SaaS決済
What is Network Tokenization?
What is Network Tokenization?
Network tokenization masks the card owner’s Primary Account Number (PAN) and replaces it with a network-generated, unique, non-sensitive token. This security measure can impact attempts to obtain payment information without authorization. Use of network tokenization is a necessity with transactions involving card-not-present and digital commerce, as well as those with recurring billing, which are more prone to fraudulent attacks, and when the underlying card is no longer valid while the token is, as the token remains a valid means of payment regardless of the status of the original card.
How does Network Tokenization work?
When the card owner registers the card electronically or through their digital wallet, these actions trigger a request to the corresponding Token Service Provider (TSP) of the card network the owner used.
仕組み:
- The token-requesting merchant’s payment system requests from the Token Service Provider (TSP) a token that will replace the PAN.
- The TSP issues a unique and opaque token and records the relationship between the PAN and Token in a secure vault.
- The issuer or the network may decide to approve/token issuance after carrying out a risk assessment.
- The consumer makes payment; the token is sent to the merchant as a dynamic, cryptogram, single-use, one-time token that replaces the genuine card.
When a card is reissued or expires, the network typically updates the associated token automatically, processing recurring payments without customer intervention.
What are the key differences between Network and Traditional Tokenization?
| Traditional (Merchant) Tokenization | ネットワークトークン化 | |
| Managed by | Merchant or processor | カードネットワーク |
| 範囲 | Merchant/processor environment only | Entire payment lifecycle |
| Card updates | 手動 | Automatic (reissued/expired cards) |
| Security layer | Static token | Token + dynamic cryptogram |
| 移植性 | 限定的 | Ecosystem-wide, a tendency toward higher approval rates is present |
What are the benefits for merchants and consumers?
Network tokenization influences cleared-speed payments, fraud event probability, and patterns of legitimate payment rejections.
Visa reports (data):
- 4.6% rise in payment authorization for card-not-present transactions
- The observed fraud rate in tokenized transactions was 30% below a corresponding value.
- Conducting a transaction with another network member can impact the applicable costs and fees.
For a merchant, the duration of customer checkout and any subscription interruptions from card changes may be linked to their カート離脱 statistics and the volume of customer support interactions.
Tokenization can reduce PCI DSS compliance scope, but it doesn’t eliminate all compliance obligations.
What are the primary use cases for Network Tokenization?
Network tokenization matters most wherever card details are stored and reused repeatedly. Common use cases:
- E-commerce and recurring/subscription billing
- アプリ内 と デジタルウォレット 取引
- SaaS請求
A SaaS company billing monthly subscriptions relies on network tokenization to keep charges running uninterrupted even if a customer’s card is reissued mid-subscription.
What challenges come with implementing Network Tokenization?
Implementing or removing the solution involves operational factors for merchants to consider.
- The merchant’s system should not only accept payment by tokens, but it should also be able to fall back to an alternative in the case the merchant payment system fails or gets a request to process an untokenized transaction.
- For domestic transaction processing in accordance with debit routing rules, the merchant’s system should be compatible (especially if it is a US Merchant).
- The speed of acceptance by issuers may vary, influenced by both regional factors and payment method.
- The main considerations when choosing whether to adopt network tokenization include the complexity of the integration, its portability, and whether or not it results in a vendor lock-in situation.
- The relationship between initial capital spending, varying issuer support, and authorization outcomes in particular markets merits attention.
結論
Network tokenization replaces the real card number with one the payment network creates and controls. The token’s functionality persists regardless of card re-use or re-issuance, which can affect the frequency of fraud events and repetitive billing. From a SaaS business perspective, these techniques primarily relate to the management of ongoing billing relationships, as distinct from single payment transaction functionalities.