Systems and methods for distributed enhanced payment processing
A distributed enhanced payment processing system includes a merchant point of sale (POS) terminal system and a remote payment management system. The POS terminal system initiates a transaction that includes receiving a payment amount, a purchaser account identifier, a virtual electronic payment indicator, and a merchant ID via a payment client. Subsequently, the POS terminal system outputs the transaction to the remote payment management system which generates a token for the transaction. The payment management system then provides the purchaser account identifier, a merchant account identifier, and the payment amount to a remote virtual electronic payment (VEP) entity system. Upon receiving a VEP entity system response, the payment management system outputs the response and token to the POS terminal system.
1 . A computer-implemented method for performing multi-merchant tokenization, the computer-implemented method comprising:
receiving, at a server associated with a multi-merchant tokenization system, a request for a transaction from a point of sale (POS) terminal;
determining, using a processor of the multi-merchant tokenization system, a frequency type of a token included in the request, wherein the token includes an encrypted primary account number and a merchant group identifier associated with a merchant;
determining, using the processor, that the request is able to be processed by the merchant based on a match between merchant setup configuration information stored in a database of the multi-merchant tokenization system and the request;
requesting, by the server and responsive to determining that the request is able to be processed by the merchant based on the match between the request and the merchant setup configuration information, the token of the frequency type from a hardware security module associated with the multi-merchant tokenization system;
receiving, by the server, the token of the frequency type from the hardware security module; and
transmitting, by the server and responsive to determining that the request is approved by a payment processor and that the request is of a first format, an approval response for the transaction to the POS terminal, the approval response containing the token of the frequency type.
2 . The computer-implemented method of claim 1 , wherein the request contains identifying data associated with a cardholder initiating the request.
3 . The computer-implemented method of claim 1 , wherein the type of the token is one of: a normal token or a recurring token.
4 . The computer-implemented method of claim 3 , wherein when the type of the token is the recurring token, the multi-merchant tokenization system sets an encrypted token expiration to a period allowing for multiple repeated transactions.
5 . The computer-implemented method of claim 3 , further comprising modifying, responsive to identifying that the type of the token is the recurring token, a billing mode for a recurring billing transaction.
6 . The computer-implemented method of claim 5 , further comprising, requesting decryption of the recurring token to retrieve one or more of: an account number, an expiration date, a group ID, and an updated token.
7 . The computer-implemented method of claim 1 , further comprising declining the request responsive to determining that the request does not match the merchant setup configuration information.
8 . A system for performing multi-merchant tokenization, the system comprising:
one or more processors; and
a data storage storing instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising:
receiving, at a server associated with the system, a request for a transaction from a point of sale (POS) terminal;
determining, using a processor of the system, a frequency type of a token included in the request, wherein the token includes an encrypted primary account number and a merchant group identifier associated with a merchant;
determining, using the processor, that the request is able to be processed by the merchant based on a match between merchant setup configuration information stored in a database of the system and the request;
requesting, by the server and responsive to determining that the request is able to be processed by the merchant based on the match between the request and the merchant setup configuration information, the token of the frequency type from a hardware security module associated with the system;
receiving, by the server, the token of the frequency type from the hardware security module; and
transmitting, by the server and responsive to determining that the request is approved by a payment processor and that the request is of a first format, an approval response for the transaction to the POS terminal, the approval response containing the token of the frequency type.
9 . The system of claim 8 , wherein the request contains identifying data associated with a cardholder initiating the request.
10 . The system of claim 8 , wherein the type of the token is one of: a normal token or a recurring token.
11 . The system of claim 10 , wherein when the type of the token is the recurring token, the system sets an encrypted token expiration to a period allowing for multiple repeated transactions.
12 . The system of claim 11 , further comprising modifying, responsive to identifying that the type of the token is the recurring token, a billing mode for a recurring billing transaction.
13 . The system of claim 12 , further comprising, requesting decryption of the recurring token to retrieve one or more of: an account number, an expiration date, a group ID, and an updated token.
14 . The system of claim 8 , further comprising declining the request responsive to determining that the request does not match the merchant setup configuration information.
15 . A non-transitory computer readable medium for multi-merchant tokenization, the non-transitory computer readable medium comprising instructions which, when executed by one or more processors, cause the one or more processors to perform a method comprising:
receiving, at a server associated with a multi-merchant tokenization system, a request for a transaction from a point of sale (POS) terminal;
determining, using a processor of the multi-merchant tokenization system, a frequency type of a token included in the request, wherein the token includes an encrypted primary account number and a merchant group identifier associated with a merchant;
determining, using the processor, that the request is able to be processed by the merchant based on a match between merchant setup configuration information stored in a database of the multi-merchant tokenization system and the request;
requesting, by the server and responsive to determining that the request is able to be processed by the merchant based on the match between the request and the merchant setup configuration information, the token of the frequency type from a hardware security module associated with the multi-merchant tokenization system;
receiving, by the server, the token of the frequency type from the hardware security module; and
transmitting, by the server and responsive to determining that the request is approved by a payment processor and that the request is of a first format, an approval response for the transaction to the POS terminal, the approval response containing the token of the frequency type.
16 . The non-transitory computer readable medium of claim 15 , wherein the type of the token is one of: a normal token or a recurring token.
17 . The non-transitory computer readable medium of claim 16 , wherein when the type of the token is the recurring token, the multi-merchant tokenization system sets an encrypted token expiration to a period allowing for multiple repeated transactions.
18 . The non-transitory computer readable medium of claim 16 , further comprising modifying, responsive to identifying that the type of the token is the recurring token, a billing mode for a recurring billing transaction.
19 . The non-transitory computer readable medium of claim 18 , further comprising, requesting decryption of the recurring token to retrieve one or more of: an account number, an expiration date, a group ID, and an updated token.
20 . The non-transitory computer readable medium of claim 15 , further comprising declining the request responsive to determining that the request does not match the merchant setup configuration information.