Patent ID: 11863545
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method comprising:
receiving, at a registration authority computer, a certificate signing request from a token requestor computer associated with a token requestor, with respect to a user who requested an interaction with the token requestor;
in response to the receiving the certificate signing request, authenticating, by the registration authority computer, the token requestor;
adding an indication to the certificate signing request that the registration authority computer has authenticated the token requestor;
transmitting, by the registration authority computer to a certificate authority computer, the certificate signing request comprising the indication, the certificate authority computer being remote with respect to the registration authority computer;
receiving, by the registration authority computer from the certificate authority computer, a token requestor identifier (ID) for the token requestor;
transmitting, by the registration authority computer, the token requestor ID to the token requestor computer;
receiving, by the registration authority computer from the token requestor computer, an authorization request message comprising a token obtained by the token requestor by using the token requestor ID, wherein the token includes a payment account identifier as a substitute for an account number of the user who requested the interaction with the token requestor, wherein the payment account identifier is provided in the authorization request message in place of the account number of the user; and
transmitting, by the registration authority computer to the certificate authority computer, the authorization request message comprising the token, wherein the receiving the authorization request message causes the certificate authority computer to convert the payment account identifier of the token to the account number of the user,
wherein the token is a first token and the method further comprises:
transmitting, by the registration authority computer to the certificate authority computer, a token request message using the first token;
receiving, by the registration authority computer from the certificate authority computer, a second token; and
transmitting, by the registration authority computer to the token requestor computer, the second token,
wherein receiving the certificate signing request causes the certificate authority computer to:
verify that the registration authority computer authenticated the token requestor based at least in part on determining that an identifier associated with the registration authority computer is included in the certificate signing request;
in response to the verifying the registration authority computer authenticated the token requestor, generate the token requestor ID for the token requestor; and
store a mapping between the token requestor ID and a public key generated by and received from the token requestor computer.