Abstract: Methods and systems for modeling a replication topology involve, for example, representing a plurality of replication components of a replication topology in a first binary matrix using a processor coupled to memory and generating a result matrix based at least in part on the first binary matrix likewise using the processor. Thereafter, also using the processor, replication components of the replication topology may be identified that are either enabled or non-enabled to receive replications from other replication components of the replication topology based at least in part on the result matrix.

Abstract: A system and method for allowing a user to access enterprise resources comprising authentication devices and an authentication server. The authentication devices allow a user to enter authentication data. The authentication server is in communication with the authentication devices. The authentication server comprises a policy database storing a policy. The policy comprises guidelines including a first guideline establishes a qualification necessary for the user to access enterprise resources and a second guideline establishes a qualification necessary for the user to activate a silent signal. The authentication server is adapted to request assistance for the user if the silent signal is activated.

Abstract: A method and system provides for scanning a check and/or cash to create an electronic image of the front and the back of the check and/or cash. The image is then processed and transmitted electronically to a central location. The image may be recreated into a paper form at the central location, resembling the original paper check or cash, including a machine-readable regeneration of the MICR code line data captured from the original instrument. Paperless processing of checks and cash is thus provided, including local voiding and storage of the check without requiring immediate pickup, while still allowing the transaction to be process.

Abstract: A system and method whereby an unregistered, anonymous user at an organization's website makes a submission/inquiry and is able to access a secure response containing private information without pre-registering or establishing an account with the organization. A response to the user is made via an unsecured e-mail notification that provides the user with an HTTPS link to an authentication page. The user then enters his/her user identification, for example, the user email address and password which was associated with the original submission/inquiry. Once the email address and password is authenticated, the secure response message is displayed on the user's web browser in SSL. Each response is provided on a per-submission basis.

Abstract: The invention relates to systems and methods for secure, remote, wireless submission of financial transactions. Authentication and authorization functionality are provided through use of proof of possession tests, a token service that provides a user device with a token that includes user entitlement data, and high assurance digital certificates.

Abstract: A computer-implemented method and system for managing transaction card accounts involves enabling a transaction card account by a card issuer for use with pre-defined categories of providers of goods/services and goods/services sold and issuing a transaction card and establishing an associated pre-qualified category card account. Upon receiving data for a transaction with the transaction card at a transaction terminal by a processing platform of the card issuer via a card association processing network, the category of the provider and goods/services is interrogated to determine whether or not the transaction can be posted on the pre-qualified category card account of the cardholder, and the transaction is approved and posted to the pre-qualified category card account if the transaction falls within the pre-qualified category of the cardholder.

Abstract: Methods and systems for generating and reusing dynamic web content involve, for example, automatically generating client-side code on a server at run time, and automatically downloading the client-side code to the client side at run time. The client-side code is executed on the client side to become a widget with dynamic behavior attributes displayed as a component of a web page on a display screen of a client-side computing device. Dynamic behavior of the client-side code may triggered via an event handler mechanism wherein properties of the client-side code are dynamically changed without affecting any other content on the web page. The widget may be redisplayed on a subsequent occasion with a change in the widget without regenerating the client-side code.

Abstract: A system and method of guaranteeing the presence of secure and tamper-proof remote files over a distributed communication medium, such as the Internet, is provided. The system and method automatically detects, and then self-repairs corrupt, modified or non-existent remote files. The method first performs an integrity check on a remote file and then determines whether the integrity check passed. If the integrity check passed, then the user goes through the authentication process as normal. If the integrity check fails, then the present invention redirects to an install module in order to prepare to reinstall the remote file. Via the install module, the present invention then reinstalls the remote file and the user is then taken through the authentication process as normal.

Abstract: A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Abstract: Systems and methods for harvesting excess compute capacity across different compute domains involve a monitoring engine that collects resource utilization data continuously in real time for each of a plurality of server nodes in each of a plurality of different compute domains via a network. An elastic compute workload management engine receives the collected resource utilization data from the monitoring engine via the network, extracts excess workload from one or more server nodes with excess workload demand in a first one of the plurality of different compute domains via the network and inserts the extracted excess workload into one or more server nodes with currently available compute capacity in a second one of the plurality of different compute domains via the network.

Abstract: A financial institution can provide a best price guarantee to debit or credit card account holders. By providing a consolidated system including automatic price monitoring of purchased products and automatic claim form generation upon identifying a lower price, the consumer is relieved of the burden typically associated with conventional price matching.

Abstract: Methods and systems for modeling a replication topology involve, for example, representing a plurality of replication components of a replication topology in a first binary matrix using a processor coupled to memory and generating a result matrix based at least in part on the first binary matrix likewise using the processor. Thereafter, also using the processor, replication components of the replication topology may be identified that are either enabled or non-enabled to receive replications from other replication components of the replication topology based at least in part on the result matrix.

Abstract: Methods and systems for electronically displaying financial data involve, for example, providing access to an authorized user via a client computing device to financial data on a back-end server using a processor coupled to memory; likewise using the processor, sending the financial data to the client computing device from the back-end server; and also using the processor, rendering a three-dimensional graphic display showing a plurality of geographic locations associated with the financial data on the client computing device.

Abstract: Methods and systems for accessing customer account information involve, for example, binding a computing device with a customer's profile via one or more attributes of the computing device and an encrypted token stored on the computing device and thereafter receiving an authentication request consisting at least in part of the computing device attributes and the encrypted token stored on the computing device. A determination is made as to whether or not entry of a customer credential was received within a pre-determined preceding interval of time, and predefined customer account information is displayed on the computing device without requiring entry of the customer credential when a determination is made that entry of the customer credential was received within the pre-determined preceding interval of time.

Abstract: A system and method remotely enrolls, authenticates and provides unified authentication services in an ASP setting to a user to access requested information via a communication medium. A filter is coupled to client side components via the communication medium and a user management component coupled to the client side components via the communication medium. The user management component allows end-users to register their credentials only once. In addition, the user management component allows end-users to define the level of protection of access to their web application accounts. This includes accounts that have been configured specifically for use with the present invention and particular user credentials and accounts that have been subsequently set up but configured to use the same user credentials. The present invention can then reuse those credentials to authenticate the user to one or more potentially unrelated web applications.

Abstract: For secure user authentication using a one-time password (OTP) application is pre-stored on a device for generating a OTP value responsive to entry of a valid PIN, no part of the PIN is stored on the device and pre-storing on a server the PIN and a valid shared secret for the user. Upon receiving entry a purported PIN, a purported shared secret is dynamically synthesized on the device by the OTP application based on the purported PIN of the user and a purported OTP value is generated based on the purported shared secret. When entry of the purported OTP value is received by the server in an attempt to log on the server from another device, the server cryptographically calculates a purported shared secret based on the purported OTP value, and log on to the server from the other device is allowed if the calculated purported shared secret corresponds to the pre-stored shared secret.

Abstract: Methods and systems for managing a graphical user interface involve, for example, defining, using a processor coupled to memory, a threshold distance between windows on a display screen at which a mutual attraction between the windows is activated to draw the windows together as components of a picture of windows. Also using the processor, all windows of a same functional type that are components of the picture of windows are resized simultaneously without affecting the size of windows of other functional types that are also components of the picture of windows. Likewise using the processor, all windows on the display screen are maintained in an active state regardless of a focus of a user input device.

Abstract: The systems and methods described herein allow greater access to a banking platform via a mobile device. The customer can initiate a financial transaction using a mobile device, a bank can inform the customer of the nearest financial transaction terminal to perform that service, and the customer can complete that financial transaction at the financial transaction terminal using the mobile device as a user interface. While conventional systems may use a mobile device to transmit payment information at a point of sale terminal of a brick-and-mortar merchant, the embodiments described herein can allow a customer to conduct a transaction at a financial transaction terminal using the mobile device to initiate a transaction at a location away from a financial transaction terminal, to locate the nearest financial transaction terminal providing the required services, and as a user interface while communicating with the financial transaction terminal.

Abstract: A method and system of smart card banking utilizes a contactless communication interface, such as infrared or a wireless or radio frequency interface, including, for example, a proximity interface. A contactless communication is initiated for a smart card user between a smart card application and the on-line system of a financial institution, such as a bank, the system verifies authorization for the communication, the information is communicated for the user to the on-line system. The contactless communication is initiated, and the information is communicated, for example, between a contactless interface transceiver of a personal data assistant, into which the smart card is inserted, and the contactless interface transceiver of an on-line terminal. Alternatively, the contactless communication is initiated, and the information is communicated between a contactless interface transceiver of the smart card and the contactless interface transceiver of the terminal.

Abstract: Methods and systems for routing payment transactions electronically involve interrogating by computer logic each payment transaction received by a payments interface processor to identify a payment destination and a payment source and to determine, according to pre-defined parameters, whether the payment transaction is eligible for processing via an internal payment transaction processor of the financial institution that minimizes processing costs. Eligible payment transactions may be routed, for example, to an internal debit or credit card processor or ACH processor, and ineligible payment transactions may be routed to external card processing networks.

Abstract: A method and system for the issuance of Instant Credit has an Instant Credit engine that performs instantaneous analysis. The method and system can operate along side existing “batch” processes. In addition, the method and system offer various channels of distribution for the Instant Credit products. With the present invention, Instant Credit and other Instant services (e.g., instant account balance transfers, etc.) can be obtained via, Internet, point-of-sale and other distribution channels. The present system also enables highly dynamic product offerings, which can be generated “instantaneously” based on a variety of factors, such as, for example, the channels of distribution (e.g., telephone or Internet), the product sought and/or even the particular individual and/or entity that is applying for a line of credit.

Abstract: Methods and systems for secure communication between a client application and a secure element on a mobile device involve, for example, encrypting a request including a randomly generated session key by the client application with a user's unique public key and sending the encrypted request to the secure element. The request message is decrypted with a user's unique private key on the secure element, a response message is encrypted with the session key retrieved from the decrypted request and sent to the client application, which decrypts the response with the session key.

Abstract: The invention relates to systems and methods for secure, remote, wireless submission of financial transactions. Authentication and authorization functionality are provided through use of proof of possession tests, a token service that provides a user device with a token that includes user entitlement data, and high assurance digital certificates.

Abstract: A computer-implemented method and system for managing transaction card accounts involves enabling a transaction card account by a card issuer for use with pre-defined categories of providers of goods/services and goods/services sold and issuing a transaction card and establishing an associated pre-qualified category card account. Upon receiving data for a transaction with the transaction card at a transaction terminal by a processing platform of the card issuer via a card association processing network, the category of the provider and goods/services is interrogated to determine whether or not the transaction can be posted on the pre-qualified category card account of the cardholder, and the transaction is approved and posted to the pre-qualified category card account if the transaction falls within the pre-qualified category of the cardholder.

Abstract: Embodiments described can more effectively complete complicated service transactions in a more efficient manner by having a team of well-trained professionals who are instantly “streamed” into any location as necessary. A two-way communication system can provide instant or quick access to the right expert at the right point in time, thereby converting what might otherwise be a negative customer experience into a positive sales and service opportunity.

Abstract: Methods and systems for managing security during a divestiture may involve, for example, differentiating divested assets and employees from non-divested assets and employees and identifying non-divested assets which divested employees are permitted to access. In addition, divested employee access to the non-divested assets which divested employees are not permitted to access is locked down, and a separation firewall is deployed between divested networks and non-divested networks.

Abstract: Methods and systems for managing financial data to measure the liquidity risk for a client involve, for example, implementing, using a computer having a processor coupled to memory, client-defined templates for a cash flow forecasting module. Also using the computer, forecast data for the client may be received via the client-defined templates by the cash flow forecasting module. Likewise using the computer, a real-time predictive aggregated measure of available cash flow for the client by currency by value date is generated by the cash flow forecasting module. In addition, a real time measure of forecast variance is computed by the cash flow forecasting module through pseudo logic matching of the actual cash flows at transaction level against the likely much higher level at which the forecasting process is operating.

Abstract: Methods and systems described herein can consolidate a plurality of a consumer's payment and non-payment source accounts into a consolidated platform with a customer identification or available proxy account numbers that can be assigned to source accounts. The source accounts can be, for example, credit card accounts, ATM accounts, debit card accounts, demand deposit accounts, stored-value accounts, merchant-loyalty card accounts, membership accounts, and identification card numbers. The consumer can access and modify any of the source accounts and manage funds across the source accounts by accessing the consolidated platform with a single access device or mode.

Abstract: Providing an account-based product. A communications portal is provided and consumer data is received via the portal. At least one derived characteristic, e.g., qualification, is determined contemporaneously from the consumer data. A product set is presented, via the portal, including at least one product determined at least in part by the derived characteristic. A selection from the product set is received via the portal, and at least one product feature, e.g., balance transfer, of at least one selected product is activated contemporaneous with the product selection.

Abstract: A system and method whereby an unregistered, anonymous user at an organization's website makes a submission/inquiry and is able to access a secure response containing private information without pre-registering or establishing an account with the organization. A response to the user is made via an unsecured e-mail notification that provides the user with an HTTPS link to an authentication page. The user then enters his/her user identification, for example, the user email address and password which was associated with the original submission/inquiry. Once the email address and password is authenticated, the secure response message is displayed on the user's web browser in SSL. Each response is provided on a per-submission basis.

Abstract: A system and method of guaranteeing the presence of secure and tamper-proof remote files over a distributed communication medium, such as the Internet, is provided. The system and method automatically detects, and then self-repairs corrupt, modified or non-existent remote files. The method first performs an integrity check on a remote file and then determines whether the integrity check passed. If the integrity check passed, then the user goes through the authentication process as normal. If the integrity check fails, then the present invention redirects to an install module in order to prepare to reinstall the remote file. Via the install module, the present invention then reinstalls the remote file and the user is then taken through the authentication process as normal.

Abstract: Methods, systems, and machines for monitoring card reader activity involve, for example, receiving data regarding a level of activity of a card reader of an access door of a self-service financial transaction terminal vestibule and also receiving data regarding a level of activity of a card reader of at least one self-service financial transaction terminal located within the vestibule. Periodically, the level of activity of the card reader of the access door may be compared with the level of activity of the card reader of the at least one self-service financial transaction terminal, and an alert may be generated when a ratio of the level of activity of the card reader of the access door to the level of activity of the card reader of the at least one self-service financial transaction terminal falls below a predetermined value.

Abstract: A method and system for managing transaction card accounts involves providing a customer a transaction card account by a financial institution against which the customer can charge predetermined types of transactions during predefined account statement periods and sending a statement of charges against the account to the customer at an end of each account statement period specifying a due date, after which a predefined late fee is assessed on the account if the statement is not paid. However, the late fee is automatically waived on the account within specified products if the customer makes a purchase or secures a cash advance during the account statement period for which the payment is due. Further, a voice response unit of the financial institution gives the customer a first menu option to opt out of a voice response unit scripted call and speak directly to a live representative about the account at any time during the call.

Abstract: Methods and systems for secure electronic communication involve, for example, using a processor coupled to memory to receive a request message from a user's communication device processor including a session key encrypted with a public key of a public/private key pair without sending a private key of the public/private key pair to, or storing the private key on, the user's communication device. Using the processor, the request message is decrypted with a private key of the public/private key pair and the session key is retrieved from the decrypted request message. Thereafter, also using the processor, a response message is generated and encrypted with the retrieved session key and sent to the user's communication device processor.

Abstract: The present invention relates to a method for conducting transactions, such as standard banking transactions, using a wireless device, such as a cellular telephone, personal digital assistant, and other web-enabled wireless devices utilizing software downloaded to the wireless device. The software provides a user with interface screens on the display of the wireless device for facilitating information requests to a service provider having access to at least one account of the user.

Abstract: Methods and systems for routing payment transactions electronically involve interrogating by computer logic each payment transaction received by a payments interface processor to identify a payment destination and a payment source and to determine, according to pre-defined parameters, whether the payment transaction is eligible for processing via an internal payment transaction processor of the financial institution that minimizes processing costs. Eligible payment transactions may be routed, for example, to an internal debit or credit card processor or ACH processor, and ineligible payment transactions may be routed to external card processing networks.

Abstract: CIMS can provide users with essential resources; provide a mechanism for instantly creating, modifying, and delivering infrastructure data that used to take hours or days; improve the efficiency of systems interfacing with it while reducing costly infrastructure; ensure audit and regulatory requirements are satisfied by automatically creating and recording a history of all application transactions; eliminate the cost overhead and human error associated with manual, time-consuming work currently performed by many systems administrators on each disparate system; and be transparent to end users, thereby defraying the costs of time off the job normally incurred with retraining CIMS offers the functionality of the disparate applications and consistently interfaces with the underlying infrastructure. As a result, infrastructure providers do not have to communicate directly with a vast array of business applications.

Abstract: A system and method for allowing a user to access enterprise resources comprising authentication devices and an authentication server. The authentication devices allow a user to enter authentication data. The authentication server is in communication with the authentication devices. The authentication server comprises a policy database storing a policy. The policy comprises guidelines including a first guideline establishes a qualification necessary for the user to access enterprise resources and a second guideline establishes a qualification necessary for the user to activate a silent signal. The authentication server is adapted to request assistance for the user if the silent signal is activated.

Abstract: A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

Abstract: A method and system for automated settlement and on-line debiting of a financial transaction, such as an emergency-cash transaction, is provided. A bank customer enters a foreign-branch bank and indicates a need for emergency cash. The customer is given a telephone by which the customer communicates with an interactive-voice response system in the customer's language. The system bridges the customer with the customer's home bank, which approves the requested emergency cash. A network in communication with the voice response system and with the issuer automatically initiates an on-line debiting of an account of the customer. The network also initiates and carries out settlement between the acquirer and the issuer by way of settlement accounts.

Abstract: The present invention relates to a method and system for offering mandatorily convertible securities (e.g., DECS) with associated forward purchase contracts and call options. Each mandatorily convertible security combines a forward purchase contract, a mandatory portable remarketable security, and a call option to form a single investment unit. The call option provides additional capital to the issuer of the investment unit and profits to the remarketing agent handling the mandatory portable remarketable security.

Abstract: It is desirable to implement security features that can prevent the unauthorized use of a customer's sensitive account information from an RFID sticker. The methods and systems described herein attempt to resolve the deficiencies with the conventional RFID stickers. In a more secure implementation, a financial institution allows a customer to activate or deactivate the account for use with the RFID sticker by submitting a request to the financial institution using internet banking, mobile banking, SMS texting, or other communications method.

Abstract: An anti-skimming assembly for a card reader device includes, for example, a displacement bar mountable on a front plate of a card reader device proximate a card entry opening formed in the front plate, which displacement bar has first and second legs. The displacement bar is mountable on the front plate with the first leg aligned with an internal read head inside the card entry opening of the card reader device. An infrangible fastener is connectible to the first leg through a first fastener opening formed in the front plate, and a non-conductive frangible or breakable fastener is connectible to the second leg through a second fastener opening formed in the front plate. In addition, first and second electrically conductive leads are carried by the non-conductive frangible fastener electrically connected to one another via an electrically conductive spring and connectible to an alarm circuit.

Abstract: A magnetic stripe card reader assembly and method includes a panel having portions defining a card entry opening of a card entry path provided for receiving a magnetic stripe card with the magnetic stripe disposed perpendicular to the card entry path. A card swipe path in communication with the card entry path is provided for swiping the card with the magnetic stripe disposed parallel to the card swipe path, and a magnetic stripe read head is disposed proximate the card swipe path for reading only a pre-determined segment of the magnetic stripe. The panel is also provided with portions defining a card withdrawal opening of a card withdrawal path in communication with the card swipe path and partly overlapping the card entry opening for withdrawal of the card with the magnetic stripe disposed perpendicular to the card withdrawal path.

Abstract: Methods and systems of processing payments globally over one of a plurality of payment processing paths employ computer hardware and software for receiving a request to access a global payment utility, presenting a plurality of payment options by the global payment utility, and receiving information by the global payment utility consisting at least in part of a source of payment, a payment destination, and a user-designated payment vehicle. Upon receiving the information, one of a plurality of payment processing paths for the payment is selected according to a clearing rules aspect of a rules engine of the global payment utility, and the payment is routed for processing via the selected payment processing path.

Abstract: A library of jobs is created, with the jobs performing predetermined functions. The jobs include a termination indication, which is success or failure. Input file formats of known file types are determined and a job stream to process the input files is constructed of the jobs linked according to the termination success or failure of the preceding job.

Abstract: Methods and systems for routing payment transactions electronically involve interrogating by computer logic each payment transaction received by a payments interface processor to identify a payment destination and a payment source and to determine, according to pre-defined parameters, whether the payment transaction is eligible for processing via an internal payment transaction processor of the financial institution that minimizes processing costs. Eligible payment transactions may be routed, for example, to an internal debit or credit card processor or ACH processor, and ineligible payment transactions may be routed to external card processing networks.

Abstract: A method and system for managing transaction card accounts involves providing a customer a transaction card account by a financial institution against which the customer can charge predetermined types of transactions during predefined account statement periods and sending a statement of charges against the account to the customer at an end of each account statement period specifying a due date, after which a predefined late fee is assessed on the account if the statement is not paid. However, the late fee is automatically waived on the account within specified products if the customer makes a purchase or secures a cash advance during the account statement period for which the payment is due. Further, a voice response unit of the financial institution gives the customer a first menu option to opt out of a voice response unit scripted call and speak directly to a live representative about the account at any time during the call.

Abstract: A method and system for performing a cash transaction with a self-service financial transaction terminal makes use of computer hardware and software that allows a financial institution cardholder to authorize a recipient to withdraw a specified amount of cash at an ATM of the particular financial institution. The cardholder can set up the transaction, for example, from any telephone using an interactive voice response (IVR) system, or by utilizing the application at a financial institution ATM, or by using an Internet website application. The originator can set up the recipient's ATM transaction to be either cardless or card-initiated.