Abstract: A compromised data exchange system extracts data from websites using a crawler, detects portions within the extracted data that resemble personally identifying information (PII) data based on PII data patterns using a risk assessment module, and compares a detected portion to data within a database of disassociated compromised PII data to determine a match using the risk assessment module. A risk score may be assigned to a data item within the database in response to determining the match. In some embodiments, URL data may also be detected in the extracted data. The detected URL data represents further websites that can be automatically crawled by the system to detect further PII data.

Abstract: In response to a request for risk assessment of a person-to-person (P2P) payment transaction, a risk assessment system returns a payer risk score, a payee risk score and a joint/fusion risk score. Risk scores are based on large amounts of data (including transaction data) provided by multiple financial institutions. The data is sorted and linked to individual people (e.g., common account holders), and assembled by a profile system into payee, payer and joint profiles for purposes of risk evaluation. A database associated with a profile system separately stores the profiles (and associated risk scores). Risk scores (payer, payee and joint) are provided for a transaction in response to a payer ID, a payee ID and transaction data.

Abstract: A method including receiving a funds transfer request initiated by a sender to facilitate a transfer of funds to a recipient. The funds can be transferred from a sender account of the sender at a sender financial institution to a recipient account of the recipient at a recipient financial institution. The funds transfer request can include a public token for the recipient but not including an account number of the recipient account at the recipient financial institution. The public token for the recipient can be confirmed as useable to contact the recipient based on one or more responses by the recipient to one or more authentication request messages provided to the recipient using the public token. The method also can include determining a private token for the recipient account using an information directory based on the public token. The private token can be embedded with information that identifies the recipient financial institution.

Abstract: A method, performable by a data broker, of securely transferring data without passwords may include registering an entity using a FIDO authentication process. The method may include associating, based on a receipt of first access token generated by a data provider using a first OIDC authorization process, the data provider with the entity. The method may include generating a second access token, using a second OIDC authorization process, associated with a data recipient. The method may include receiving a request to transfer requested data from the data provider to the data recipient. The request may include the second access token. The method may include transmitting the first long-lived token to the data provider for receiving the requested data. The method may include transmitting the requested data to the data recipient.

Abstract: A system includes a processor and a memory accessible to the processor. The memory may store instructions that, when executed by a processor, cause the processor to receive first data associated with a first owner and second data associated with a second owner from a data warehouse. The memory further includes instructions that, when executed, cause the processor to selectively filter the first data according to first data sharing permissions defined by the first owner to produce first filtered data, selectively filter the second data according to second data sharing permissions defined by the second owner to produce second filtered data, and provide an output including the first filtered data and the second filtered data to a data requester.

Abstract: A method including a system receiving, in real-time and through a computer network, a donation authorization from a donor via a donor user interface executed on a donor device of the donor. The donation authorization can comprise: a donation amount, a donor token for the donor, a donee first token for a donee, and/or donee information. The donor token can be uniquely associated with a donor account for the donor, and the donor account can be maintained by a sender financial institution. The donee first token can be uniquely associated with a donee account for the donee, and the donee account can be maintained by a receiver financial institution. The method further can include the system, after receiving the donation authorization, instructing or facilitating, in real-time and through the computer network, the receiver financial institution to post in real-time the donation amount to the donee account. Other embodiments are disclosed.

Abstract: A method including receiving a request based on a sender initiating a funds transfer, wherein the funds transfer is for the sender to make a payment to a non-financial institution. The sender has a sender account at a sender financial institution. The method also can include obtaining sender identifying information from the sender. The method additionally can include sending at least a recipient public identifier and a payment amount for the payment to the sender financial institution to cause the sender financial institution to send a funds transfer request to a computer-implemented funds transfer network to initiate the payment from the sender account at the sender financial institution to a recipient account at a recipient financial institution. The funds transfer request does not include an account number of the recipient account. The computer-implemented funds transfer network is operated by an entity that is different from the recipient financial institution and the sender financial institution.

Abstract: A method of transmitting a safety notification comprising: determining a user location of an entity; receiving event data including an event location of an event; determining a range from the event location; and where the user location is within the range, transmitting the safety notification to a user device regarding the event.

Abstract: A method for sharing digital identity data, the method comprising, using an identity network, receiving a sign-up request for a user from a relying party, providing, for display to a user interface of a user device, a list of identity providers, in response to receiving a selection of the identity provider from the list of identity providers, causing the user interface to display a login page associated with the selected identity provider, receiving, from the selected identity provider, a plurality of identity attributes associated with the user, providing, for display to the user interface, the plurality of identity attributes associated with the user, receiving consent from the user to share the plurality of identity attributes associated with the user with the relying party, and redirecting the user interface to a page associated with the relying party.

Abstract: A method for sharing digital identity data, the method comprising, using the identity network, receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device, generating an internal authorization code after receiving the consent, providing the internal authorization code to the user device, receiving the internal authorization code from the relying party, in response to receiving the internal authorization code, providing an internal access token to the relying party, receiving the internal access token from the relying party, and in response to receiving the access token, providing the plurality of identity attributes to the relying party.

Abstract: A compromised data exchange system extracts data from websites using a crawler, detects portions within the extracted data that resemble personally identifying information (PII) data based on PII data patterns using a risk assessment module, and compares a detected portion to data within a database of disassociated compromised PII data to determine a match using the risk assessment module. A risk score may be assigned to a data item within the database in response to determining the match. In some embodiments, URL data may also be detected in the extracted data. The detected URL data represents further web sites that can be automatically crawled by the system to detect further PII data.

Abstract: Disclosed herein is an identity network that provides a universal, digital identity for users to be authenticated by an identity provider for relying parties upon sign-in to the relying party. The identity network receives the sign-in request from a relying party for a user using a user device. The identity network can provide a session identifier to the relying party for the request and launch an identity provider application associated with the user via a software development kit in the relying party application. The user may sign-in to the identity provider via the software development kit, thereby authenticating the user for the relying party. Additionally, the identity provider may generate a risk validation score and provide it to the relying party that provides a confidence value that the user is validly using the user device and a risk score based on device activity on the identity network.

Abstract: A system includes a processor and a memory accessible to the processor. The memory may store instructions that, when executed by a processor, cause the processor to receive first data associated with a first owner and second data associated with a second owner from a data warehouse. The memory further includes instructions that, when executed, cause the processor to selectively filter the first data according to first data sharing permissions defined by the first owner to produce first filtered data, selectively filter the second data according to second data sharing permissions defined by the second owner to produce second filtered data, and provide an output including the first filtered data and the second filtered data to a data requester.

Abstract: A method of generating an input for a machine learning algorithm may include collecting data records. Each data record may include a plurality of categories of data. The method may include using vector quantization to partition the plurality of data records into a plurality of groupings. Each of the groupings may be based on one or more of the plurality of categories of data. The method may include generating a correlation score for each of the plurality of groupings. The correlation score may be indicative of whether a particular group is indicative of a given outcome.

Abstract: Methods of selecting an identity provider using an identity attribute sharing system may include accessing, by a user device, a page of a relying party. The methods may include receiving, by the user device, a selection to utilize an identity network to share a number of identity attributes with the relying party. The methods may include displaying, by the user device, a plurality of identity providers enrolled for use with the identity attribute sharing system. The methods may include receiving, by the user device, a selection of one of the plurality of identity providers. The methods may include providing access to a page of a selected identity provider.

Abstract: A method including receiving a request based on a sender initiating a funds transfer. The funds transfer is for the sender to make a payment to a non-financial institution. The sender has a sender account at a sender financial institution. The method also can include obtaining sender identifying information from the sender. The method additionally can include sending at least (a) the sender identifying information, (b) a recipient public identifier, and (c) a payment amount for the payment to the sender financial institution to cause the sender financial institution to (i) determine a funds availability of the sender account to initiate the funds transfer for the payment amount and (ii) send a funds transfer request to a computer-implemented funds transfer network to initiate the payment from the sender account at the sender financial institution to a recipient account at a recipient financial institution. The funds transfer request can include the recipient public identifier and the payment amount.

Abstract: A method of analyzing the effectiveness of a machine learning model may include executing a test procedure of a machine learning model comprising a plurality of input features. The machine learning model may include a lag feature associated with one of the plurality of input features. Executing the test procedure may include querying one or more data sources for historical data records associated with the input features. The lag feature may restrict a query for historical data records from at least one of the data sources to a predetermined time prior to a time of the test procedure of the machine learning model. Executing the test procedure may include receiving the historical data records from the one or more data sources at the machine learning model. Executing the test procedure may include generating an output of the machine learning model.

Abstract: A method of operating a machine learning target factory may include generating a plurality of machine learning targets. The method may include storing each of the plurality of machine learning targets on a network-attached database. The method may include receiving, at the network-attached database, a request for at least one of the plurality of machine learning targets for a machine learning model. The method may include providing the at least one of the plurality of machine learning targets to a computing device housing the machine learning model.

Abstract: A method including receiving, at a payment-messaging system from a biller financial institution, a request comprising a public consumer token of a consumer. The consumer provided the public consumer token to a biller system of a biller for a bill payment by the consumer to the biller. The biller system provided the public consumer token to the biller financial institution. The biller financial institution maintains a biller account of the biller. The acts also can include determining a risk metric representing a risk of using the public consumer token for the bill payment. The acts additionally can include sending the risk metric from the payment-messaging system to the biller financial institution. The biller financial institution sends the risk metric to the biller system to allow the biller to determine whether to assume liability for the bill payment.

Abstract: Methods of selecting an identity provider using an identity attribute sharing system may include accessing, by a user device, a page of a relying party. The methods may include receiving, by the user device, a selection to utilize an identity network to share a number of identity attributes with the relying party. The methods may include displaying, by the user device, a plurality of identity providers enrolled for use with the identity attribute sharing system. The methods may include receiving, by the user device, a selection of one of the plurality of identity providers. The methods may include providing access to a page of a selected identity provider.