Post payment processing tokenization in merchant payment processing
Systems and methods for payment processing include receiving, by a payment terminal, a personal account number to complete a payment. The personal account number is encrypted by the payment terminal. The encrypted personal account number is sent from the payment terminal to a merchant server via a network. The encrypted personal account number is sent from the merchant server to a tokenization service provider server for tokenization and validation via a payment processor. The merchant server receives an indication of whether the transaction was successful and a token from the tokenization service provider server.
1 . A computer-implemented method comprising:
receiving, by a first electronic device and from a second electronic device, a first request for verification, wherein the first request includes an encrypted identifier decryptable by a third electronic device, the encrypted identifier is based on an identifier associated with a user of the second electronic device, and the identifier represents a user account associated with a fourth electronic device;
forwarding, by the first electronic device and to the third electronic device, the encrypted identifier for verification;
receiving, by the first electronic device and from the third electronic device, a first token and a first indication of successful verification, wherein the first token is generated by the third electronic device and is stored on the first electronic device in association with the user for subsequent requests from the user;
providing, by the first electronic device and to the second electronic device, a first response to the first request, wherein the first response is based on the first indication of successful verification;
receiving, by the first electronic device and from the second electronic device, a second request for verification, wherein the second request does not include the encrypted identifier;
forwarding, by the first electronic device and to the third electronic device, the first token for verification;
receiving, by the first electronic device and from the third electronic device, a second token and a second indication of successful verification, wherein the second token is stored on the first electronic device in association with the user for subsequent requests from the user and replaces the first token; and
providing, by the first electronic device and to the second electronic device, a second response to the second request, wherein the second response is based on the second indication of successful verification.
2 . The computer-implemented method of claim 1 , wherein the identifier is re-encrypted before being provided to the fourth electronic device for verifying the identifier.
3 . The computer-implemented method of claim 1 , wherein the encrypted identifier is not decryptable by the first electronic device.
4 . The computer-implemented method of claim 1 , wherein the first token is generated after successful verification of the identifier.
5 . The computer-implemented method of claim 1 , wherein the second electronic device is a point-of-sale electronic device.
6 . The computer-implemented method of claim 1 , wherein the encrypted identifier is encrypted by point-to-point encryption (P2PE).
7 . The computer-implemented method of claim 1 , wherein forwarding the encrypted identifier to the third electronic device further comprises the third electronic device decrypting the identifier, generating the first token associated with the identifier, and providing the identifier to the fourth electronic device for verifying the identifier with the user account.
8 . The computer-implemented method of claim 1 , wherein forwarding the first token to the third electronic device comprises the third electronic device obtaining the identifier corresponding to the first token, generating a second token associated with the identifier, and providing the identifier to the fourth electronic device for verifying the identifier with the user account.
9 . A first electronic device, comprising:
a processor; and
a memory storing instructions that, when executed by the processor, cause the first electronic device to perform a method comprising:
receiving, from a second electronic device, a first request for verification, wherein the first request includes an encrypted identifier decryptable by a third electronic device, the encrypted identifier is based on an identifier associated with a user of the second electronic device, and the identifier represents a user account associated with a fourth electronic device;
forwarding, to the third electronic device, the encrypted identifier for verification;
receiving, from the third electronic device, a first token and a first indication of successful verification, wherein the first token is generated by the third electronic device and is stored on the first electronic device in association with the user for subsequent requests from the user;
providing, to the second electronic device, a first response to the first request, wherein the first response is based on the first indication of successful verification;
receiving, from the second electronic device, a second request for verification, wherein the second request does not include the encrypted identifier;
forwarding, to the third electronic device, the first token for verification;
receiving, from the third electronic device, a second token and a second indication of successful verification, wherein the second token is stored on the first electronic device in association with the user for subsequent requests from the user and replaces the first token; and
providing, to the second electronic device, a second response to the second request, wherein the second response is based on the second indication of successful verification.
10 . The first electronic device of claim 9 , wherein the identifier is re-encrypted before being provided to the fourth electronic device for verifying the identifier.
11 . The first electronic device of claim 9 , wherein forwarding the encrypted identifier to the third electronic device further comprises the third electronic device decrypting the identifier, generating the first token associated with the identifier, and providing the identifier to the fourth electronic device for verifying the identifier with the user account.
12 . The first electronic device of claim 9 , wherein forwarding the first token to the third electronic device comprises the third electronic device obtaining the identifier corresponding to the first token, generating a second token associated with the identifier, and providing the identifier to the fourth electronic device for verifying the identifier with the user account.