Security division icon


Tokenization Management

Tokenization Management software for payments allows issuers and payment processors to perform the role of a Token Service Provider: entities that are responsible for the generation, storage, de-tokenization and lifecycle management of dynamic personal account numbers (PANs)/ tokens within a transaction as defined by EMVCo.


Product Brochure

How Tokenization Management works

Tokenization Management is used by card issuers to manage payment tokens, digital wallet providers to deliver tokens to support NFC payments, and merchants to replace card on-file storage of PANs.

Such a solution offers the APIs, token vault, token provisioning and lifecycle management functionality required to:

  • Operate, maintain and manage a token vault
  • Generate and issue ‘surrogate’ PANs
  • Offer de-tokenization services for transaction authorizing and clearing
  • Secure access to data and functions
  • Secure provisioning
Tokenization diagram

EMV payment tokenization replaces the need for merchants or digital wallet operators to store PANs. Personal account numbers are protected by replacing them with a unique alternate or dynamic PAN. These tokens can only be used temporarily at designated channel or merchant; card data obtained from data breaches are therefore useless. It also provides increased control by facilitating card-not-present payments and removing confidential consumer credit card data from the network.

The Rambus Tokenization Manager enables token requesters such as banks, digital wallet providers and merchants to securely manage and replace personal account numbers for EMV card and mobile NFC payments.

Our Tokenization Manager operates and manages a secure database, the token vault, where the mapping between the real PAN and the dynamic PAN is stored. To authorize a transaction, Tokenization Manager de-tokenizes the PANs and offers support for clearing and settlement. It also generates cryptographic data and gives access to securely manage the lifecycle of the token.

Tokenization Manager can be used as a stand alone product or in combination with e.g. an HCE card provisioning platform, such as Secure Element in the Cloud.

New Call-to-action

Related Markets & Applications