Abstract: A method to authorize a mobile payment for a transaction. The method includes receiving a facial image of a consumer who requests the mobile payment for the transaction using account information stored in a mobile device of the consumer, wherein the facial image is provided by a point-of-sale (POS) device while initiating the transaction on behalf of the consumer, receiving a verified facial image of an account holder, comparing the facial image of the consumer and the verified facial image of the account holder based on a pre-determined criterion to verify the consumer as the account holder, generating, in response to verifying the consumer as the account holder, an authorization of the mobile payment based on the account information, and sending the authorization to the POS device to complete the transaction.

Abstract: Data security jurisdiction zones are identified and data security policy data for the data security jurisdiction zones is obtained. The data security policy data for the data security jurisdiction zones is then automatically analyzed to determine allowed secrets data with respect to each of the identified data security jurisdiction zones. The allowed secrets data with respect to each of the data security jurisdiction zones is then automatically obtained and provided to resources in the respective data security jurisdiction zones, either from a central secrets data store or from an allowed secrets data store associated with each data security jurisdiction zone.

Abstract: The disclosed embodiments provide a system that provides a user interface of a native application for a portable electronic device. During operation, the system provides an environment for customizing the user interface using one or more custom views. The one or more custom views may include a set of user-interface components, a layout of the user-interface components, and a configuration of a user-interface component from the set of user-interface components. Next, the system enables use of the one or more custom views with the native application through the environment independently of a platform of the native application.

Abstract: An application is implemented in the production environment in which the application will be used. Two or more backend systems are used to implement different versions of the application using the production environment in which the application will actually be used and accessed. Actual user data is received. A first portion of the actual user data is routed and processed in the production environment using a first version of the application and a first backend system of the two or more backend systems. A second portion of the actual user data is also routed and processed in the production environment but using a second version of the application and a second backend system of the two or more backend systems. The results data is then analyzed to evaluate the various versions of the application in the production environment.

Abstract: A system and method for deploying predictive models is presented which personalizes application program functionality and user interface presentation to the consumer user. That personalization takes place within a decision engine that decouples decision models from application processes so that rapid deployment may take place. When a consumer user specific decision is required, the application program interacts with the decision model to trigger a consumer-user appropriate decision tailored to characteristics of the consumer user. New models are introduced into a decision process without requiring any application program change.

Abstract: A computer system generates first executable code in a first programming language based on common source code, where the first executable code is configured to execute at a server in the client-server environment. Then, the computer system executes the first executable to produce relational objects that constitute a tree hierarchy, where a given relational object defines a relationship between nodes and end points in the common source code. Next, the computer system generates second executable code in a second programming language based on the tree hierarchy, where the second executable code is configured to execute at a client in the client-server environment, and where the second executable code implements a subset of the common source code associated with the relational objects which is based on a user context.

Abstract: Methods, systems and computer program products for generating decision and meta rules used for determining which questions to present to a tax preparation application user and determine whether a tax situation or topic is applicable to the user. Decision and meta rule sets are generated for tax topics such that as inputs or answers to questions are received and no generated decision rule can be executed, at least one generated meta rule is execute to invalidate one or more generated decision rules. A next question is selected for presentation to the user based at least in part upon a meta rule involving at least one rule of the subset of potentially executable decision rules. Decision rules, and corresponding questions, are invalidated in response to input and when no decision rule can be executed to reduce user questioning while still making a determination whether a tax situation or topic applies.

Abstract: An encryption proxy is instantiated in a first computing environment and includes encryption proxy authentication data for identifying itself to a secrets distribution management system in a second computing environment as a trusted virtual asset to receive and cache encryption key data in a secure encryption key cache outside the second computing environment. The encryption proxy requests one or more encryption keys to be cached and is then provided encryption key data representing the requested encryption keys in the encryption key cache. The encryption proxy then receives application request data from a second virtual asset instantiated in the first computing environment requesting one or more encryption keys be applied to second virtual asset data. The encryption proxy then obtains the required encryption keys from the secure secrets cache and coordinates the application of the encryption keys to the second virtual asset data.

Abstract: Upon the initiation of a flow instance on a client computing device for navigating through a sequence of webpages, a client-side framework invokes various controllers and resolvers for dynamically creating views displayed in user's browsers. Resolvers resolve various resources required or desired for the webpages and obtain these various resources located on a remote host computer and transmits the obtained resources to the corresponding controllers to create one or more views as specified by the flow for display in the browser of the client computing device, without hard coding the locations of these resources in the webpages. The client-side framework provides an environment for specifying A/B testing to place a part of the flow under an A/B test so as to generate different customizable user experiences in navigating through the webpages without using custom views.

Abstract: A list of known names of entities is obtained along with entity name search data entered by searching parties in an attempt to identify one or more entities. The historical entity name search data entered by each individual searching party in a defined search time window is aggregated and analyzed to identify pairs of potentially related entity name searches that represent two attempts by the searching party to identify the same entity. The data representing the potentially related entity name searches is analyzed to identify a matched entity name in the list of known names that matches one of the entity names of the pair of potentially related entity name searches. Both of the entity names of the pair of potentially related entity name searches are then added to an alias list associated with the matched entity name.

Abstract: Disclosed are methods, systems, and articles of manufacture for implementing adaptive levels of authentication assurance according to sensitivity or criticality of information accessed or actions performed in a financial management system to enhance user experience and usability of the financial management system while providing adequate security to safeguard sensitive data. Various flow nodes are associated with one or more levels of assurance which are further associated with some authentication tokens of different authentication strengths. Users are usually first authenticated with a lower authentication strength token. Risk profiles may also be accessed to examine the users' requests for access for fraud detection or prevention purposes.

Abstract: A method for approving a commercial transaction using a customer generated fractal image. The method includes receiving, from a central authority, a seed, and receiving a request for the customer generated fractal image for payment of the commercial transaction with a merchant. In response to the request, payment device information is obtained and the customer generated fractal image is generated using the seed and the payment device information. The customer generated fractal image is displayed on the mobile device where it is scanned by the merchant to obtain a scanned fractal image. The scanned fractal image is sent, by the merchant, to the central authority. The central authority approves the commercial transaction by generating an expected fractal using a copy of the payment device information and the seed, and comparing the scanned fractal image with the expected fractal.

Abstract: A method for checklist sharing. The method includes monitoring actions of a user on a computer device, identifying an action of the user, identifying a transaction record based on the action, identifying a checklist based on the transaction record, sending a notification of the checklist to the user, receiving, from the user, a download request to download the checklist, and providing the download of the checklist to the user.

Abstract: Communications and data security policy data for two or more communications jurisdiction zones is obtained that includes data indicating allowed protocols for the respective communications jurisdiction zones. Data indicating a desired exchange of data between a first resource in a first communications jurisdiction zone and a second resource in a second communications jurisdiction zone is received/obtained. The first communications jurisdiction zone communications and data security policy data and the second communications jurisdiction zone policy data is automatically obtained and analyzed to determine an allowed type of secure communications security level for the desired exchange of data that complies with both the first communications jurisdiction zone communications and data security policy data and the second communications jurisdiction zone policy data.

Abstract: Document processing utilizing extraneous highlight added to the document. Sections or fields of a document including data utilized for document processing are marked or highlighted for processing. For example, a paper or printed document may be manually highlighted by a highlighter pen, or the highlight may be computer generated. An image of the highlighted bill is acquired. Highlighted sections within the image are identified, and bill data within the highlighted fields is extracted and utilized for bill processing.

Abstract: A request is received to access protected data from a data access requesting party. Authentication text to be read aloud is then generated and transferred to a first computing system associated with the data access requesting party. The authentication text is then displayed on the first computing system. The access requesting party is then requested to read the authentication text aloud and first audio data is obtained from a first audio detection capability associated with the first computing system and second audio data is obtained from a second audio detection capability associated with a second computing system associated with a data access requesting party. The authentication text is then compared to the first audio data and the second audio data and, if the data matches, the data requesting party is provided access to the protected data.

Abstract: Requirements, principles or guidelines of an accounting standard such as Generally Accepted Accounting Principles (GAAP) are transformed or codified into rules that specify how form, content and/or style of a certain portion of a financial statement, such as a header, should be configured while complying with the accounting standard. A rule engine compares attributes related to a financial statement and rules to determine which rule applies, and a selected rule specifies a header configuration. Relevant data received or retrieved from a source is used to generate or populate the header such that the header is automatically generated while complying with the accounting standard.

Abstract: A method for configuring a software application. The method includes obtaining user profiles each containing attribute values corresponding to a portion of an attribute list, identifying a user subset having same attribute values for a particular portion of the attribute list and forming an attribute signature, analyzing the configuration setting used by each user in the user subset to generate a statistical measure representing the user subset configuring the software application, matching a new user profile to the attribute signature of the user subset, presenting, to the new user and in response to the matching, the statistical measure representing the user subset configuring the software application, and receiving, in response to presenting the statistical measure, an approval from the new user to customize the software application, where the software application is automatically customized based on the statistical measure representing the user subset configuring the software application.

Abstract: A method and system for automating threat model generation and pattern identification for an application includes identifying components of an application, and receiving security information that identifies whether security measures were implemented within the application to secure the application against security threats. The method further receives an identification of external events, and receiving first patterns from one or more first virtual assets. A database is populated with the first patterns and the external events and then second patterns are received and compared to the first patterns. The method and system include distributing the identification of the one of the external events to the one or more second virtual assets, if the second patterns are similar to the first patterns, according to one embodiment.

Abstract: A method for connecting users of a software application, including registering a first version of the software application. The method further includes transmitting, to a matching server, a contact list including personally identifiable information of users of the software application. The method further includes receiving, from the matching server, a promoter contact selected, according to a promotion criterion, from the users of the software application in the contact list. The method further includes displaying the promoter contact.