Abstract: A method, apparatus, and system of activating and using a contactless card are disclosed. More particularly, a transaction card that includes a contactless enabled chip having a customer-specific uniform resource locator (URL) stored thereon, where the contactless enabled chip is configured to communicate the customer-specific URL to a mobile device via a contactless communication to activate the transaction card for use in a transaction.

Abstract: Systems, methods, and apparatuses for providing a customer a central location to manage permissions provided to third-parties and devices to access and use customer information maintained by a financial institution are described. The central location serves as a central portal where a customer of the financial institution can manage all access to account information and personal information stored at the financial institution. Accordingly, the customer does not need to log into each individual third-party system or customer device to manage previously provided access to the customer information or to provision new access to the customer information. A user additionally is able to have user data and third-party accounts of the user deleted from devices, applications, and third-party systems via a central portal.

Abstract: Various embodiments relate to a method performed by a processor of a computing system. An example method includes generating a symmetric content encryption key. Content is encrypted using the content encryption key to generate cipher text. A hash of the cipher text is generated. Each of the hash and the content encryption key is signcrypted using each of a signcrypting party public key, a signcrypting party private key and a recipient public key to generate a signcrypted envelope message. The cipher text is embedded in a component of the signcrypted envelope message. The signcrypted envelope message is transmitted to a recipient. The recipient can unsigncrypt the signcrypted envelope message using each of the recipient public key, a recipient private key, and the signcrypting party public key to retrieve the content encryption key and hash of the cipher text. The recipient can decrypt the cipher text using the content encryption key.

Abstract: Systems and methods for securely sharing and authenticating a last secret can include generating, by a cryptographic module on a first network node, a seed configured for deriving or recovering a last secret, the last secret providing access to a secure entity and being a last cryptographic element controlling access to the secure entity, creating, by the cryptographic module, an envelope for the seed, enveloping the seed by the envelope, and transmitting, by the cryptographic module, the seed to a computing system on a second node different than the first node, the computing system being configured to decrypt the envelope of the enveloped seed to recover the seed, and obtain the last secret based on the seed, where the cryptographic module is prevented from deriving the last secret.

Abstract: Various embodiments of the present invention describe techniques that perform account registration management operations with respect to an account registration session based on a real-time registration processing output that is generated based on an earlier-generated preliminary risk category, such as a preliminary risk category that is generated before the account registration session is completed. In some embodiments, by generating a component of the real-time registration processing output during the account registration session, the disclosed techniques enable reducing the data processing time associated with generating the real-time registration processing output, thus increasing the speed and operational reliability of an electronic data management system that is configured to perform account registration management operations.

Abstract: A computing system may include a network circuit configured to communicate with a third party computing device via a network, one or more interface elements (e.g., application programming interfaces and/or software development kits) providing account open functionality, and an account open circuit configured to: accept, via the interface elements, a set of user data and an account open request for opening a new account with the provider, where the set of user data is received from a user computing device of a user via a third party website or application; establish the new account by generating a set of account data associated with the new account without directing the user to the operating environment of a website or application of the provider; and transmit the set of account data to the third party computing device for use by the third party computing device in a transaction with the user.

Abstract: Disclosed in some examples are methods, systems, and machine readable mediums that provide users of a network-based financial account management system with a contextual user interface element, which when activated presents dynamic graphical user interfaces that provide financial account information as well as suggested financial performance improvement actions. Whether or not the contextual user interface is displayed may be based upon one or more of a context of the user, financial account information of the user, and account rules. Additionally, the suggested financial performance improvement actions may also be determined based upon one or more of: a context of the user, financial account information of the user, and account rules.

Abstract: A system including a network interface and a processing circuit is provided. The processing circuit includes one or more processors coupled to non-transitory memory. The processing circuit is structured to receive a request for a multiple custody linkage between user devices. The multiple custody linkage includes a digital connection between the user devices that allows shared access to a resource. The resource includes at least one of a physical object or information. The processing circuit is further structured to perform a validation process based on information in the request for the multiple custody linkage to determine if a violation of a security protocol exists. The security protocol is associated with security of the resource. The processing circuit is further structured to, in response to determining no violation of the security protocol exists, activate the multiple custody linkage between the user devices to allow the shared access to the resource.

Abstract: A computer-implemented method includes receiving, by a provider computing system, a transfer tag associated with a recipient from a user device associated with a sender. The computer-implemented method further includes performing, by the provider computing system, a tag conversion process on the transfer tag to create a tag-based identifier corresponding to the transfer tag. The computer-implemented method further includes generating, by the provider computing system, a transfer request including the tag-based identifier. The computer-implemented method further includes sending, by the provider computing system, the transfer request to a transfer service computing system, the transfer request initiating a transfer of a resource to a recipient account of the recipient based on the tag-based identifier.

Abstract: This disclosure describes techniques for threat detection within access control systems having multiple entitlement repositories. An example system includes a first entitlement repository, a second entitlement repository, a third entitlement repository, and a server. The server, in response to receiving an access request to access a service on a network, queries the first, second, and third entitlement repositories based on access characteristics of a user associated with the access request and receives responses from the first, second, and third entitlement repositories. When the responses from the first, second, and third entitlement repositories all match, the server provides authorization for the user to access the service in accordance with the responses.

Abstract: In an example, a computer-implemented method includes determining a set of permissions that specifies types of account data of one or more financial accounts to share with a third-party, the one or more financial accounts being associated with a user and held by a financial institution, and generating authorization data that authenticates the third-party and authorizes the third-party to access the types of account data specified by the set of permissions. The method also includes transmitting the authorization data to the third-party, receiving a request for authorization that includes the authorization data and a request for account data of the one or more financial accounts that conforms to the types of account data specified by the set of permissions, authorizing the third-party based on the authorization data, and transmitting the account data that conforms to the types of account data specified by the set of permissions.

Abstract: Examples described herein relate to apparatus and methods for managing rewards for a customer of a financial institution, including but not limited to, determining a transaction pattern associated with transactions made by the customer, determining a deviation from the transaction pattern, determining an event associated with the customer based on the deviation, and determining rewards that correspond to the event for the customer.

Abstract: An encrypting entity encrypts an instance of data using a cryptographic key and a cryptographic technique to generate the encrypted data instance; generates a decryption application based on the cryptographic key and at least one credential, the decryption application configured to decrypt the encrypted data instance; bundles the encrypted data instance and the decryption application to generate an encryption bundle; and provides the encryption bundle to be stored by an external data repository. In an example embodiment, the cryptographic technique is a post-quantum cryptographic technique.

Abstract: A method includes receiving, by a mobile device, a designation of a token; linking, by the mobile device, the token to an account based on receiving an input from a user to couple to the account such that the mobile device is configured to receive updates regarding the token; based on the linking, receiving, by the mobile device, an update regarding the account and (i) deactivating the token to prevent fund transfers utilizing the token and (ii) providing an alert regarding the update; reactivating, by the mobile device, the token based on an input from the user; receiving, by the mobile device, a fund transfer request identifying the token for a fund transfer; and after the fund transfer, deleting, by the mobile device, the token based on detecting an expiration designation of the token by removing the token from the mobile device.

Abstract: Examples described herein relate to systems, apparatuses, methods, and non-transitory computer-readable medium for recovering a session object associated with a secure session established by a security protocol server, including receiving, by a recovery server, an encrypted session object from the security protocol server, wherein the encrypted session object is unique to the secure session, generating, by the recovery server, a recovery key based on a first initial key and a recovery key sequence number, wherein the recovery key sequence number corresponds to a number of times that secure sessions have been established since the first initial key is received by the security protocol server, and decrypting, by the recovery server, the encrypted session object using the recovery key to generate the session object associated with the secure session.

Abstract: A computer-implemented method and an interactive computer system has a user interface with computer software application tool(s) for retirement planning purposes. The user interface is generally referred to herein as an income dashboard.

Abstract: Systems, methods, and apparatuses for automated population of responses into query fields of a form are discussed. The responses are based on data in a networked user data repository maintained by a first party, and the form is presented by a second party. A login request for access to data in the user data repository may be received from a remote computing device. If access to the data in the user data repository is authorized, descriptors for at least one of the query fields may be received, and based on the descriptors, it may be determined whether any responses to any query fields are contained in the user data repository. Query fields may be populated with responses obtained through the data repository. The user provides the second party with information that is made available to the first party without separately inputting the information into the form of the second party.

Abstract: A method may include presenting a user interface on a display device of a computing device, the user interface including: a search query input element; a plurality of graph type options; a graph level selection element; and a graph presentation area; receiving a search query inputted into the search query input element, the search query identifying a concept object in an ontology; retrieving data associated with the concept object from a graph database based on selections made in the graph type options and the graph level selection element, the data including a set of result objects related to the concept object; and rendering a hierarchical graph in the graph presentation area, the hierarchical graph illustrating the set of result objects and the concept object as interactive nodes.

Abstract: A method includes receiving, from a user device, a transaction service request including a transaction identification and a transaction time; identifying a first plurality of lockbox locations that can complete the transaction service request based on the transaction identification and the transaction time, the first plurality of lockbox locations being within a threshold proximity of a geographic area associated with the user account; receiving, from the user device, a selection of one of the lockbox locations of the first plurality of lockbox locations that can complete the transaction service request; configuring a physical lockbox of the selected lockbox location; receiving an unlock attempt; and transmitting an unlock command to the physical lockbox to unlock the door of the physical lockbox based on a comparison of the unlock attempt to a lockbox locking passcode.

Abstract: Disclosed in some examples are methods, systems, and machine readable mediums which provide for customized alerts for a user. Alerts may be described by a set of alert parameters. Alert parameters include the type of alerts, the frequency of alerts, and the content of the alerts. While the alert parameters may initially be set based upon the users explicitly entered preferences, the system may monitor one or more indicators to dynamically adjust one or more of the alert parameters. As the indicators allow the automated portfolio management system to respond to the needs of a user, these alerts may increase the personalization of automated portfolio management systems.