IP Library Granted Patent US 12,182,813
Granted Patent B2
US 12,182,813 · App. 18/316,948 · Granted Dec 31, 2024

Authenticated secure online and offline transactions

Inventor: Upendra Mardikar (San Jose, CA)
Assignee: American Express Travel Related Services Company, Inc.
G06Q20/401G06Q20/3821G06Q20/385G06Q2220/00H04L63/083
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,182,813
App. No.
18/316,948
Granted
Dec 31, 2024
Kind
B2
Abstract

The present disclosure presents systems and related methods for customer defined limited use authorization. One such method comprises implementing a customer defined generation control associated with a parent transaction account; receiving a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app; verifying that the generation control condition has been satisfied; generating via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data; and transmitting, via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied.

Claims (38)

1. A method comprising:

implementing, by a computer based system, a customer defined generation control associated with a parent transaction account, wherein the customer defined generation control indicates a generation control condition that authorizes an electronic payment token to be generated by a customer and transmitted to a customer mobile device, wherein the generation control condition comprises at least one of a date range or a date horizon control;

receiving, by the computer based system, a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app, wherein the request comprises at least an identification of the parent transaction account of the customer and a monetary value of the electronic payment token;

verifying, by the computer based system, that the generation control condition has been satisfied;

generating, by the computer based system and via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein the electronic payment token comprises a token identification (ID), wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data and associating the token data to the electronic payment token based on the token ID; and

transmitting, by the computer based system and via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied.

2. The method of claim 1 , wherein the customer defined generation control further comprises a limit on a number of electronic payment tokens that can be generated during the date range.

3. The method of claim 1 , wherein the customer defined authorization control comprises a payment channel for which the electronic payment token is only authorized to be used as a payment in a transaction.

4. The method of claim 3 , wherein the payment channel comprises a retail payment channel using a physical point of sale terminal.

5. The method of claim 3 , wherein the payment channel comprises an online payment channel.

6. The method of claim 1 , wherein the customer defined authorization control comprises a specification of a merchant and a specification of a geographical location for the merchant for which the electronic payment token is authorized to be used as a payment in a transaction.

7. The method of claim 1 , wherein the customer defined authorization control comprises a date range for which the electronic payment token is authorized to be used as a payment in a transaction.

8. A system comprising:

a processor,

a tangible, non-transitory memory configured to communicate with the processor,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:

implementing a customer defined generation control associated with a parent transaction account, wherein the customer defined generation control indicates a generation control condition that authorizes an electronic payment token to be generated by a customer and transmitted to a customer mobile device, wherein the generation control condition comprises at least one of a date range or a date horizon control;

receiving a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app, wherein the request comprises at least an identification of the parent transaction account of the customer and a monetary value of the electronic payment token;

verifying that the generation control condition has been satisfied;

generating, via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein the electronic payment token comprises a token identification (ID), wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data and associating the token data to the electronic payment token based on the token ID; and

transmitting, via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied.

9. The system of claim 8 , wherein the customer defined generation control further comprises a limit on a number of electronic payment tokens that can be generated during the date range.

10. The system of claim 8 , wherein the customer defined authorization control comprises a payment channel for which the electronic payment token is only authorized to be used as a payment in a transaction.

11. The system of claim 10 , wherein the payment channel comprises a retail payment channel using a physical point of sale terminal.

12. The system of claim 10 , wherein the payment channel comprises an online payment channel.

13. The system of claim 8 , wherein the customer defined authorization control comprises a specification of a merchant and a specification of a geographical location for the merchant for which the electronic payment token is authorized to be used as a payment in a transaction.

14. The system of claim 8 , wherein the customer defined authorization control comprises a date range for which the electronic payment token is authorized to be used as a payment in a transaction.

15. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer based system, cause the computer based system to perform operations comprising:

implementing a customer defined generation control associated with a parent transaction account, wherein the customer defined generation control indicates a generation control condition that authorizes an electronic payment token be generated by a customer and transmitted to a customer mobile device, wherein the generation control condition comprises at least one of a date range or a date horizon control;

receiving a request to generate the electronic payment token from at least one of an issuer web app or an issuer native app, wherein the request comprises at least an identification of the parent transaction account of the customer and a monetary value of the electronic payment token;

verifying that the generation control condition has been satisfied;

generating, via a tokenization engine, the electronic payment token in response to the request to generate the electronic payment token, wherein the electronic payment token comprises a token identification (ID), wherein generating the electronic payment token further comprises storing an expanded set of token controls comprising customer defined authorization control as token data and associating the token data to the electronic payment token based on the token ID; and

transmitting, via the tokenization engine, the electronic payment token to the customer mobile device responsive to the generation control condition being verified as being satisfied.

16. The article of manufacture of claim 15 , wherein the customer defined generation control further comprises a limit on a number of electronic payment tokens that can be generated during the date range.

17. The article of manufacture of claim 15 , wherein the customer defined authorization control comprises a payment channel for which the electronic payment token is only authorized to be used as a payment in a transaction.

18. The article of manufacture of claim 17 , wherein the payment channel comprises a retail payment channel using a physical point of sale terminal.

19. The article of manufacture of claim 17 , wherein the payment channel comprises an online payment channel.

20. The article of manufacture of claim 15 , wherein the customer defined authorization control comprises a specification of a merchant and a specification of a geographical location for the merchant for which the electronic payment token is authorized to be used as a payment in a transaction.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 17, 2023
From: MARDIKAR, UPENDRA
To: AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.
Reel/Frame 064627/0187 →
Continuity (2)
Continuation 15934274 · Mar 23, 2018
Related Publication 20230281625A1 · Sep 7, 2023