Abstract: A centralized compliance platform usable to manage security policies associated with security objects, such as keys, secrets, and certificates. Such a centralized compliance platform performs discovery across the enterprise to obtain information about the varying security objects used by that organization, for example via application programming interface (API) connections to enterprise key and secret vaults, as well as certificate storage locations. The platform may generate a user interface at which compliance with enterprise policies may be monitored, which individual compliance issues for specific security objects able to the sorted, searched, and filtered. The platform may also generate one or more actions that may be taken in response to detected compliance issues, for example to generate alerts in response to noncompliant security objects or storage locations.

Abstract: A retransfer printing method and system where the peel-off of the print receptive material from the retransfer film is improved. The peeling-off or removal of the print receptive material from the retransfer film is improved by adhering the peel-off adhesive material to the print receptive material along a non-straight, non-linear leading edge and/or a non-straight, non-linear trailing edge along which the print receptive material is to be removed from the retransfer film. The use of the non-straight, non-linear leading edge and/or trailing edge helps to manage mechanical and thermal stresses and eliminates tears that may occur in the ribbon when the print receptive material is peeled from the retransfer film by the ribbon.

Abstract: A payment card data preparation and personalization platform provides a card production environment that provides a production context in which card products and card configurations are able to be defined, for example using various guided user interfaces. Furthermore, the platform implements a data preparation engine and a personalization engine. User interfaces guide definition of payment card products, and aspects of data preparation and personalization are independently executable. A product wizard assists with guided definition of a payment card product to be used within the platform.

Abstract: A centralized compliance platform usable to manage security policies associated with security objects, such as keys, secrets, and certificates. Such a centralized compliance platform performs discovery across the enterprise to obtain information about the varying security objects used by that organization, for example via application programming interface (API) connections to enterprise key and secret vaults, as well as certificate storage locations. The platform may generate a user interface at which compliance with enterprise policies may be monitored, which individual compliance issues for specific security objects able to the sorted, searched, and filtered. The platform may also generate one or more actions that may be taken in response to detected compliance issues, for example to generate alerts in response to noncompliant security objects or storage locations.

Abstract: A personalized identification document processing system includes a print station that includes a thermal print head and a print ribbon that is engageable by the thermal print head to thermally transfer material from the print ribbon to personalize the plastic identification document. The print ribbon includes a repeating sequence of panels of thermally transferrable material, with each sequence of panels including at least one panel of thermally transferrable color material followed by at least one panel of thermally transferrable radiation curable protective topcoat material. The color material and the topcoat material are applied to the plastic identification document in a printing process, with the topcoat material applied over at least a portion of the color material. The topcoat material is then cured and once cured enhances the durability of the color material.

Abstract: Card processing mechanisms and methods whereby after a card has been processed on one surface thereof at a card processing station such as, but not limited to, a card printing mechanism, the card can be recirculated back upstream of the card processing station along a return card travel path that is separate from the primary card travel path through the card processing station where the card can then be reintroduced back into the primary card travel path and transported through the card processing station a second time. As the card is being returned along the return card travel path, the card can be flipped over so that when the card is transported back through the card processing station, the opposite surface of the card can be processed.

Abstract: A method of delivering a one-time password to an entity is provided. The entity requesting the one-time password provides a public key of a public-private key pair to the authentication service. The entity can then submit a challenge request to the authentication service. The authentication service will generate a one-time password, and encrypt the one-time password with the public key. The encrypted one-time password is delivered to the entity via an unauthenticated channel.

Abstract: A process for integrating physical payment card and digital payment card issuance is provided. In example aspects, data flows for physical payment card creation are enhanced by adding digital payment card enrollment procedures that may be performed in association with issuance of the physical payment card, thereby allowing a mobile application to utilize a digital version of the physical payment card via coordination with a digitization service provided by a card bureau and/or external service.

Abstract: A security feature on a personalized plastic identification document such as a personalized plastic card and a plastic page of passport. The security feature includes a lens structure with a plurality of lenses, where the lens structure is formed using a laser at a location on the personalized plastic identification document to facilitate viewing of a security feature underlying the lens structure.

Abstract: Described herein are computerized methods and systems for detecting fraud during biometric identity verification. A mobile device captures video comprising a plurality of frames of a person's face. The mobile device extracts from the video frames comprising at least two frames of the person's face from different angles. The mobile device creates a reconstruction of the person's face using the extracted frames and derives signals associated with features of the person's face. The mobile device generates an embedding for each extracted frame using the extracted frames, the three-dimensional reconstruction, and the signals. The mobile device calculates, for each extracted frame, a fraud confidence value based upon the embedding for the extracted frame, attributes of the person's face, and image quality attributes of the extracted image. The mobile device computes a fraud detection decision for the extracted frames based upon the fraud confidence values and the embeddings.

Abstract: DOD ink delivery systems and methods are described herein that are used in DOD card printing systems of card processing systems for supplying ink for DOD printing on plastic cards. The ink delivery systems are configured to recirculate the ink without using a recirculation tank separate from an ink supply. The ink can be recirculated back into the ink supply or, when the ink supply is not present, the ink can be recirculated from a return header tank to a supply header tank.

Abstract: A process for performing a dedicated backup in a containerized environment is provided. In example aspects, a backup pod performs a backup process for an associated application. The backup pod is customized to contain backup tools that are specific to the backup process for the associated application. The backup pod works in connection with a backup manager that may interface with different backup pods customized for use in conjunction with different containerized applications. In some cases, the backup manager coordinates with each backup pod to provide backup processes for the different containerized applications.

Abstract: A ribbon core that is used with a consumable ribbon in a card processing system. The ribbon core can be a take-up core that takes-up used ribbon that has been used in a processing operation in the card processing system, or a supply core around which unused ribbon is wound and that is to be used in a processing operation in the card processing system. The ribbon core is configured to accommodate uneven material on the consumable ribbon.

Abstract: Printing multi-color images on non-vinyl plastic identification documents in identification document printing systems. A non-linear pixel density adjustment curve is used to adjust the pixel density data of a multi-color image to be printed which adjusts the power applied to the thermal print head. The use of a non-linear pixel density adjustment curve to adjust the pixel density data improves the quality of the resulting multi-color printed image, reduces mass transfer of the dye donor layer, and reduces breaking of the carrier film of the print ribbon.

Abstract: A configuration information management system is provided for secure update of dynamic configuration data in a containerized execution environment. A configuration container may be maintained within the environment separately from an application container hosting a secure enterprise application. The secure enterprise application may require secure configuration information for interaction via a secured connection with one or more remote endpoints from within the application container. The configuration container hosts a service that is configured to maintain the secure configuration information on behalf of the secure enterprise application, allowing the secure enterprise application to not persist secure configuration information within the application container.

Abstract: Methods and systems for measuring true positive and false positive matching rates for a given biometric engine within an operational environment are provided. In some examples, a test, or candidate, biometric engine may be executed, or utilized, in parallel with a production biometric engine, on biometric data that is available during live operation of the production biometric engine. Performance of a biometric engine can be assessed, as to both true positive and false positive matching. Additionally, where multiple biometric engines are assessed concurrently, a candidate biometric engine may be compared to performance of the production biometric engine to determine whether a change or upgrade is advisable.

Abstract: Methods and systems for cross-certification to bind together two cryptographic systems are disclosed. One method includes receiving, from a first certificate authority at a second certificate authority, a cross certificate request, the cross certificate request including an attribute unique to the first certificate authority. The method includes generating a cross certificate and embedding the hash value as a certificate extension within the cross certificate.

Abstract: Methods and systems for cross-certification to bind together two cryptographic systems are disclosed. One method includes receiving, from a first certificate authority at a second certificate authority, a cross certificate request, the cross certificate request including an attribute unique to the first certificate authority. The method also includes calculating a signature at the second certificate authority based at least in part on the attribute, and calculating a hash value based on a combination of the signature calculated at the second certificate authority and a key associated with the second certificate authority. The method includes generating a cross certificate and embedding the hash value as a certificate extension within the cross certificate.

Abstract: A proxy hardware security module (HSM) is disclosed, useable with an existing HSM for expansion of key storage for the HSM. The proxy HSM receives a signing request that is targeted to the HSM, and retrieves a wrapped version of a signing key from a storage location separate from the HSM. The proxy HSM provides the wrapped signing key to the HSM, and provides the signing request to the HSM. Upon receipt of a response to the signing request indicating successful execution of a signing operation by the HSM, the proxy HSM transmits a key destroying request to the HSM, and a confirmation message to the device from which the signing request was received. Upon completion of the signing request, the HSM does not retain the signing key.

Abstract: Techniques are described for reducing or eliminating a bow in a plastic card that results from applying radiation, such as UV radiation, to a surface of the plastic card to cure radiation curable material that has been applied to the surface. In one embodiment, after printing of all radiation curable material on the plastic card is completed, radiation is applied to both surfaces of the plastic card. After applying the radiation, the plastic card complies with ISO 7810:2019, Clause 8.10.