Abstract: There are provided systems and methods for a database synchronization system in networked zones using blockchain. An electronic service provider may maintain data stores across different zones that may need to synchronize data across these zones. As such, the subject technology provides for data storage using interplanetary file system (IPFS) technology according to some embodiments with blockchain technology to create a secure and reliable data synchronization system. IPFS may be implemented as a data storage layer and blockchain as a transaction management system, where the IPFS address of data files and synchronization points are stored in a distributed ledger. Integration of the IPFS network with a fabric network can enhance IPFS with the fabric network to create a more secure file sharing platform to improve the transfer of data and database synchronization between different zones.

Abstract: Systems, methods, and computer program products are directed to machine learning techniques that use a separate embedding layer. This can allow for continuous monitoring of a processing system based on events that are continuously generated. Various events may have corresponding feature data associated with at least one action relating to a processing system. Embedding vectors that correspond to the features are retrieved from an embedding layer that is hosted on a separate physical device or a separate computer system from a computer that hosts the machine learning system. The embedding vectors are processed though the machine learning model, which may then make a determination (e.g. whether or not a particular user action should be allowed). Generic embedding vectors additionally enable the use of a single remote embedding layer for multiple different machine learning models, such as event driven data models.

Abstract: Systems and techniques that facilitate centralized request validation are provided. In various embodiments, a central validation server can comprise an input component. In various cases, the input component can receive a validation instruction from a gateway service. In various aspects, the validation instruction can be based on a request received by the gateway service from a client. In various instances, the request can be handleable by an operational flow path through a plurality of domain services that are downstream of the gateway service. In various embodiments, the central validation server can comprise a central validation specification component. In various aspects, the central validation specification component can store a plurality of request validation specifications respectively corresponding to the plurality of domain services. In various embodiments, the central validation server can comprise an output component.

Abstract: Techniques for performing secure contactless payments are disclosed. An example apparatus includes an external contactless card reader, including a first short-distance communication antenna, connected to a card reader terminal using a feed line. The first short-distance communication antenna is configured to convert an electromagnetic signal including data received from a contactless payment card into an analog signal and is not configured to digitize the analog signal. The card reader terminal includes a short-distance receiver circuit and a secure controller, both located within a secure area, and a second short-distance communication antenna, wherein the first and second short-distance communication antennas are connected via separate paths to the short-distance receiver circuit.

Abstract: A cryptography agent is implemented to serve as an intermediary for a client application executing on an unsecured portion of a machine to bring greater hardware-based security to the client application. The cryptography agent does so by generating a public/private key pair for the client application and sealing the key pair inside an enclave that resides on a secured portion of the machine. The cryptography agent fetches confidential information for the client application from a secure server, where the confidential information is encrypted using the public key. The cryptography agent seals the confidential information using seal keys that are directly fused into hardware of the machine on which the enclave resides, which prevents the client application from accessing the confidential information in plaintext form. The client application sends commands to the cryptography agent, which performs operations within the enclave according to the commands once the client application is validated.

Abstract: Methods and systems for content distribution and management are presented. A transaction flow for conducting different stages of a transaction is determined in response to a request for the transaction from an application executable at a user device. The transaction flow includes a sequence of content pages to be displayed within a graphical user interface (GUI) of the application over the different stages of the transaction. The content associated with a tagged UI element of at least one content page is identified. The content is validated for the tagged UI element of the at least one content page, based on a software and hardware configuration of the user device. The validated content is provided via a network to the application at the user device to be displayable with the tagged UI element on the at least one content page of the transaction flow during a corresponding stage of the transaction.

Abstract: A device may collect environmental information surrounding the device. Based on the collected environmental information, the device may automatically identify a potentially secured location that has lower security risk. When a potentially secured location is identified, the device may prompt the user to setup a security profile having reduced security requirement for the secured location. The device may store and associate the security profile with the secured location. The device may activate the security profile with reduced security requirement when the device is in the secured area. Further, the security profile may require that certain features of the device be disabled when the device is in the secured location.

Abstract: A system for embedding services into a third-party website includes providing first programming code that can be used as part of a webpage that causes a user device to display a first iframe, display a second iframe in response to user input provided through the first iframe.

Abstract: Systems and methods for transferring funds to an user account include a payment service provider device receiving a request for fund transfer information for an user account from a payer device that is associated with a payer. The payment service provider device then provides a routing number that is associated with the payment service provider and a virtual account number that is associated with the user account to the payer device. The payment service provider device then receives information from a financial institution about a funds transfer to a payment service provider account that is provided to a payment service provider by the financial institution. The information about the funds transfer includes a funding amount and the virtual account number, and the payment service provider device allocates the funding amount to the user account using the virtual account number.

Abstract: There are provided systems and methods for automated configuration of augmented and virtual reality avatars for user specific behaviors. A user may view a virtual environment and/or capture visual data utilizing a device at a location, where the visual data includes one or more real-world objects, or may interact with a virtual reality environment. An augmented or virtual reality experience may be displayed with virtual objects, graphics, avatars, and/or other virtual visualizations and interactions. A service provider may detect real-time data of the user's behaviors and current events or parameters for the corresponding augmented or virtual reality. Using available avatar customizations and configurations, the service provider may automatically configure avatars for presentation in such digital environments.

Abstract: In accordance with embodiments of the present disclosure, systems and methods for facilitating electronic commerce over a network include generating a transfer code for a client, associating the transfer code to a client account related to the client, providing the transfer code to the client over the network, receiving a fund transfer request from a trusted entity on behalf of the client over the network, the fund transfer request including the transfer code, extracting information from the fund transfer request including the transfer code associated with the fund transfer request, accessing the client account related to the client, extracting information from the client account including the transfer code associated with the client account, and verifying the transfer code of the fund transfer request by determining whether the transfer code associated with the client account matches the transfer code extracted from the fund transfer request.

Abstract: Distributed crypto currency chargeback systems and methods include at least one system provider device receiving, through a network from a payer device associated with a payer, a chargeback report associated with a first transaction of a plurality of transactions performed using a distributed crypto currency, where the first transaction involves the payer and a payee. The at least one system provider device publishes the chargeback report in a chargeback ledger. The at least one system provider device receives, through the network from a payee device associated with the payee subsequent to publishing the chargeback ledger including the chargeback report, a chargeback response associated with the first transaction. The at least one system provider device then publishes the chargeback response in the chargeback ledger.

Abstract: A method and system for tracking potentially fraudulent activities associated with one or more web sites is disclosed. The system includes a fraud tracking server connected to a fraud tracking database. The fraud tracking server includes a communications module to facilitate the exchange of data between the server and multiple client devices. The fraud tracking server receives data from one or more client devices that identifies a potential spoof site. The fraud tracking server also includes control logic to generate a spoof site tracking record in the fraud tracking database. The spoof site tracking record includes the data identifying the potential spoof site. After the spoof site tracking record has been created, the fraud tracking server notifies an administrator of the potential spoof site by communicating the data received and stored in the fraud tracking database to an administrator.

Abstract: Techniques are disclosed relating to using machine learning techniques to predict storage configurations for historical data. In some embodiments, a computer system stores representations of historical data according to a current set of storage parameters. The representations may include snapshots of historical data in a data repository at different points in time. The computer system may receive queries for historical data specifying points in time from which to retrieve the historical data. In some embodiments, the computer system responds to the queries using the stored representations and determines performance metrics for the responses. In some embodiments, the computer system trains a machine learning model using the performance metrics. Based on output of the trained model, the computer system updates the current set of storage parameters.

Abstract: Techniques are disclosed relating to the communication between server systems located in different network regions. For example, in some embodiments, a first server system located in a first network region may receive a request to perform a first operation for a user, where the request includes an alias value for the user. The first server system may determine, based on the alias value, that the user is not associated with the first network region. In response, the first server system may access an alias map that specifies encoded versions of alias values that are in use across multiple different network regions and, using the alias map, determine that the user is associated with a second network region. The first server system may then route a communication corresponding to the request to a second server system that is located in the second network region.

Abstract: Techniques are discussed for grouping access requests made to a computer system using a log of access requests that includes a plurality of log entries of that include (a) a plurality of traffic indicators of the corresponding access request and/or (b) a plurality of identity indicators of a respective remote computer system that made the corresponding access request. The plurality of log entries is analyzed using a plurality of network analysis rules that are useable to group log entries according to traffic and/or identity indicators. Based on the analyzing, a plurality of groups of log entries are identified, and each group of log entries is assigned a corresponding common actor identifier (common actor ID). The determination of whether to grant a particular access request uses one or more assigned common actor IDs.

Abstract: Methods and systems are presented for facilitating development and execution of application programming interfaces (APIs) using a software orchestration framework. Using the software orchestration framework, APIs may be developed using declarative statements only, without requiring any implementation using programming code. Based on parsing and interpreting the declarative statements at runtime, computer processing logic for the API can be determined dynamically. The computer processing logic may include instructions for validating input values included in a corresponding API call and a set of services to be executed for the API. Since the software orchestration framework can dynamically determine and execute the computer programming logic based on the declarative statements corresponding to the API, the business logic associated with an API can be dynamically modified without requiring recompiling and/or re-deploying of the software orchestration framework.

Abstract: A payment processing apparatus and a system or a method are provided that have a location-agnostic payment code, where the user does not have to check in to the merchant's location. Further, the reliance on the network connection is reduced by caching or storing payment codes at the user's mobile device. The payment codes may have expiration and may be used once. The payment codes may be revoked or canceled if the user's mobile device is compromised or stolen. In an embodiment, the payment codes may be generated and provided to the user's mobile device when the payment application at the user's mobile device is refreshed. For example, the payment application is refreshed based on user's payment history or payment habits. In another embodiment, the payment codes may be generated and provided to the user's mobile device when the user is within a predetermined distance from a merchant.

Abstract: Systems, methods, and computer program products are disclosed for improving ease in transmitting information between peer devices. Communications devices establish a peer group. Each communications device in the group assigns different sections of its touchscreen to the other devices in the group. To transfer information to another device in the group, the user swipes on the touchscreen towards the assigned section for the target communications device. Upon detecting the swipe, and determining that the swipe was towards the assigned section, the communications device initiates a transfer of the information to the target communications device. This may involve confirmation at the device or a paired device before transfer, or no confirmation. Receipt of the information at the target communications device may trigger notifications to be displayed. It may also trigger a request for acceptance of the transfer at the target communications device after which receipt is confirmed.