Patent ID: 11893549
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
Field: IT methods for management (Electrical engineering)
Classification: CPC G | IPC G

Claim 7:
8. A computer-implemented method for detecting potentially compromised merchants, said method implemented using a token monitoring (TM) computer device comprising a processor in communication with a memory including a database, the TM computer device associated with a payment processing network, said method comprising:
generating, by the processor, a set of tokens for use in initiating payment transactions at a selected merchant, each token of the set of generated tokens associated with the selected merchant and unassigned to any cardholder during generation of the set of generated tokens, each token of the set of generated tokens including merchant identification data for identifying the selected merchant;
storing, in the database, the set of generated tokens as being associated with the selected merchant and unassigned to any cardholder;
in response to a request from a merchant computer device associated with a transaction merchant, selecting a token of the set of generated tokens associated with the selected merchant and unassigned to any cardholder to assign to a cardholder;
assigning the token to the cardholder;
receiving, by the processor from the merchant computer device, an authorization request message associated with a payment transaction, wherein the authorization request message includes a transaction token and a transaction merchant identifier corresponding to the transaction merchant;
determining, by the processor, that the received transaction token corresponds to one of the set of generated tokens associated with the selected merchant by comparing the transaction token to the set of generated tokens;
determining, by the processor, whether the transaction merchant is the selected merchant by performing a lookup within the merchant identification data for a match to the transaction merchant identifier; and
in response to the determination that the transaction merchant is not the selected merchant, designating, by the processor, the selected merchant as a compromised merchant.