Patents by Inventor Jenny Qian Zhang

Jenny Qian Zhang has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10673839
    Abstract: Networks and methods for use in authenticating messages are provided. One exemplary method generally includes receiving a message from a client, where the message includes a client certificate. The method also includes validating, by an application programming interface (API) gateway, a computing device based on a certificate identifying the computing device as a recognized computing device, and validating, by the API gateway, the client based on the client certificate via a global access manager, separate from the repository. The method further includes causing a security token indicative of the client to be generated, when the computing device and the client are validated, whereby the security token is indicative of the client and permits the message, from the client, to be delivered to one or more backend services.
    Type: Grant
    Filed: September 18, 2017
    Date of Patent: June 2, 2020
    Assignee: MASTERCARD INTERNATIONAL INCORPORATED
    Inventors: Jenny Qian Zhang, Justus Albert Srigiri, Brian Christopher Loeffler, Ankur Panthi, Ronald Marc Phillips
  • Patent number: 10673831
    Abstract: A security control (SC) system including one or more security control (SC) computing devices for automating security controls between computer networks is provided. The SC system is configured to receive a request to access a service including a system identifier that identifies a computer system requesting access to a service controlled by the one or more SC computing devices, build a token request based on the request, and correlate the token request to at least one security policy associated with the system identifier. The SC system is also configured to generate an access token in response to the token request, wherein the access token is included in an authorization request, and invoke the service using the authorization request. The SC system is further configured to validate the access token using the at least one security policy and authorize access to the service based on the at least one security policy.
    Type: Grant
    Filed: August 11, 2017
    Date of Patent: June 2, 2020
    Assignee: Mastercard International Incorporated
    Inventors: Sasan Sahraei, Navjot S. Sidhu, Eric G. Alger, Jenny Qian Zhang
  • Patent number: 10484375
    Abstract: A secure authorization server computer system for verifying an identity of an end-user is provided. The computer system is programmed to receive, from a computing client, an authentication request at an authorization component. The authentication request includes a secure authentication request identifier. The computer system is also programmed to validate the authentication request at the authorization component by validating the secure authentication request identifier. The computer system is further programmed to transmit an authentication response from the authorization component to the computing client. The authentication response includes an authorization code. The authorization code represents a validation of the authentication request.
    Type: Grant
    Filed: June 4, 2018
    Date of Patent: November 19, 2019
    Assignee: MASTERCARD INTERNATIONAL INCORPORATED
    Inventors: Jenny Qian Zhang, Eric G. Alger, Steven Patrick Bucher
  • Publication number: 20190052621
    Abstract: A security control (SC) system including one or more security control (SC) computing devices for automating security controls between computer networks is provided. The SC system is configured to receive a request to access a service including a system identifier that identifies a computer system requesting access to a service controlled by the one or more SC computing devices, build a token request based on the request, and correlate the token request to at least one security policy associated with the system identifier. The SC system is also configured to generate an access token in response to the token request, wherein the access token is included in an authorization request, and invoke the service using the authorization request. The SC system is further configured to validate the access token using the at least one security policy and authorize access to the service based on the at least one security policy.
    Type: Application
    Filed: August 11, 2017
    Publication date: February 14, 2019
    Inventors: Sasan Sahraei, Navjot S. Sidhu, Eric G. Alger, Jenny Qian Zhang
  • Publication number: 20180288047
    Abstract: A secure authorization server computer system for verifying an identity of an end-user is provided. The computer system is programmed to receive, from a computing client, an authentication request at an authorization component. The authentication request includes a secure authentication request identifier. The computer system is also programmed to validate the authentication request at the authorization component by validating the secure authentication request identifier. The computer system is further programmed to transmit an authentication response from the authorization component to the computing client. The authentication response includes an authorization code. The authorization code represents a validation of the authentication request.
    Type: Application
    Filed: June 4, 2018
    Publication date: October 4, 2018
    Inventors: Jenny Qian Zhang, Eric G. Alger, Steven Patrick Bucher
  • Patent number: 9992199
    Abstract: A secure authorization server computer system for verifying an identity of an end-user is provided. The computer system is programmed to receive, from a computing client, an authentication request at an authorization component. The authentication request includes a secure authentication request identifier. The computer system is also programmed to validate the authentication request at the authorization component by validating the secure authentication request identifier. The computer system is further programmed to transmit an authentication response from the authorization component to the computing client. The authentication response includes an authorization code. The authorization code represents a validation of the authentication request.
    Type: Grant
    Filed: October 20, 2017
    Date of Patent: June 5, 2018
    Assignee: MASTERCARD INTERNATIONAL INCORPORATED
    Inventors: Jenny Qian Zhang, Eric G. Alger, Steven Patrick Bucher
  • Publication number: 20180048649
    Abstract: A secure authorization server computer system for verifying an identity of an end-user is provided. The computer system is programmed to receive, from a computing client, an authentication request at an authorization component. The authentication request includes a secure authentication request identifier. The computer system is also programmed to validate the authentication request at the authorization component by validating the secure authentication request identifier. The computer system is further programmed to transmit an authentication response from the authorization component to the computing client. The authentication response includes an authorization code. The authorization code represents a validation of the authentication request.
    Type: Application
    Filed: October 20, 2017
    Publication date: February 15, 2018
    Inventors: Jenny Qian Zhang, Eric G. Alger, Steven Patrick Bucher
  • Publication number: 20180007035
    Abstract: Networks and methods for use in authenticating messages are provided. One exemplary method generally includes receiving a message from a client, where the message includes a client certificate. The method also includes validating, by an application programming interface (API) gateway, a computing device based on a certificate identifying the computing device as a recognized computing device, and validating, by the API gateway, the client based on the client certificate via a global access manager, separate from the repository. The method further includes causing a security token indicative of the client to be generated, when the computing device and the client are validated, whereby the security token is indicative of the client and permits the message, from the client, to be delivered to one or more backend services.
    Type: Application
    Filed: September 18, 2017
    Publication date: January 4, 2018
    Inventors: Jenny Qian Zhang, Justus Albert Srigiri, Brian Christopher Loeffler, Ankur Panthi, Ronald Marc Phillips
  • Patent number: 9800580
    Abstract: A secure authorization server computer system for verifying an identity of an end-user is provided. The computer system is programmed to receive, from a computing client, an authentication request at an authorization component. The authentication request includes a secure authentication request identifier. The computer system is also programmed to validate the authentication request at the authorization component by validating the secure authentication request identifier. The computer system is further programmed to transmit an authentication response from the authorization component to the computing client. The authentication response includes an authorization code. The authorization code represents a validation of the authentication request.
    Type: Grant
    Filed: November 16, 2015
    Date of Patent: October 24, 2017
    Assignee: Mastercard International Incorporated
    Inventors: Jenny Qian Zhang, Eric G. Alger, Steven Patrick Bucher
  • Publication number: 20170142108
    Abstract: A secure authorization server computer system for verifying an identity of an end-user is provided. The computer system is programmed to receive, from a computing client, an authentication request at an authorization component. The authentication request includes a secure authentication request identifier. The computer system is also programmed to validate the authentication request at the authorization component by validating the secure authentication request identifier. The computer system is further programmed to transmit an authentication response from the authorization component to the computing client. The authentication response includes an authorization code. The authorization code represents a validation of the authentication request.
    Type: Application
    Filed: November 16, 2015
    Publication date: May 18, 2017
    Inventors: Jenny Qian Zhang, Eric G. Alger, Steven Patrick Bucher
  • Patent number: 9032204
    Abstract: A method and system for signing a digital certificate in real time for accessing a service application hosted within a service provider (SP) computer system through an open application programming interface (API) platform is provided. The API platform is in communication with a memory device. The method includes receiving registration data from a developer computer device wherein the developer computer device is associated with a developer and configured to store a developer application, receiving a certificate signing request (CSR) from the developer computer device wherein the CSR includes a public key associated with the developer, verifying the registration data as being associated with the developer, signing the CSR to produce a signed certificate after verifying the registration data wherein the verifying and signing steps are performed by the SP computer system in real time, and transmitting the signed certificate and a client ID to the developer computer device.
    Type: Grant
    Filed: December 22, 2011
    Date of Patent: May 12, 2015
    Assignee: MasterCard International Incorporated
    Inventors: Nathaniel David Byrd, Jenny Qian Zhang, Eric G. Alger
  • Publication number: 20120179907
    Abstract: A method and system for signing a digital certificate in real time for accessing a service application hosted within a service provider (SP) computer system through an open application programming interface (API) platform is provided. The API platform is in communication with a memory device. The method includes receiving registration data from a developer computer device wherein the developer computer device is associated with a developer and configured to store a developer application, receiving a certificate signing request (CSR) from the developer computer device wherein the CSR includes a public key associated with the developer, verifying the registration data as being associated with the developer, signing the CSR to produce a signed certificate after verifying the registration data wherein the verifying and signing steps are performed by the SP computer system in real time, and transmitting the signed certificate and a client ID to the developer computer device.
    Type: Application
    Filed: December 22, 2011
    Publication date: July 12, 2012
    Inventors: Nathaniel David Byrd, Jenny Qian Zhang, Eric G. Alger