Security division icon

Security

Token Service Provider

Responsible for the generation, issuance assignment and lifecycle management of temporary Personal Account Numbers (PANs), or payment tokens, the Rambus Token Service Provider (TSP), including technology from Bell ID, is a modular platform that combines tokenization with Host Card Emulation (HCE) to enable payment issuers and processors to perform a wide variety of roles in the payment process.

Contact

Product Brief

How Token Service Provider works

In today’s mobile payment ecosystem, TSPs are entities that generate and deliver payment tokens to registered token requestors, such as OEM Pay wallets or e-commerce merchants, to safely complete mobile payment transactions. Tokenization is used to protect payment credentials by replacing them with a randomly generated number that resembles the customer’s PAN. The unique identifier, known as a ‘payment token’ or ‘tokenized PAN’, is worthless if stolen, as it essentially acts as a reference for a consumer’s original card data which only the card networks and/or the consumer’s bank can map back to the original account.

Watch Token Service Provider

Watch Token Service Provider

Tokenization: Everything You Need To Know

Tokens are used in a number of environments to replace and protect the underlying value of credentials. In the payments world, tokenization is primarily used to secure payment card data. This can be done using EMVCo Tokenization for card payment transactions or Payment Card Industry (PCI) Tokenization for card-on-file data, which is stored in merchants’ or acquirers’ systems after a transaction is completed.

Download Brochure
Mobile Payment Ecosystem diagram

The Token Service Provider Within a Mobile Payment Ecosystem

The Rambus Token Service Provider is a comprehensive software platform that offers many different solutions within the tokenized payment infrastructure. Some of the key capabilities featured in the platform include:

  • Tokenization Management – reduces fraud by removing confidential consumer card data from the payment network and replacing it with unique tokens. This includes tokenization of primary account numbers (PAN), token vault, de-tokenization, domain management, clearing and settlement support, and identification and verification support.
  • Host Card Emulation – emulates the functionality of a physical secure element (SE) in the cloud for use with Near Field Communication (NFC) transactions, compliant with American Express, VISA, and MasterCard specifications featuring a plug-in for mobile wallets
  • Transaction Management – enables issuers to perform transactions by calculating cryptogram version numbers (CVNs) on behalf of the authorization host. It includes cryptogram validation, assurance level validation, PAN processing, and messaging.
  • Trusted Service Manager – issues contactless payment cards and provisions static card data and dynamic key material to a physical SE on a mobile device.

Token Service Provider

A Token Service Provider is an entity within the payments ecosystem that is able to provide registered token requestors – such as merchants holding card credentials – with ‘surrogate’ PAN values, known as payment tokens. The Token Service Provider can be independent from the payment network or payment processor, or alternatively can be integrated with one or both of these entities. Token Service Providers are responsible for a number of functions. They oversee the ongoing operation and maintenance of the Token Vault, deployment of security measures and controls, and the registration process of allowed Token Requestors.

Download Brochure
Download Token Service Provider

From the blog

Related Markets & Applications