Abstract: A system and method are provided which include receiving, by a server computer from a trusted entity computer, user data corresponding to a user. Based on the user data, the server computer determines a set of assertions for the user. The server computer receives, from a relying entity, an assertion request for the user. Responsive to the assertion request, the server computer provides, to the relying entity, an assertion, of the set of assertions. The relying entity thereby grants the user a particular type of account based on the assertion.

Abstract: A method, system, and computer program product is provided for embedding compression and reconstruction. The method includes receiving embedding vector data comprising a plurality of embedding vectors. A beta-variational autoencoder is trained based on the embedding vector data and a loss equation. The method includes determining a respective entropy of a respective mean and a respective variance of each respective dimension of a plurality of dimensions. A first subset of the plurality of dimensions is determined based on the respective entropy of the respective mean and the respective variance for each respective dimension of the plurality of dimensions. A second subset of the plurality of dimensions is discarded based on the respective entropy of the respective mean and the respective variance for each respective dimension of the plurality of dimensions. The method includes generating a compressed representation of the embedding vector data based on the first subset of dimensions.

Abstract: Systems, methods, and computer program products are provided for efficiently storing multi-threaded log data. A method includes receiving multi-threaded log data comprising logs, markers, and thread identifiers. For each respective log, the respective thread identifier is set as a most recently used item in a thread reference cache. A respective log cache in a map data structure is determined based on the respective thread identifier. The respective log is added to the respective log cache. Whether to communicate the respective log and/or the respective log cache to a first repository is determined based on the respective marker. The respective log is communicated to a second repository. Whether to remove an oldest log from the log cache is determined based on a log cache size limit and/or a time limit. Whether to remove a least recently used log cache is determined based on at least one map data structure size limit.

Abstract: According to one embodiment of the invention, a subtoken corresponding to a primary token is generated. The primary token corresponds to a credential. The credential may be, for example, a primary account number (PAN) corresponding to a payment account. The subtoken may be a temporary, one-time use subtoken based on a primary token associated with the credential that allows a user to conduct a transaction from his or her account, while still providing security for the user's sensitive data. The subtoken may contain a header and an obfuscated portion. The header of the subtoken routes the subtoken to the entity issuing the subtoken for translation into the primary token. The obfuscated portion acts as a pointer to the primary token and data associated with the primary token. A same check digit may be included in the subtoken, the primary token, and the credential, in order to ensure that the transaction is not improperly denied.

Abstract: Provided is a method and computer program product for ranking and selecting triggers. The method includes displaying a user interface to a marketer user, determining a predicted effectiveness for each trigger of a set of triggers associated with at least one offer based at least partially on a likelihood of a plurality of users performing transactions satisfying conditions associated with each trigger of the set of triggers, generating a ranked set of triggers by ranking each trigger of the set of triggers according to the predicted effectiveness of each respective trigger of the set of triggers, displaying the ranked set of triggers for the selection of at least one trigger, and in response to the selection of the at least one trigger by the marketer user from the user interface, generating at least one trigger record from the at least one trigger.

Abstract: A merchant website includes a QR code button to initiate a payment transaction. The QR code button is selected by a consumer at checkout. If selected, a QR code is generated on a second computing device. The QR code is displayed on a second computing device and contains embedded data such as a token for a PAN stored in a memory of the second computing device and two cryptograms. A webcam in communication with the first computing device is used to scan the QR code. The data embedded in the QR code is passed from the second computing device to the merchant website via the first computing device and used to complete the payment transaction.

Abstract: Embodiments of the invention enable a distributed ledger system including a network of entities that maintain an electronic ledger that can keep track of information related to events performed by various entities in the network. An operating entity may manage access to the distributed ledger system and may allow certain authorities and users to onboard with the distributed ledger system. A user device may generate a request to include data in the electronic ledger. The user device may generate a cryptogram and send the cryptogram with the request to a reader device, which may initiate a verification process to verify the cryptogram. If the cryptogram is verified, the data from the user device may be sent to one or more authorities so that it can be included in the electronic ledger.

Abstract: The present disclosure relates to an offer redemption method and system. The offer redemption method includes receiving a user interactive value corresponding to a user interaction level with an external game device; receiving a transaction amount corresponding to a transaction amount made by a user with a merchant; determining an offer value corresponding to the user interaction value, transmitting an authorization request message for receiving authorization response from an authorizing entity, receiving an authorization response for the transmitted authorization request message; and displaying the authorization response and an offer redemption status on a display module of the access device.

Abstract: Systems and methods to activate the processing of an allocated resource in operations with a processing system by the use of a round trip communication of the identifier of the resource, in which the resource identifier is communicated from a portal of the processing system to a first website, which passes the resource identifier to a second website during forwarding or redirecting a web browser from the first website to the second website, where the second website provides the resource identifier back to the processing system in communications with the processing system for operations required for the activation of the resource. Upon activation, the resource is processed during a communication session between the first website and the portal (or the processing system).

Abstract: Described herein are systems and methods for virtualizing policy enforcement amongst participants of an overlay network. In some embodiments, each of the participants may maintain a separate blockchain network. The overlay network may receive smart contracts or other policy documents that include information on interactions with a particular participant or between participants. A controller, which may be implemented on any node of the overlay network, may then extract an interaction algorithm from that smart contract that may be stored in policy data to be used in completing transactions between two participants of the overlay network. In some embodiments, the policy data may include cost data which may be used to determine how two entities may interact.

Abstract: Systems and methods for transferring value. A method includes posting, by a user device to a blockchain, a deposit transaction comprising a deposit value and conditions and updating, by the user device, a state according to a transaction amount. The method also includes transmitting, by the user device, a state update of the state to a server computer and responsive to transmitting the state update, and receiving, by the user device, a payment complete message comprising a tuple from the server computer. The method also includes verifying, by the user device, the conditions and processing, by the user device, a server deposit transaction on the blockchain in response to verifying.

Abstract: In some embodiments, a first server computer may be provided. The first server computer may comprise a processor and a computer readable medium coupled to the processor. The computer readable medium may include code executable by the processor for implementing a method. The method may include the step of electronically receiving an authorization request message that includes a first device verification value from a merchant for a first transaction, where the first device verification value may have been received by the merchant from a mobile device based on an interaction between the mobile device and an access device. In some embodiments, the mobile device may have received the first verification value based on a first request. The method may further include the step of determining by a data processor if the first device verification value corresponds to a stored device verification value.

Abstract: A method is disclosed. The method comprises receiving, from a server computer, a challenge, and displaying objects from an object list to a user. The method includes determining that a user has visually selected an object from the object list and moving the selected object on a display according to screen coordinates. A client computer captures a biometric of the user, and compares the biometric to another biometric stored in the client computer to provide a first comparison output, and compares a derivative of the selected object to a derivative of an object stored in the client computer to produce a second comparison output. The client computer signs the challenge with a private key and sends the signed challenge to the server computer, and the server computer verifies the signed challenge.

Abstract: Embodiments of the invention are directed to systems and methods that enable authentication of a user via an authentication application that is different than a wallet application that is being used to process a transaction. The wallet application may contain payment devices and/additional wallet applications.

Abstract: A method performed by a user device is disclosed. The method comprising generating a secret and measuring a biometric template of a user operating the user device. The method then generates a plurality of secret shares of the secret and of the biometric template. The user device then transmits the secret shares of the secret and of the biometric template to a plurality of recovery devices. After, the user device may then initiate a recovery of the secret and measure a biometric measurement of the user. Data of the biometric measurement may be transmitted to the plurality of recovery devices, where the recovery devices perform a partial computation. The user device use the plurality of partial computations to determine a match between the biometric template and the biometric measurement. If the two biometrics match, the user device can reconstruct the secret using shares of the secret from the recovery devices.

Abstract: Systems and methods for interoperable network token processing are provided. A network token system provides a platform that can be leveraged by external entities (e.g., third party wallets, e-commerce merchants, payment enablers/payment service providers, etc.) or internal payment processing network systems that have the need to use the tokens to facilitate payment transactions. A token registry vault can provide interfaces for various token requestors (e.g., mobile device, issuers, merchants, mobile wallet providers, etc.), merchants, acquirers, issuers, and payment processing network systems to request generation, use and management of tokens. The network token system further provides services such as card registration, token generation, token issuance, token authentication and activation, token exchange, and token life-cycle management.

Abstract: The present embodiments relate to a sender sharing a credential associated with a user device to a recipient, allowing temporary access to the user device by the recipient. The sender can specify a user in which to share the credential and can set control parameters relating to the use of the user device by the recipient. The authorizing entity computer can transmit an credential identifier to the processing network computer and receive an encrypted credential from the processing network computer. The authorizing entity computer can transmit the encrypted credential to a storage application on the recipient computer. The recipient computer can then transmit a request to the processing network computer for a token and then obtain the token.

Abstract: Systems and methods are described for pre-authentication access request screening. A server computer may receive a request for access to a resource comprising access data. The server computer may transmit, to an authentication computer, an authentication request message comprising at least a subset of the access data and receive an authentication response message comprising authentication data. The server computer may determine an access score based on the authentication data. Alternatively, the server computer may determine the access score based on the access data without using/receiving authorization data. The server computer may generate an access indicator based on the access score. The server computer may prepare and transmit an authorization request message comprising the access indicator to an authorization computer. The authorization computer may approve or decline the access to the resource based on the access indicator.

Abstract: A method for facilitating cryptocurrency transactions is disclosed. The method includes receiving, by a hub computer, a first user account identifier from a first service provider computer in communication with a first user device and a first blockchain network. The first service provider computer transfers an amount of digital currency to a first smart contract on the first blockchain network. The hub computer also receives a second user account identifier from a second service provider computer in communication with a second user device and a second blockchain network containing a second smart contract. The hub computer receives a first amount of a first digital currency from the first service provider computer, and then transfers a second amount of a second digital currency to the second service provider computer.

Abstract: Provided is a system for detecting an anomaly in a multivariate time series that includes at least one processor programmed or configured to receive a dataset of a plurality of data instances, wherein each data instance comprises a time series of data points, determine a set of target data instances based on the dataset, determine a set of historical data instances based on the dataset, generate, based on the set of target data instances, a true value matrix, a true frequency matrix, and a true correlation matrix, generate a forecast value matrix, a forecast frequency matrix, and a forecast correlation matrix based on the set of target data instances and the set of historical data instances, determine an amount of forecasting error, and determine whether the amount of forecasting error corresponds to an anomalous event associated with the dataset of data instances. Methods and computer program products are also provided.