Abstract: The invention relates to a system and method for accessing multiple accounts. According to one embodiment, the system includes an access device comprising a body in the form of a card; a processor housed in the body; a memory housed in the body and connected to the processor, wherein the memory stores information on the multiple accounts; a selection device housed in the body and adapted to allow a user to select one of the multiple accounts; a display housed in the body for displaying information identifying the selected account, wherein the processor is programmed to generate a signal to generate the information identifying the selected account in response to a user selecting one of the multiple accounts using the selection device; and a wireless transmitter and a wireless receiver housed in the body and connected to the processor.

Abstract: Methods for notification of application permissions are provided. In one aspect, a method includes receiving a first application programming interface (API) call by an installed application on a device, determining a sensitivity level of the received first API call, determining whether an author of the installed application is an authorized author by determining whether a Secure Sockets Layer (SSL) certificate used to deliver binary code to the device during the process of installing the application is owned by a trusted entity or has been validated by a trusted entity when the determined sensitivity level of the received first API call is associated with a restricted API classification, and allowing the received first API call access to its associated API when the author of the installed application is determined to be an authorized author.

Abstract: The disclosed embodiments include systems and methods for executing a point of sale deposit. In one embodiment, a system may include one or more memory devices storing software instructions, and one or more processors configured to execute the software instructions to receive transaction information related to a point of sale deposit from a client device, and generate a pending deposit transaction based on the transaction information. The one or more processors may be further configured to execute the software instructions to receive a first transaction token from the client device, receive a second transaction token from a third-party device, match the first transaction token to the second transaction token, and complete the pending deposit transaction based on the match.

Abstract: A point-of-sale system is provided that permits users to self-manage prepaid debit cards. Such a system may be capable of identifying and managing a number of different prepaid debit cards provided by different card issuers. The system may permit, for example, a user to purchase, activate, load funds, or perform other management operations with such cards. The system may also enforce restrictions associated with particular card types, and follow process flows for activating and performing other operations of such cards. The system may also be easily extendible to other types of prepaid cards through established card network relationships.

Abstract: A virtual wallet system provides embedded controls to a merchant for association and display with merchant artifacts on a merchant interface. Merchant artifacts may include begin-of-purchase flow items such as coupons, and end-of-purchase flow item such as tickets. When the embedded control displayed on the merchant interface is selected by a user, a save artifact request is communicated to a virtual wallet server allowing the user to instantly save an instance of the merchant artifact to the user's corresponding virtual wallet account.

Abstract: A method, a system, and a computer program product are provided for wireless establishment of identity via bi-directional radio-frequency identification (RFID). The method is implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions operable for sending device data including at least a username and a password to a transceiver. The method also includes receiving an identifier of an access point in a wireless network from the transceiver, the transceiver sending the device data to the access point via a security server. The device data is sent to the access point based on the identifier of the access point, the access point establishing a secure connection to the computer infrastructure based on the device data received from the transceiver and the computer infrastructure.

Abstract: An electronic money server groups a parent who owns a parent mobile phone and children who own child mobile phones to be registered as a family, and credit information of the parent is also registered. When the child accesses the electronic money server by using the child mobile phone and specifies a money amount to request family charge, the electronic money server requests the parent mobile phone for permission of the family charge. When the parent grants the family charge, the electronic money server allows the parent mobile phone to decrease a value by the money amount specified by the child and to make the family settlement, and allows the child mobile phone to increase the value by this money amount and to effect the family charge. Further, the child mobile phone can accept issue of credit from a credit server on credit of the parent, thereby effecting the family charge.

Abstract: A device and a secure element for conducting a secured financial transaction are disclosed. The device comprises a central processing unit; a communication interface for establishing a communication between the device and a financial institution related to a financial account; an interface for acquiring data relating to the financial account; the secure element for processing at least a portion of the data relating to the financial account acquired by the interface; and control logic for acquiring a purchase amount to be debited from the financial account and for obtaining a transaction authorization from the financial institution related to the financial account, the transaction authorization being based, at least partially, on data processed solely by the secure element independently of data processed by the central processing unit. A method of conducting the secured financial transaction, and a computer program product for execution by the secure element are also disclosed.

Abstract: A key ceremony application creates bundles for custodians encrypted with their passphrases. Each bundle includes master key share. The master key shares are combined to store an operational master key. The operational master key is used for private key encryption during a checkout process. The operational private key is used for private key decryption for transaction signing in a payment process. The bundles further include TLS keys for authenticated requests to create an API key for a web application to communicate with a service and to unfreeze the system after it has been frozen by an administrator.

Abstract: Devices, systems, and methods for securely converting a user's existing static payment card data into dynamic card data that can be authenticated by card issuers or by a stand-in service provider, such as a payment network or processor without requiring the card issuers to make infrastructure changes. The dynamic data can be provisioned onto a magnetic secure transmission device (MST) either directly from a card issuer or using a swiper type device. Devices, systems, and methods are also disclosed for securely provisioning a dynamic card onto the MST by the card issuer. These dynamic cards may be used to transmit modified one-time-use card track data from the MST to a point of sale using a dynamic-CVV methodology to provide higher levels of security during a transaction.

Abstract: The disclosed embodiments include systems and methods for executing a point of sale deposit. In one embodiment, a system may include one or more memory devices storing software instructions, and one or more processors configured to execute the software instructions to receive transaction information related to a point of sale deposit from a client device, and generate a pending deposit transaction based on the transaction information. The one or more processors may be further configured to execute the software instructions to receive a first transaction token from the client device, receive a second transaction token from a third-party device, match the first transaction token to the second transaction token, and complete the pending deposit transaction based on the match.

Abstract: The present invention relates particularly to a method and system for consolidating a plurality of a consumer's payment and non-payment source accounts into a consolidated platform with a customer identification or available proxy account numbers that can be assigned to source accounts. The source accounts can be, for example, credit card accounts, ATM accounts, debit card accounts, demand deposit accounts, stored-value accounts, merchant-loyalty card accounts, membership accounts, and identification card numbers. The consumer can access and modify any of the source accounts and manage funds across the source accounts by accessing the consolidated platform with a single access device or mode.

Abstract: A computer implemented method and apparatus for version independent Point of Sale Activation (POSA) product download. The method comprises accessing a database, wherein the database comprises a plurality of entries associated with a plurality of Point of Sale Activation (POSA) cards available for purchase at a retail store; retrieving, from the database, a plurality of entries associated with a previous version of a software product, wherein the previous version of the software product has not been redeemed; generating a serial number for each retrieved entry, wherein each serial number is associated with a current version of the software product; and updating, in the database, each retrieved entry with the generated serial number.

Abstract: A method for facilitating trusted processing of multiple forms for use with a document banking system, comprising: receiving a selection of an Auto-fill option and a form from a computing device, an account holder selects the Auto-fill option, the form including fillable field(s); authenticating the account holder based on login credential(s), the account holder has a document banking account including documents within the banking system; searching a form template for the form in the banking system, the form template including at least one fillable field similar to the fillable fields of the form; extracting a value corresponding to the at least one fillable field, the value being extracted from the document(s) of the account holder; and filling the form by overlaying the extracted value on the fillable field(s) of the form, the filled form being displayed along with a status information for the fillable field(s) at the computing device.

Abstract: Systems and methods for facilitating a purchase over a network. A computer of a banking institution stores personal information from a buyer. The computer uses the personal information to assign and store an account identifier and alias information for the buyer. The computer uses the buyer's alias information and a seller's existing payment process to complete a purchases such that the true identity of the buyer is not revealed to the seller.

Abstract: A certified identification system for a subject is described. The system has a certification station configured to issue first identification means representing the subject, second identification means, suitable for identifying at least one identification station, and configured to be associated with the subject, wherein the identification station is configured to combine the identification means and the first code of the second identification means, issuing a unique identification code comprising first data, a second code and a first code, wherein the identification station (4) further includes an encapsulation module configured to encapsulate the identification data so that they are presented as compact data.

Abstract: A user device configured to connect to a mobile telephony network and associated with an identification number in the mobile telephony network. The user device selects a method of paying for the shopping basket on a first page of the merchant server; upon selection, the user device sends a payment request to a payment validation module, which is enriched with identification data of the user device; the user device receives a local authentication request message from the payment validation module over the mobile telephony network; on receiving the local authentication request message, the user device triggers execution of an operation of locally authenticating a user of the user device; the user device sends a local authentication response message to the payment validation module; and the user device is redirected by the payment validation module to a second page of the merchant server giving the result of the payment transaction.

Abstract: A method that includes receiving, from a user device, a request for a listing of merchants; in response to receiving the request for a listing of merchants, sending, to the user device, data describing one or more merchants and respective initial geographic locations of the one or more merchants; receiving, from the user device, a user request for updating a geographic location of a particular merchant in the one or more merchants; sending a request for an updated geographic location to a computing device of the particular merchant; receiving, from the computing device of the particular merchant, data describing an updated geographic location of the particular merchant; and providing, to the user device, data describing the updated geographic location of the particular merchant.

Abstract: A messaging solution that provides for creating and embedding gift cards into a text message or multi-media message. The inclusion of the gift card may be invoked when a user is sending a greeting card or, a user may directly invoke the sending of a gift card, or similarly a subscription.

Abstract: Provided is a method and a GUI-based software application that acts as a wallet with network interconnectivity for enabling a user to securely and seamlessly conduct transactions with his or her online financial transaction program by means of a computer or a wireless handheld device without having to depend on an Internet browser.

Abstract: An independently verifiable system and method for the exchange of a sequence of tokens corresponding to units of currency. A credit or unit of currency is represented by a digital image referred to as a graphical token which may be displayed on an electronic viewing device or printed on paper. Each token contains a digital code that uniquely identifies the previous graphical token in a series of exchanges. After generating a token, a first user provides that token to a second user in order to initiate an exchange. The second user may choose to verify the validity and currency of the token before accepting the token. Either user may choose to register the token and any parameters associated with the exchange with a registry system. Once a user accepts a token, they may choose to issue a new token in the sequence. They may also choose to redeem the token for the credit associated with a sequence of tokens.

Abstract: A data processing control comprising an outgoing payment request control object having 1) user-selectable data records, each user-selectable data record having one or more associated fields, 2) graphical attributes to allow the user-selectable data records to be displayed, and 3) functional attributes to allow the user-selectable data records to be submitted for payment authorization by a third party. An incoming authorized payment control object having 1) authorized payment data records, each of the authorized payment data records having one or more associated fields, 2) graphical attributes to allow the authorized payment data records to be displayed, and 3) functional attributes to allow the authorized payment data records to be submitted for fund transfer in a single bundled payment transaction. The outgoing payment request control object and the incoming authorized payment control object are generated in a user interface for a healthcare services provider.

Abstract: Systems, methods, and computer program products are provided for managing applets. A first request to personalize the first applet is received over a communications network. A second request including a command requesting at least a portion of the second applet data is communicated to the second applet. At least a portion of the second applet data is communicated to the first applet. One or more values of the first applet data are replaced with one or more values of at least the portion of the second applet data.

Abstract: Embodiments disclosed herein relate to systems, methods, and computer program products for a system for providing a multi-currency token. The system, method, and computer program product are configured to receive a request for a multi-currency token, wherein the multi-currency token is associated with at least two financial institution partners; determine a value of the multi-currency token; establish currency conversion parameters for the multi-currency token based on at least one of the value of the multi-currency token and a conversion rate between currencies associated with the at least two financial institution partners; determine that a transaction is being performed with the multi-currency token, the transaction associated with a local currency; and complete the transaction with the multi-currency token in the local currency when the local currency is a currency associated with at least one of the financial institution partners.

Abstract: Embodiments disclosed herein relate to systems, methods, and computer program products for a system for providing a virtual value token. The system, method, and computer program product are configured to receive a request for a token associated with a virtual value; generate the token associated with the virtual value, wherein the virtual value is funded via a known currency; determine that a user is initiating a transaction using the token; determine a local currency for the transaction; convert, using a computing device processor, at least a portion of the virtual value into a converted amount in the local currency; and complete the transaction using the converted amount of the token. The virtual value may be based on a defined value, such as a known amount on a specific day, or a relative value, such as the current value of an underlying asset.

Abstract: Systems and methods are provided to facilitate online transactions via mobile communications. In one aspect, a system includes an interchange coupled with a data storage facility. The interchange includes a common format processor and a plurality of converters to interface with a plurality of different controllers of mobile communications. The converters are configured to communicate with the controllers in different formats and to communicate with the common format processor in a common format. The common format processor is to instruct a first controller of the controllers, via a first converter of the converters, to communicate with a mobile phone at a mobile phone number of a user to confirm a request to add funds to an account of a user, if the user has not yet provided an advance authorization. If the user has provided the advance authorization, the interchange skips communications with the mobile phone to confirm the request.

Abstract: Embodiments of the invention relate to an invention for accessing a remotely located mobile device of a user based on certain events is provided. The system, method, and computer program product are configured to: (a) monitor one or more transaction involving a transaction vehicle of a user; (b) determine a physical location of a transaction vehicle based at least partially on the one or more transactions; (c) determine a geographic location of a mobile device of the user, wherein the mobile device is associated with the transaction vehicle; (d) determine whether or not the transaction vehicle of the user and the mobile device of the user are co-located; and (e) reconfigure one or more applications accessible to the mobile device or one or more functional features of the mobile device based at least partially on determining that the mobile device and the transaction vehicle of the user are not co-located.

Abstract: Embodiments of the invention relate to an invention for accessing a remotely located mobile device of a user based on certain events is provided. The system, method, and computer program product are configured to: (a) monitor one or more transaction involving a transaction vehicle of a user; (b) determine a physical location of a transaction vehicle based at least partially on the one or more transactions; (c) determine a geographic location of a mobile device of the user, wherein the mobile device is associated with the transaction vehicle; (d) determine whether or not the transaction vehicle of the user and the mobile device of the user are co-located; and (e) reconfigure one or more applications accessible to the mobile device or one or more functional features of the mobile device based at least partially on determining that the mobile device and the transaction vehicle of the user are not co-located.

Abstract: A user captures an image of a payment card via a user computing device camera. An optical character recognition system receives the payment card image from the user computing device. The system performs optical character recognition and visual object recognition algorithms on the payment card image to extract text and visual objects from the payment card image, which are used by the system to identify a payment card type. The system may categorize the payment card as an open-loop card or a closed-loop card, or as a credit card or a non-credit card. In an example embodiment, the system allows or prohibits extracted financial account information from the payment card to be saved in the digital wallet account based on the determined payment card category. In another example embodiment, the system transmits an advisement to the user based on the determined payment card category.

Abstract: Systems and methods for retrieving and displaying merchant payment preferences to a user are described. When a user is at or near a merchant location, a service provider determines the type or form of electronic payment the merchant can accept. The service provider then generates the specific type or form of payment for display or communication to a user device. The user is then able to present a type of payment accepted by the merchant and pay for a purchase.

Abstract: Methods and systems for facilitating electronic transactions on a user device are described. User-friendly graphical user interfaces (GUIs) are provided with minimal text and more pictures and images. The GUIs detect or receive various gesture inputs, such as swiping, tapping, and dragging and dropping, and display a corresponding screen or page. The gesture inputs allow a user to select or specify payers/payees, transaction amounts, and funding sources, without having to type numbers or letters.

Abstract: Recording, analyzing and categorizing of user interface input via touchpad, touch screens or any device that can synthesize gestures from touch and pressure into input events. Such as, but not limited to, smart phones, touch pads and tablets. Humans may generate the input. The analysis of data may include statistical profiling of individual users as well as groups of users, the profiles can be stored in, but not limited to data containers such as files, secure storage, smart cards, databases, off device, in the cloud etc. A profile may be built from user/users behavior categorized into quantified types of behavior and/or gestures. The profile might be stored anonymized. The analysis may take place in real time or as post processing. Profiles can be compared against each other by all the types of quantified behaviors or by a select few.

Abstract: A method and a corresponding device for authenticating a user for access to protected information, the method comprising generating a behavioral user profile associated with a first user known to be a legitimate user of the protected information, obtaining from a second user, using a behavioral input device associated with a second computing device, a behavioral user sample, storing the behavioral user sample, associated with the second user, in a temporary user profile, comparing the behavioral user sample of the second user to the behavioral user profile, and if the behavioral user sample does not match the behavioral user profile contacting the legitimate first user and receiving from the legitimate first user information regarding the legitimacy of the second user and based on the information received from the first user, providing a response to the second user and updating the user profile.

Abstract: A method and a corresponding device for authenticating a user for access to protected information, including at a registration stage, generating a biometric user profile and a behavioral user profile associated with a user to be authenticated, and an authenticating stage, obtaining from the user a biometric user sample and a behavioral user sample, comparing the biometric user sample and the behavioral user sample to the biometric user profile and to the biometric behavioral profile associated with the user, and if the biometric user sample and the behavioral user sample match the biometric user profile and the biometric behavioral profile, respectively, enabling the user to access the protected information.

Abstract: A technique perform authentication. The technique involves receiving an authentication request from a user operating a client apparatus (e.g., the user's smart phone). The technique further involves performing, in response to the authentication request, an analysis of a set of credentials obtained from the client apparatus. The set of credentials includes an authentication factor acquired by the client apparatus from an electronic card in possession of the user (e.g., an integrated circuit credit card). The electronic card is separate from the client apparatus. The technique further involves outputting, based on the analysis of the set of credentials, an authentication result indicating whether the processing circuitry deems the user operating the client apparatus to be authentic.

Abstract: Configuring a shareable widget interface to mobile wallet functions includes disposing a wallet module in a memory of a client device, and disposing a wallet companion applet in a secure element accessible by the client device, wherein the wallet companion applet facilitates access by at least one other applet and at least one wallet module to content that is stored in the secure element via a mobile wallet function sharable interface.

Abstract: There is provided an information processing apparatus, including a display control section which causes a prescribed pattern to be displayed on a screen in a state where a device having a camera is arranged so that the camera faces the screen, and a position acquisition section which acquires a relative position of the camera with respect to the screen determined based on an image of the pattern captured by the camera.

Abstract: Configuring a plurality of security isolated wallet containers on a single mobile device includes configuring at least one mobile transaction platform-specific application programming interface for facilitating access to secure mobile transaction platform resources by a wallet container executing on a mobile device; disposing a plurality of distinct wallet containers in a memory of the mobile device, wherein each wallet container interfaces with secure mobile transaction platform resources via the at least one application programming interface; disposing at least one service provider-specific wallet in each of the plurality of distinct wallet containers; and enforcing service-provider specific wallet security by a distinct wallet container accessing a portion of the secure mobile transaction platform resources via the at least one application programming interface.

Abstract: Embodiments allow loading and reloading contactless payment devices using only a contactless terminal interface, while providing user authentication. The contactless terminal interface could be at a merchant POS location, kiosk, or embedded or attached to a personal computing device with contactless read/write capability such as a personal computer or mobile phone or Internet device.

Abstract: Systems, methods, and computer-readable media for analysis of call detail records to determine unauthorized use of a cellular network are provided. The transferred data amounts from call detail records may be compared to categorized data usage associated with a portable user device to determine uncategorized data usage by the portable user device. The uncategorized data usage and the categorized data usage may be analyzed to determine unauthorized use of the cellular network.

Abstract: A personal powered proximity payment device that can be owned by or issued to an individual user is provided. The device is a non-ISO card device that includes an internal dual-mode (contact and contactless) chip card coupled to a display and a robust PIN entry or biometric reading means. The device provides proximity payment functions, and optional proximity payment on/off and local pre-purchase account holder verification functions to the individual user.

Abstract: A network device receives registration information for a vendor application that selectively provides access to toll-free data for users. The registration information include a vendor account to which data charges can be billed. In response to the registration information, the network device sends a token corresponding to the vendor application. The network device receives, from a vendor device, an application programming interface (API) call that includes the token, a data flow identifier, and flow information. The flow information identifies a particular data flow directed to a copy of the vendor application residing on a user device. The network device validates the token; causes data charges for particular data packets, corresponding to the flow information, to be billed to the vendor account; and sends, to the vendor device, a response to the API call that includes the data flow identifier.

Abstract: The present disclosure is directed to a system and method for wirelessly executing financial transactions. A payment card includes an interface, a communication module, secure memory, a user-interface module, and a processing module. The interface connects to a slot of a mobile host device. The communication module wirelessly receives RF signals from and transmits RF signals to a retail terminal. The secure memory stores user credentials and a payment application used to execute financial transactions with the retail terminal. The user credentials and the payment application are associated with a financial institution. The user-interface module presents and receives information through the GUI of the mobile host device. The processing module executes the payment application using the user credentials in response to at least a transaction request received by the communication module and transmits a transaction response to the retail terminal based, at least in part, on the executed application.

Abstract: The invention discloses a method for loading double e-wallets, relating to the information security field.

Abstract: The MULTI-DIRECTIONAL WALLET CONNECTOR APPARATUSES, METHODS AND SYSTEMS (“W-CONNECTOR”) facilitates the enrollment of payment accounts in a consumer's virtual wallet. The consumer may be logged into their payment account issuer's web site and designate one or more payment accounts for enrollment in a virtual wallet. The issuer may then share account, billing and/or other relevant information with the virtual wallet provider to facilitate the enrollment of the designated payment accounts in the virtual wallet. The W-CONNECTOR may also be configured to facilitate the creation and funding of pre-paid accounts in a consumer's virtual wallet.

Abstract: The present invention discloses a system and methods for biometric security using multiple biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. In yet another embodiment, the present invention discloses methods for proffering and processing multiple biometric samples to facilitate authorization of transactions.

Abstract: A point of sale (POS) terminal is programmed to execute EMV transactions by interaction with payment devices in accordance with a standard EMV transaction flow. An EMV transaction is commenced at the POS terminal with a particular payment device. The POS terminal receives a request from the payment device to interrupt the EMV transaction. The POS terminal responds to the request by interrupting the EMV transaction and taking an action indicated by the request. The action is not required for execution of the standard EMV transaction flow.

Abstract: Universal cards are used in place of all the other traditional cards which a person may want to carry. The universal card can include a short range communications transceiver to communicate with a mobile device. The mobile device can include a user interface and an e-wallet application so that the user can interface with the e-wallet application for programming the universal card via the short range communication link. Once programmed, the universal card emulates a function of a traditional card.

Abstract: Recording, analyzing and categorizing of user interface input via touchpad, touch screens or any device that can synthesize gestures from touch and pressure into input events. Such as, but not limited to, smart phones, touch pads and tablets. Humans may generate the input. The analysis of data may include statistical profiling of individual users as well as groups of users, the profiles can be stored in, but not limited to data containers such as files, secure storage, smart cards, databases, off device, in the cloud etc. A profile may be built from user/users behavior categorized into quantified types of behavior and/or gestures. The profile might be stored anonymized. The analysis may take place in real time or as post processing. Profiles can be compared against each other by all the types of quantified behaviors or by a select few.

Abstract: The invention proposes several improvements related to the management of secure elements, like UICCs embedding Sim applications, these secure elements being installed, fixedly or not, in terminals, like for example mobile phones. In some cases, the terminals are constituted by machines that communicate with other machines for M2M (Machine to Machine) applications.