Abstract: There is provided an authentication system for validating identity credentials of a user attempting to access a resource provided by a remote resource provision system. The authentication system includes an input configured to receive, from the resource provision system, an authentication request comprising a cryptographic representation of digital identity data of the user and an associated token identifier, where the digital identity data comprises at least one image of an identity credential of the user. The system also includes a processor configured to: determine a pre-stored cryptographic identifier corresponding to the token identifier; and compare the received cryptographic representation with the pre-stored cryptographic identifier.

Abstract: A method of performing a contactless transaction between a payment device and a terminal is described. The method comprises establishing a data connection between the payment device and the terminal and then establishing if the payment device and the terminal both support an enhanced security architecture. If they do not, they will then perform the contactless transaction according to a basic transaction flow using a first cryptographic system. If they do, they will perform the contactless transaction according to an enhanced transaction flow using a second cryptographic system. The first cryptographic system and the second cryptographic system comprise different asymmetric cryptographic systems. Suitable payment devices and terminals, and methods at the payment devices and terminals, are described.

Abstract: The disclosure describes systems and techniques for assessing risk of an open Wi-Fi network, at a consumer's request, before the consumer performs a transaction. The system receives a Wi-Fi network risk assessment request associated with a Wi-Fi network connection of a mobile device. Upon receiving the request, the system retrieves connection-related data from the mobile device. The connection-related data is associated with the Wi-Fi network connection. The system performs a Wi-Fi risk assessment of the Wi-Fi network connection. The system transmits a result of the risk assessment to the mobile device for presentation on the mobile device. The system also transmits the result of the risk assessment to an issuer server. The issuer server is associated with a payment account of the consumer. Moreover, the system transmits a step-up authentication alert to the issuer server.

Abstract: A method for privacy control in release of protected information includes: storing, in a memory of a first computing system, a plurality of data pairs, each of the plurality of data pairs including at least a decryption key and a registration identifier; receiving, by a receiver of the first computing system, a data request, the data request including at least a user identifier of a user associated with the data being requested in the data request; receiving, by the receiver of the first computing system, a registration identifier of the data being requested in the data request; identifying, by a processor of the first computing system, a data pair based on the registration identifier; and transmitting, by a transmitter of the first computing device, a decryption key of the identified data pair to a second computing system.

Abstract: The disclosure herein relates to methods and systems of that facilitate instant payment of invoices based on automatic, intelligent, predictions that a buyer will approve an invoice without express input by the buyer. For example, a system may determine a probability that an invoice will be approved for payment by a buyer with express approval from the buyer. Once an invoice is automatically approved for payment, the system may employ various automated systems to facilitate payment to suppliers without the need for suppliers to extract virtual card data or other payment information from email payment requests or other invoice payment requirements to receive payment. For example, the system may generate calls to automatically generate virtual card numbers on behalf of buyers and submit payment messages for payments to suppliers using the virtual card numbers.

Abstract: The disclosure relates to methods and systems of generating a platform-agnostic identification of an entity through rules-based computational modeling of entity relationships. For example, the platform-agnostic identification of an entity may be used to identify an acquirer entity across different data platforms, such as payment networks, that each assign respective acquirer identifiers to the acquirer entity. The computational modeling may generate a mapping between a first acquirer identifier assigned by a first payment network to the acquirer entity and a second acquirer identifier assigned by a second payment network to the acquirer entity. The mapping may be based on an anchor value that is associated with both the first acquirer identifier and the second acquirer identifier. The mapping may be validated by multi-validation rules and/or issuer-validation rules that reduce false positive results that may occur through computational modeling.

Abstract: A method for moderation in a permissioned blockchain using a hash-oriented scheme includes: storing a blockchain including a most recent block; receiving transaction data values; receiving a first reference value and a second reference value; generating a first hash value by hashing the first reference value; generating a block proof including the first hash value, a second hash value, a third reference value, and a block value; verifying a block header of the most recent block using the block proof; receiving a new block value; generating a new block header including the first reference value, the second reference value, a fourth reference value, and the new block value; generating a new block for the blockchain including the new block header and the transaction data values; and transmitting the new block to one or more additional nodes associated with the blockchain.

Abstract: Systems, methods, and non-transitory computer readable media relate to smartcard biometric enrollment. In an embodiment that does not require a user to visit a central location to provide fingerprint images, an activation code corresponding to a unique ID that uniquely identifies a user of a service is generated and sent to the user. In response, at least one finger image is received from a user device. The image is processed to isolate a fingerprint image, which is used to generate a biometric template that is sent to a smartcard manufacturer and used to configure a smartcard for biometric authentication of the user. In another embodiment, a kiosk/ATM provides smartcard biometric enrollment by detecting a smartcard in the smartcard reader, verifying an ID of a user associated with the smartcard, capturing a biometric image from the user, processing the biometric image to generate a biometric template, and storing the biometric template on the smartcard.

Abstract: A method for generation of an application cryptogram for use in a payment transaction includes: storing, in a first memory, a single use key associated with a transaction account; electronically transmitting the single use key to a processing server; receiving an encrypted session key and a server encryption key from the processing server; executing a first query to store the encrypted session key in the first memory and a second query to store the server encryption key in a second memory; decrypting the encrypted session key using the server encryption key; generating an application cryptogram based on the decrypted session key; and electronically transmitting the generated application cryptogram for use in a payment transaction.

Abstract: A method for ensuring precedence for the processing of a blockchain transaction to prevent loss of cryptographic currency includes receiving a new blockchain transaction by a blockchain node in a blockchain network, confirming the new blockchain transaction including identifying a precedence transaction that was previously conducted and stored in the blockchain that involves both blockchain wallets included in the new blockchain transaction, including the new blockchain transaction in a new block that is generated, and distributing the new block to additional nodes in the blockchain network for confirmation and addition to the blockchain.

Abstract: A computer-implemented method of providing enriched transaction data for a transaction requiring an authorization is provided, the transaction performed using a computer system having a processor and a memory device. The method includes storing transaction data received from an input channel, the transaction data including a transaction identifier. An execution plan is retrieved based at least in part on the transaction identifier. The transaction data is processed across an enrichment processor based on the execution plan to generate at least one fraud score for the transaction. The transaction data is enriched to include at least one of the fraud score and an enriched data object. The enriched data is transmitted to an authorizing party for authorization.

Abstract: A method is provided for performing a transaction. The method includes, in an offline mode, payee and payer devices communicating to determine transaction details including a transaction amount. A payer payment application generates a transaction request including request transaction details, stores the transaction request, and updates a payer available funds amount at least partially in accordance with the transaction amount. A payee payment application generates a transaction confirmation including confirmation transaction details, stores the transaction confirmation, and updates a payee available funds amount at least partially in accordance with the transaction amount.

Abstract: A secure token (ST) system including at least one ST computing device to provision data using secure tokens over a network is provided. The ST computing device is configured to receive first customer data from a credit issuer computing device, the first customer data including at least one or more account identifiers associated with a customer and a social security number (SSN) associated with the customer. The ST computing device is also configured to hash the SSN, wherein the hashed SSN includes a hash value, assign a unique identifier to each of the one or more account identifiers, and generate a secure token by associating the hash value to each unique identifier. The ST computing device is further configured to store the secure token within the database, and transmit the secure token to at least one of the credit issuer computing device and a third party computing device.

Abstract: Provided are systems and methods for configuring and implementing a loan repayment based on transactions output from a merchant POS terminal. In one example, the method may include receiving point-of-sale (POS) transactions from a merchant POS terminal, receiving, via an application programming interface (API), a request to allocate a portion of the POS transactions from the merchant POS terminal to a lender payment account, depositing the POS transactions received from the merchant POS terminal into a merchant payment account during a settlement process, and automatically triggering a payment transaction that pushes the portion of the POS transactions from the merchant payment account to the lender payment account.

Abstract: A data center rack assembly includes a rack, an electronic device, and an adjustable air duct. The rack includes a frame defining opposite first and second rack sides spaced apart in a longitudinal direction. The electronic device presents an intake side configured to receive air therethrough for passage into the electronic device. The electronic device is mounted to the frame such that the intake side is disposed intermediately between the rack sides and is spaced from the first rack side to define a longitudinal dimension therebetween. The duct includes relatively shiftable first and second duct sections that extend in the longitudinal direction to cooperatively present an adjustable longitudinal duct length, and a drive mechanism operably coupled to the first and second sections to control relative shifting of the sections in the longitudinal direction to thereby adjust the longitudinal duct length to correspond with the longitudinal dimension.

Abstract: Methods and server systems for detecting fraudulent transactions are described herein. Method performed by server system includes accessing base graph including plurality of nodes further including plurality of labeled nodes and unlabeled nodes. Method includes assigning via Graph Neural Network (GNN) model, fraudulent label or non-fraudulent label to each unlabeled node based on the base graph. This assigning process includes generating plurality of sub-graphs based on splitting the base graph and filtering these sub-graphs via Siamese Neural Network model based on pre-defined threshold values. Then, the GNN model generates plurality of sets of embeddings based on plurality of filtered sub-graphs. Further, aggregated node embedding is generated for each node and then, final node representation for each node is generated via dense layer of GNN model. Then, fraudulent label or the non-fraudulent label is assigned to each unlabeled node of plurality of unlabeled nodes based on final node representation.

Abstract: A firewall configuration server includes a processor in communication with a memory device. The processor is configured to: receive, from an admin computer device, group-based firewall rules, wherein the group-based firewall rules identify a plurality of groups of virtual machines (VMs) executable on a VM server system and a respective set of firewall policies to be applied to the VMs in each group; receive, from a virtual machine (VM) server system, group membership data, the group membership data identifying the plurality of groups and a respective list of VMs associated with each group; parse the group membership data according to the group-based firewall rules to generate VM-specific firewall rules; and transmit the VM-specific firewall rules to a firewall, wherein each VM-specific firewall rule is configured for application by the firewall to communication requests identifying an IP address of one of the VMs.

Abstract: A method and system for managing payment transactions for a merchant using a computing device coupled to a memory device is described. Each transaction is initiated by a consumer using a payment card. The method includes receiving a registration request from a candidate merchant for enrollment within a manager module wherein the registration request includes registration data associated with the candidate merchant, executing a primary approval process using at least some of the registration data, and transmitting an account request message requesting an opening of a merchant account for the candidate merchant with an acquiring bank upon approval. The method further includes receiving, in real-time, merchant account data associated with the candidate merchant from the acquiring bank upon approval by a secondary approval process wherein the candidate merchant becomes a registered merchant upon the secondary approval.

Abstract: Systems and methods are provided for implementing stand-in network identities. One example computer-implemented method includes receiving, from a communication device associated with a user, an on-behalf-of (OBO) request from the user to share permission data with a relying party and, in response to the OBO request, generating a permission request for the permission data and transmitting the permission request to the communication device associated with the user. The method also includes receiving, from the communication device associated with the user, consent from the user to share the permission data with the relying party. The method then includes identifying, in a data structure, an OBO permission for the user with respect to the PII and in response to identifying the OBO permission for the user, transmitting the permission data identified in the OBO request to the relying party.

Abstract: Embodiments provide methods and systems for preventing a fraudulent payment transaction. The method performed by issuer system associated with payment account of user includes generating unique data for payment transaction of the user upon approval of payment transaction authorization request signal. The method includes facilitating encryption of the unique data based on encryption key and sending payment transaction authorization response signal to payment server associated with payment network. The payment transaction authorization response signal includes at least the encrypted unique data. The method includes processing the payment transaction upon receiving a notification of a successful validation of the payment transaction authorization response signal from payment server. The validation of the payment transaction authorization response signal is performed by payment server.