Secure data transfer
The present invention discloses a method of processing a data transfer request securely over a network, the method comprising the steps of obtaining, by a first entity, a first token associated with sensitive data received from a user; associating the first token with a token reference and storing the token reference; sending the token reference to a second entity; requesting a second token from a second entity upon receiving a data transfer request from a third entity, wherein the second token is derived from the first token using an ad hoc logic; and processing the data transfer request using the second token.
1 . A method of processing a data transfer request securely over a network, the method comprising the steps of:
obtaining, by a first entity, a first token associated with sensitive data received from a user;
generating, by the first entity, a token reference associated with the first token and storing the token reference, wherein the token reference is generated after obtaining the first token;
sending, by the first entity, the token reference to a second entity;
requesting, by the first entity, a second token from the second entity upon receiving a data transfer request from a third entity, wherein the second token based on the token reference and is derived using an ad hoc logic; and
processing, by the first entity, the data transfer request using the second token, wherein the first entity, the second entity, and the third entity are different entities.
2 . The method of claim 1 , further comprises requesting a cryptogram from the second entity when requesting the second token.
3 . The method of claim 2 , further comprising the steps of:
sending, by the first entity, the second token and the cryptogram over a public network;
validating, by the second entity, the second token and the cryptogram received over the public network;
detokenizing, by the second entity, the second token to retrieve the sensitive data; and
sending, by the second entity, the sensitive data to a fourth entity configured to approve the data transfer request.
4 . The method of claim 3 , wherein the fourth entity is configured to authenticate the user before approving the data transfer request.
5 . The method of claim 2 , further comprises sending, by a fourth entity, a confirmation of approval of the data transfer request to the first entity and/or the third entity.
6 . The method of claim 1 , wherein the second token comprises data transmitted in an electronic message having a card number, an expiry date and a CVV field.
7 . The method of claim 1 , wherein the ad hoc logic comprises splitting the first token into three parts and masking at least two of the three parts to generate the second token.
8 . The method of claim 1 , wherein the second entity is configured to store the ad hoc logic and update it each time the second token is generated.
9 . The method of claim 1 , wherein the second token has a predefined expiry period.
10 . The method of claim 1 , further comprising the second entity verifying credentials of the first entity before issuing the second token.
11 . A system for processing a data transfer request securely over a network, the system comprising a first entity configured to:
generate a first token associated with sensitive data received from a user;
generate a token reference associated with the first token and store the token reference, wherein the token reference is generated after obtaining the first token;
send the token reference to a second entity;
request a second token from the second entity upon receiving a data transfer request from the user, wherein the second token is based on the token reference and has been derived using an ad hoc logic; and
process the data transfer request using the second token, wherein the first entity, the second entity, and the user are different entities.
12 . The system of claim 11 , wherein the first entity is further configured to receive a cryptogram and the second token from the second entity, and to send the second token and the cryptogram over a public network.
13 . The system of claim 11 , wherein the first entity is a merchant and the second entity is a tokenization platform.
14 . The system of claim 11 , wherein the data transfer request is a payment transaction between a merchant and a user.
15 . A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:
obtaining, by a first entity, a first token associated with sensitive data received from a user;
generating, by the first entity, a token reference associated with the first token and storing the token reference, wherein the token reference is generated after obtaining the first token;
sending, by the first entity, the token reference to a second entity;
requesting, by the first entity, a second token from the second entity upon receiving a data transfer request from a third entity, wherein the second token based on the token reference and is derived using an ad hoc logic; and
processing, by the first entity, the data transfer request using the second token, wherein the first entity, the second entity, and the third entity are different entities.
16 . The non-transitory computer-readable storage medium of claim 15 storing further instructions that, when executed by the one or more processors, cause performance of further operations comprising:
requesting a cryptogram from the second entity when requesting the second token.
17 . The non-transitory computer-readable storage medium of claim 16 storing further instructions that, when executed by the one or more processors, cause performance of further operations comprising:
sending, by the first entity, the second token and the cryptogram over a public network;
validating, by the second entity, the second token and the cryptogram received over the public network;
detokenizing, by the second entity, the second token to retrieve the sensitive data; and
sending, by the second entity, the sensitive data to a fourth entity configured to approve the data transfer request.
18 . The non-transitory computer-readable storage medium of claim 15 storing further instructions that, when executed by the one or more processors, cause performance of further operations comprising:
sending, by a fourth entity, a confirmation of approval of the data transfer request to the first entity and/or the third entity.
19 . The non-transitory computer-readable storage medium of claim 15 , wherein the second token has a predefined expiry period.
20 . The non-transitory computer-readable storage medium of claim 15 , wherein the second token comprises data transmitted in an electronic message having a card number, an expiry date and a CVV field.