How to Aggregate Transaction Notifications Using Secure Tokens
A method for a central server to collect and organize event notifications from different merchants using unique, secure tokens that prove the user's identity without sharing sensitive account details.
Patent Number
US 10152712
Status
Active
Filing Date
May 10, 2006
Grant Date
December 11, 2018
Expiration
~May 2026 (estimated)
Claims
18
Assignee
PayPal Inc
Inventors
Edith H. Stern, Barry E. Willner, Robert C. Weir, Brian C. Schimpf
Citations
0 forward · 45 backward
What it covers
This patent describes a system where a central aggregating server helps a user track events (like purchases) across multiple different transaction entities, such as banks or stores. The user's device generates unique tokens using a public key provided by the server, which are then handed out to various merchants. When a merchant reports an event, they include this token, allowing the central server to verify the source, ensure the token hasn't been reused (preventing fraud), and categorize the event. Finally, the server compiles these disparate events into a single, organized view for the user to inspect.
What it doesn't cover
- —Does not cover systems that rely on passwords or usernames for authentication between the merchant and the aggregator.
- —Does not cover event tracking that happens without the use of cryptographically generated tokens.
- —Does not cover systems that do not use a central aggregating server to compile the event data.
- —Does not cover the internal processing of the transaction itself, only the reporting and aggregation of the event indicator.
The clever bit
The system uses the token not just as an identifier, but as a cryptographic proof. Because the token is generated using a public key, the server can verify the token's origin and validity using its private key, effectively ensuring that the event report is legitimate and preventing replay attacks where a token is used multiple times.
Why it matters
This technology addresses the fragmentation of financial data. By allowing a central hub to securely collect event indicators from various sources, it enables services that provide a unified dashboard for a user's financial life. It is a foundational approach for modern fintech applications that require secure, verifiable data aggregation without exposing raw account credentials to every merchant.
Real-world examples
- 1.Personal finance management apps that aggregate transaction data from multiple bank accounts
- 2.Unified notification centers for multi-merchant loyalty programs
- 3.Secure cross-platform transaction monitoring services
Generated by PatentBrief · Not legal advice · patentbrief.org
US 10152712 · 2026