Granted Patent B2

US 12,273,346 · App. 18/468,461 · Granted Apr 8, 2025

Inventors: Dong Soon Denis Kang (Seoul, KR); Francois Hribovsek (Singapore, SG); Swapnil Vasant Mhasde (Singapore, SG); Guan Heng Christophe Yeo (Singapore, SG)

Assignee: Visa International Service Association

H04L63/10G06F21/62H04W12/35G06Q20/385

Abstract

Claims (31)

1. A method comprising:

transmitting, by an application on a user device to a directory service computer, a token request to receive an access token that is associated with an account issued by an issuer computer, wherein the token request comprises identifying information including one or more of user device identification information, a digital wallet identifier, or information identifying a token server computer;

receiving, by the application on the user device from the token server computer, the access token in response to the token request transmitted to the directory service computer, wherein the access token is provisioned on the user device upon receipt by the application, wherein the token server computer is configured to determine the access token based on a virtual access identifier generated by the issuer computer for the account, wherein the directory service computer retrieves the virtual access identifier based on the identifying information and transmits the virtual access identifier to the token server computer;

initiating, by the application on the user device, a transaction by transmitting the access token to a transport computer; and

receiving, by the application on the user device, a notification regarding whether the transaction is approved or declined.

2. The method of claim 1 , wherein the access token has a same format as a primary account identifier generated by the issuer computer for the account.

3. The method of claim 2 , wherein the primary account identifier is only available to one or more of the directory service computer or the issuer computer.

4. The method of claim 1 , wherein the account is not associated with an account card.

5. The method of claim 1 , wherein the virtual access identifier is communicated to the directory service computer or the token server computer in lieu of a primary account identifier generated by the issuer computer for the account, and

unlike the virtual access identifier, the primary account identifier is configured to conduct transactions.

6. The method of claim 1 , wherein the application is one of an online messaging application, a social networking application, or a merchant application.

7. The method of claim 1 , wherein the user device is a mobile phone.

8. The method of claim 1 , wherein the access token provides access to secure data.

9. The method of claim 1 , wherein the access token is provided to the directory service computer prior to transmitting a token request to the directory service computer.

10. A system comprising:

a user device comprising one or more processors, a computer readable medium storing an application and a memory storing instructions that, when executed by the one or more processors, cause the application, along with the one or more processors, to perform steps including:

transmitting, to a directory service computer, a token request to receive an access token that is associated with an account issued by an issuer computer, wherein the token request comprises identifying information including one or more of user device identification information, a digital wallet identifier, or information identifying a token server computer;

receiving, from the token server computer, the access token in response to the token request transmitted to the directory service computer, wherein the access token is provisioned on the user device upon receipt by the application, wherein the token server computer is configured to determine the access token based on a virtual access identifier generated by the issuer computer for the account, wherein the directory service computer retrieves the virtual access identifier based on the identifying information and transmits the virtual access identifier to the token server computer;

initiating a transaction by transmitting the access token to a transport computer; and

receiving a notification regarding whether the transaction is approved or declined.

11. The system of claim 10 , wherein the user device is a mobile phone.

12. The system of claim 10 , wherein the access token has a same format as a primary account identifier generated by the issuer computer for the account, wherein the primary account identifier is only available to one or more of the directory service computer or the issuer computer.

13. The system of claim 10 , wherein the account is not associated with an account card.

14. The system of claim 10 , wherein the virtual access identifier is communicated to the directory service computer or the token server computer in lieu of a primary account identifier generated by the issuer computer for the account, and

unlike the virtual access identifier, the primary account identifier is configured to conduct transactions.

15. The system of claim 10 , wherein the application is one of an online messaging application, a social networking application, or a merchant application.

16. The system of claim 10 , further comprising:

an application computer configured to manage the application on the user device, wherein the application on the user device communicates with the directory service computer and the token server computer via the application computer.

17. The system of claim 10 , wherein the access token provides access to secure data.

18. The system of claim 10 , wherein the access token is provided to the directory service computer prior to transmitting a token request to the directory service computer.

19. The method of claim 1 , wherein the token request includes the virtual access identifier, wherein the virtual access identifier is not capable of being used at merchants to conduct transactions.

Continuity (4)

References Cited (400)