claim 2 , further comprising the payment terminal, prior to receiving said secondary payment device transaction request:

receiving a first primary device transaction request comprising said FPAN;

responsive thereto, generating the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;

responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal;

responsive thereto, authorizing said first primary device transaction request;

issuing a request comprising the FPAN to a payment network for settlement of said transaction; and

subsequent to issuing said request comprising the FPAN to said payment network, receiving a primary device transaction approved message from the payment network.

4. A payment terminal for improving security of an electronic transaction comprising:

a receiver configured to receive from a secondary payment device a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm, and to receive from a primary device a primary device transaction request comprising the FPAN;

a memory storing a deny list; and

a processor, operatively coupled to said receiver and said memory, configured to:

determine that the FSP is not present on said deny list and, responsive thereto, authorize said secondary payment device transaction request;

issue a request comprising the DPAN to a payment network for settlement of said transaction;

subsequently receive a secondary payment device transaction failed message from the payment network;

responsive thereto, add the FSP to said deny list;

subsequently receive from a primary device a primary device transaction request comprising said FPAN;

responsive thereto, generate the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;

responsive thereto, determine that said generated FSP is present on the deny list; and

responsive thereto, decline said primary device transaction request;

wherein the DPAN is specific to the secondary payment device from which the transaction request is received, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for said primary device associated with the funding source.

5. A system for improving security of an electronic transaction comprising:

a secondary payment device, in turn comprising:

a receiver configured to receive a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm;

a processor, operatively coupled to said receiver, configured to extract said DPAN and said FSP from one or more received messages; and

a transmitter, operatively coupled to said processor, configured to transmit a secondary payment device transaction request comprising the DPAN and the FSP to a payment terminal; and

a payment terminal, in turn comprising:

a receiver configured to receive from said secondary payment device a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm;

a memory storing a deny list; and

a processor, operatively coupled to said receiver and said memory, configured to:

determine that the FSP is not present on said deny list and, responsive thereto, authorize said secondary payment device transaction request;

issue a request comprising the DPAN to a payment network for settlement of said transaction;

subsequently receive a secondary payment device transaction failed message from the payment network;

responsive thereto, add the FSP to said deny list;

subsequently receive from a primary device a primary device transaction request comprising said FPAN;

responsive thereto, generate the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;

responsive thereto, determine that said generated FSP is present on the deny list; and

responsive thereto, decline said primary device transaction request;

wherein the DPAN is specific to said payment device from which the transaction request is received, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for said primary device associated with the funding source.