Abstract: Systems and methods are provided for use in processing transactions based on biometric data used in connection with authenticating consumers to payment accounts to which the transactions are directed. One exemplary method includes prompting a consumer to provide a biometric in connection with a transaction by the consumer, and receiving a payment account credential specific to a payment account for use in the transaction. The method also includes appending a biometric score and an indication of a biometric technology used to capture the biometric to an authorization request associated with the transaction, and transmitting, by the computing device, the authorization request to an issuer.

Abstract: The present disclosure relates to a computer-implemented method of processing a data transfer. The method comprises generating a first identifier for a first entity; linking the first identifier with a second identifier associated with a second entity; sending the first identifier and the second identifier to the first server; verifying the first entity based at least on the first identifier and the second identifier; sending a message to a second server, the message comprising at least the first identifier, the second identifier, and a name associated with the first identifier; and authenticating the data transfer for the first entity based at least on the information contained in the message.

Abstract: A method for trusted notifications comprises: receiving, at a first host having at least one trusted server, a request message from a sender computing device, the request message comprising a request identifier and instructions to: update, at a second host, a recipient account associated with a recipient computing device, and to make a corresponding update at the first host to a sender account associated with the sender computing device. The method further comprises authorizing, at the first host, the request message; updating the sender account; generating a secure message at the at least one trusted server, the secure message comprising the request identifier and an indication from the at least one trusted server that the update completed; and sending the secure message from the first host to the sender computing device. The secure message can be received at the sender computer device and conveyed to the recipient computing device.

Abstract: A method is proposed for a payer, to make a payment to a payee, such as a merchant. The payer's communication device automatically acquires payment facilitation data comprising payee account identification data identifying a payment account associated with the payee and maintained by an acquirer. The payment facilitation data preferably also includes transaction data describing the payment, such as the amount of the payment. From the payment facilitation data, the communication device generates a payment request which is transmitted to an issuer at which the payer maintains a payment account. The issuer communicates with the acquirer, typically via a payment network, to arrange for a payment to be made, and the payment is credited to the payment account associated with the payee, and debited from the payment account associated with the payer. Thus, a payment is effected without the payee ever receiving confidential information about the payer's payment account.

Abstract: Systems and methods are provided for use in responding to attribute queries related to identifying information for a user. One exemplary method includes receiving a request for an identity code for a user associated with identifying information, where the identifying information includes multiple attributes of the user, and generating the identity code and transmitting it to a computing device associated with the user. The method then includes receiving an identity request for the user from a requesting party including the identity code and at least one query related to at least one of the multiple attributes of the user, identifying the user based on the identity code, compiling a response to the at least one query based on the identifying information of the multiple attributes of the user, and transmitting the response to the requesting party.

Abstract: Systems and methods are provided for storing data blocks in distributed storage. One example computer-implemented method includes receiving a request for data included in a data block, where the request includes index addresses for different ones of multiple storage devices of a distributed storage. The method also includes, based on the index addresses, retrieving the N segments of the data block and the M segments of chaff from the storage devices of the distributed storage, decrypting the N segments of the data block and the M segments of chaff, and discarding the M segments of chaff. The method then further includes reconstructing the data block from the retrieved N segments of the data block, thereby providing access to the data included in the data block.

Abstract: A secondary authentication system and computer-implemented method for obtaining real-time cardholder authentication of a payment transaction associated with a cardholder's payment card includes a memory device for storing data and a processor communicatively coupled to the memory device. The processor is programmed to receive a payment authorization request message including a primary account number corresponding to a payment account of the cardholder for funding the payment transaction. In addition, the processor is programmed to determine whether the payment account requires secondary authentication by the cardholder for the payment transaction, and if, based on the determination, the payment account requires secondary authentication of the payment transaction, place the payment transaction on hold.

Abstract: A payment management system and method of managing a payment network includes generating a payment token based on a bank account of a user (e.g., a buyer), receiving a dynamic code through a network for a transaction, and validating a request for payment of the transaction using an installment plan based on funds from the bank account. The validating the request for payment of the transaction is performed based on operations which include authenticating the payment token and verifying the dynamic code. In addition, the method includes generating a decision signal indicating a decision for the request when the request for payment is validated and transmitting the decision signal to a merchant system to authorize or decline completion of the transaction.

Abstract: A method for maintaining a consistent blockchain ledger for storing commitments across multiple separate blockchains includes: storing a blockchain comprised of a plurality of blocks, each block including at least a block header and one or more blockchain data values; receiving a base commitment from a first node, where the first node is included in a first blockchain network; generating a first new block including at least a first block header and the received base commitment; storing the first new block in the blockchain; receiving a state commitment from an additional node included in each of at least two additional blockchain networks; generating an additional new block including at least an additional block header and each received state commitment; and storing the additional new block in the blockchain.

Abstract: A method for reducing file size of a blockchain through hash truncation includes: receiving a plurality of blockchain transactions; generating a first Merkle root of a first Merkle tree comprised of a first hash of each of the plurality of blockchain transactions; generating a second Merkle root of a second Merkle tree comprised of a second hash of each of the plurality of blockchain transactions, where the second hash is a truncation of the first hash for the respective blockchain transaction; generating a new block comprised of a block header and the first hash of each of the plurality of blockchain transactions, the block header including at least a timestamp, the first Merkle root, the second Merkle root, and a block reference value associated with a prior block in a blockchain; and transmitting the generated new block to a plurality of additional nodes in the blockchain network.

Abstract: A secure and flexible pipeline management solution includes determining, based at least on an order in which files are received, a precedence for defining variables, and when a file has multiple definitions for a variable, the order of appearance of the definitions defines precedence. A configuration file is generated with controlling definitions, which are based on the precedences, and a continuous integration continuous delivery (CI/CD) pipeline is executed dependent upon the configuration file. Multiple inheritances and string interpolation are supported. An advantageous result is a significantly simplified CI/CD pipeline that is secure, flexible, and is agnostic to the target environment. Thus, adding a new environment may not require the conventional (burdensome) task of adding further logical dependencies into the pipeline itself. The disclosed solution thus enhances efficiency and reduces errors when maintaining code bases.

Abstract: A method for generating cryptograms in a webservice environment includes: receiving, in a first environment of a computing system, a credential request transmitted by an external computing device using a secure communication protocol, the credential request including a transaction identifier and account identifier; transmitting, by the first environment, a data request to a second environment of the computing system, the data request including the account identifier; receiving, by the first environment, an account profile and session key from the second environment; transmitting, by the first environment, a cryptogram request to a third environment of the computing system, the cryptogram request including the account profile and session key; receiving, by the first environment, a cryptogram from the third environment generated using the account profile and session key; and transmitting, by the first environment, the cryptogram and transaction identifier to the external computing device via the secure communic

Abstract: A token management computing system for provisioning a payment token to a token storage device for a payment transaction is provided. The token management computing system includes a user computing device in communication with the token storage device and a token management server that includes at least one processor communicatively coupled to a memory device. The at least one processor is programmed to (i) receive, from the user computing device, a token request for a payment token, the request including a payment account number (PAN) selected from a digital wallet stored on the user computing device, and at least one token control, (ii) store token information including the PAN and the at least one token control, (iii) generate a single-use payment token, (iv) transmit the token to the user computing device, and (v) instruct the user computing device to transfer the token to the token storage device.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying or verifying an individual over time without retaining sensitive biometric data (e.g., biometric images or biometric templates) for the purpose of securely storing data regarding the individual.

Abstract: An integrated circuit is disclosed. The integrated circuit comprises: a processing region configured to run one instruction from a plurality of instructions; a first temperature measuring region configured to measure a first temperature within the integrated circuit in response to the processing region running the one instruction; the processing region being configured to compare the measured first temperature with a predefined temperature at the first temperature measuring region when the processing region runs the one instruction and to trigger an event when the measured first temperature exceeds the predefined temperature by a threshold value.

Abstract: The disclosure includes systems and methods for determining a change window for taking an application off-line. The systems and methods include mapping application programming interfaces (APIs) to one or more applications, and based on the API mapping, determining a priority level for each of the applications. A network traffic volume for each of the APIs mapped to the applications is predicted. Based on the predicted network traffic volume and the priority level of each of the applications, the systems and methods determine a change window for taking the applications off-line.

Abstract: Described herein is a data security system for enabling tokenized access to sensitive data, including a token provider configured to initiate a secure connection with a remote client computing device of a first data subject, and receive, from the remote client computing device, a request for an access token to provide a service provider with access to sensitive data associated with the first data subject. The request includes a data definition and authorization parameters including a data source identifier. The token provider is also configured to generate the access token that enables access to the sensitive data from the data source, store the access token in a token database, and transmit, to the remote client computing device, a response including the access token and instructions that enable the remote computing device to display the access token to the first data subject or transmit the access token to the service provider.

Abstract: An authentication server computing device is provided. The authentication server computing device is configured to receive a transaction request from an audio interface device, generate a first audio file including a first audio transmission, wherein the first audio transmission includes a primary security artifact and at least one secondary security artifact and the primary security artifact is an encoding of a one-time password, store a reference data file including the first audio transmission, transmit the first audio file to a verified user computing device associated with the account identifier, receive a second audio file from the audio interface device, wherein the second audio file includes a second audio transmission, verify the second audio transmission by comparing the second audio transmission to the reference data file including the primary security artifact and the at least one secondary security artifact, and authorize the transaction based on verifying the second audio transmission.

Abstract: A system and a method are provided for generating a digital receipt for purchases made utilizing a digital wallet or with other payment procedures. The digital receipt is stored in the cloud in a digital receipts repository for later retrieval. The digital receipt can be standardized to facilitate data processing of the data contained in data fields of the digital receipt. The data fields are text/field searchable and actionable so that the receipts and the data therein can be viewed in any manner desired by the user of the digital wallet.

Abstract: The disclosure herein describes a system and method for predictive identification of breached entities. Identification number and expiration date pairs associated with compromised records in a source file are analyzed to identify a set of candidate entities having records at least partially matching the source file data pairs having events occurring during a selected time period. Probability vectors are calculated for records associated with each identified entity. A divergence value is calculated which represents a distance between probability distribution vectors for each entity and probability distribution vectors for the source file. A predicted breached entity is identified based on the divergence values. The predicted breached entity is notified of the predicted breach. The notification can include an identification of the breached entity, identification of breached records, predicted time of breach, and/or a recommendation to take action to mitigate the predicted breach.