TECHNICAL FIELD

The present disclosure relates generally to the field of secure network transactions and, more particularly, to securely exchanging tokens across multiple transaction platforms.

BACKGROUND

One reality of the modern Internet-connected world is that the storage and transfer of sensitive and secure electronic data is potentially vulnerable to data breaches. Further, as electronic systems, such as point of sales (“POS”) systems, become more complex, and as hackers become more sophisticated, security concerns are continually increasing.

In the early days of electronic transactions, dedicated magnetic card readers would scan unencrypted sensitive data on a credit card and transfer it to a transaction service for completion of the transaction. These communications were typically made over a dial-up connection and required basic encryption in the reader device in order to maintain security of the packet.

Over time, the reader devices have become more advanced, often with Internet connections and data input ports that enable malware to infect POS terminals. Further, as more and more merchants have moved to transfer data over the Internet, additional security features have been developed.

Most notably, “tokenization” is a means for replacing sensitive data with a “token” of data that may be non-decryptable or non-detokenizable by the merchant or other tokenization users (e.g. because they require third party decryption). Merchants, for example, might not ever store sensitive data themselves, thus enhancing data security.

SUMMARY OF THE DISCLOSURE

One embodiment provides a computer-implemented method for cross-platform token exchange, comprising: receiving, by a token exchange service system, a primary token exchange request from an upstream entity; generating, by the token exchange service system, an ancillary detokenization request based on the primary token exchange request; transmitting, by the token exchange service system, the ancillary detokenization request to an input token vault; receiving, by the token exchange service system, an ancillary detokenization response from the input token vault; generating, by the token exchange service system, one or more ancillary tokenization requests based on the primary token exchange request and the ancillary detokenization response; transmitting, by the token exchange service system, the one or more ancillary tokenization requests to respective one or more output token vaults; receiving, by the token exchange service system, one or more ancillary tokenization responses from the respective one or more output token vaults; generating, by the token exchange service system, a primary token exchange response based on the one or more ancillary tokenization responses; and transmitting, by the token exchange service system, the primary token exchange response to the upstream entity.

One embodiment provides a system for cross-platform token exchange. The system may comprise one or more processors; and at least one data storage comprising instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising: receiving, by a token exchange service system, a primary token exchange request from an upstream entity; generating, by the token exchange service system, an ancillary detokenization request based on the primary token exchange request; transmitting, by the token exchange service system, the ancillary detokenization request to an input token vault; receiving, by the token exchange service system, an ancillary detokenization response from the input token vault; generating, by the token exchange service system, one or more ancillary tokenization requests based on the primary token exchange request and the ancillary detokenization response; transmitting, by the token exchange service system, the one or more ancillary tokenization requests to respective one or more output token vaults; receiving, by the token exchange service system, one or more ancillary tokenization responses from the respective one or more output token vaults; generating, by the token exchange service system, a primary token exchange response based on the one or more ancillary tokenization responses; and transmitting, by the token exchange service system, the primary token exchange response to the upstream entity.

One embodiment provides a non-transitory computer readable medium for cross-platform token exchange. The non-transitory computer readable medium may store instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising: receiving, by a token exchange service system, a primary token exchange request from an upstream entity; generating, by the token exchange service system, an ancillary detokenization request based on the primary token exchange request; transmitting, by the token exchange service system, the ancillary detokenization request to an input token vault; receiving, by the token exchange service system, an ancillary detokenization response from the input token vault; generating, by the token exchange service system, one or more ancillary tokenization requests based on the primary token exchange request and the ancillary detokenization response; transmitting, by the token exchange service system, the one or more ancillary tokenization requests to respective one or more output token vaults; receiving, by the token exchange service system, one or more ancillary tokenization responses from the respective one or more output token vaults; generating, by the token exchange service system, a primary token exchange response based on the one or more ancillary tokenization responses; and transmitting, by the token exchange service system, the primary token exchange response to the upstream entity.

Additional objects and advantages of the disclosed embodiments will be set forth in part in the description that follows, and in part will be apparent from the description, or may be learned by practice of the disclosed embodiments. The objects and advantages of the disclosed embodiments will be realized and attained by means of the elements and combinations particularly pointed out in the appended claims.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosed embodiments, as claimed.

