Abstract: A credentialing method and apparatus for facility access. The apparatus can include a system that includes one or more BLE beacons located within proximity to a facility, where one or more of the beacons identifies a location or other information unique to its proximity to the facility. The apparatus can further include an eBadge used by a person seeking access to the facility. The eBadge can also in some embodiments be a BLE beacon. Interaction between the one or more BLE beacons, a credentialing provider's app operating on the person's mobile device, and the person's eBadge operate in the system to perform a method of controlled access to the facility. In some embodiments, administrators with access to the credentialing provider's app also can control, monitor, report, and observe details concerning such facility access.

Abstract: A method for detecting duplicate authorization requests includes: receiving an authorization request over an electronic payment processing network associated with an electronic payment transaction; determining whether the authorization request is a potential duplicate authorization request or is not a duplicate authorization request based on a bloom filter; in response to determining that the authorization request is a potential duplicate authorization request, determining a connectivity quality associated with the electronic payment processing network; and determining whether to process the authorization request based on the connectivity quality. A system and computer program product for detecting duplicate authorization requests are also disclosed.

Abstract: Techniques for identifying a fraudulent interaction of a user device using time based risk features are described herein. In embodiments, time stamp information provided by an external clock and time units may be maintained by a user device. The user device may include an authentication component that is communicatively coupled to a clock component that generates the time units. In response to conducting an interaction with an access device and user device first time information may be received from the access device. Second time information may be determined based at least in part on the time units from the clock component and the time stamp information. The second time information may be compared to the first time information. An authentication plan for the interaction may be determined based at least in part on the comparison of the second time information to the first time information.

Abstract: A computer-implemented system for streamlining encryption payload of a card transaction from a transaction code transaction via a merchant inside a restricted computer network firewall. A wallet application stores data of a payment device, and the wallet application retrieves information of a merchant and a transaction via a transaction code. In response to the retrieved information, the wallet application generates an encrypted payload. The wallet application transmits the encrypted payload to a payment facilitator within the restricted computer network firewall. After decryption of the encrypted payload, the payment facilitator transmits a decrypted payload in one payment packet to the payment processing server outside the restricted computer network firewall.

Abstract: Vehicle shelf systems having indicators thereon for improving loading and delivery efficiency. Items are scanned for loading, and the indicators on the vehicle shelves identify where to place the item based on the sequence of the delivery point along the delivery route. A mobile computing device alerts a delivery carrier when the delivery vehicle is in proximity to a delivery point when an item is to be delivered.

Abstract: Expedited E-Commerce Tokenization alleviates the above mentioned concerns associated with cards for merchants as well as PSPs using tokens by establishing E-Commerce browser standards around tokenization for merchants and PSPs through a standard manner of requesting customer data in an encrypted manner following a standard.

Abstract: Provided is a system that includes at least one processor programmed or configured to provision a client device for access to an online source of information, transmit a private encryption key of a public/private encryption key pair to a software agent of the client device, receive a first hash value from the software agent, wherein the first hash value is generated using the private encryption key, receive a second hash value from the software agent, determine whether to allow access to the online source of information by the software agent based on the first hash value and the second hash value received from the software agent, process a request to access the online source of information involving the software agent, and store a data record associated with a data transaction involving the online source of information in a data structure. Methods and computer program products are also provided.

Abstract: One embodiment of the invention is directed to a method comprising, establishing, by a wallet server computer, a single sign-on link between a user bank account and a wallet application. The method further comprises receiving a transaction request message from a user, wherein the transaction request is for a transaction between the user and a merchant associated with the wallet application. The method further comprises sending sign-on data to an issuer computer using a secure authentication protocol and receiving a confirmation message from the issuer computer confirms initiation through the issuer application. The transaction is processed by the wallet server computer based on the confirmation message.

Abstract: A technique for enabling non-native accounts to be processed by a processing system may include receiving an account identifier scheme that is used by a third-party entity to provide access to accounts associated with the third-party entity, and assigning an entity identifier to the third-party entity in which the entity identifier conforms to a native format used by the processing system. An application programming interface can be modified to recognize account identifiers of the third-party entity. A transaction request can be received to execute a transaction in which the transaction request includes a resource provider identifier of the third-party entity and an account identifier of an account of the third-party entity. The entity identifier assigned to the third-party entity can be determined using the modified application programming interface, and the transaction can be processed using the entity identifier assigned to the third-party entity.

Abstract: A system for loading and unloading containers of items from transport vehicles and moving containers of items to and from desired locations using automated robots are disclosed. The system includes one or more automated robots, a base station, and one or more vehicle-based systems. The automated robots are configured to move to, lift, and carry containers of items. The base station is configured to coordinate the movements of the automated robots. The vehicle-based systems are associated with transport vehicles and configured to communicate information about containers on the transport vehicles to the base station or automated robots. The vehicle-based systems may call the one or more automated robots to automatically load or unload the transport vehicles.

Abstract: Quality of a narrative is characterized by receiving data that includes a narrative text. This narrative text is then tokenized and events are extracted from the tokenized words. The extraction can use, in parallel, two or more different extraction techniques. The extracted events are then extracted so that a waveform can be generated based on the aggregated extracted events that characterizes a plurality of emotional arcs within the narrative text. Subsequently, a plurality of waveform elements are extracted from the waveform. The narrative quality (or other quality) of the narrative text is then scored based on the extracted plurality of waveform elements and using a machine learning model trained to correlate emotional arc waveforms with narrative quality scores. Related apparatus, systems, techniques and articles are also described.

Abstract: Methods and systems for performing on demand access transactions are disclosed. In one example, the method includes receiving, by a directory service computer from an authorizing computer, a file including a primary access identifiers and virtual access identifiers, the virtual access identifiers not being capable of being used at resource providers to conduct transactions. The method also includes receiving a request to provide an access token that is associated with an account, the request comprising information that identifies the account. The method further includes retrieving a virtual access identifier based on the identifying information; and requesting, by the directory service computer to a token service computer, that the access token be provisioned on the user device or an application computer associated with an application on the user device.

Abstract: Methods and systems for using a mobile device as a point-of-sale (POS) terminal provisioned by a resource provider are provided. A server computer can transmit, to a resource provider computer, a set of platform-specific scripts to be incorporated into a resource provider application provisioned on a user device. The server computer can register each instance of the resource provider application provisioned on any user device as an access terminal associated with the resource provider computer. The server computer can receive, directly from an instance of the resource provider application on a user device, a processing request message to perform a transaction. The server computer can obtain an authorization decision on behalf of the resource provider computer and transmit the authorization decision to the user device and the resource provider computer.

Abstract: A method includes a server computer receiving, from a first data provider computer, encrypted data derived from first identity data and a cryptographic key or derivative thereof stored at the first data provider computer. The server computer transmits, to a second data provider computer, the encrypted data and/or the cryptographic key or derivative thereof. The server computer receives, from the second data provider computer, intermediate data derived from second identity data stored at the second data provider computer. The server computer determines if the first identity data and the second identity data are duplicates while the first identity data and the second identity data are encrypted. The server computer removes one of encrypted first identity data, derived from the first identity data, and encrypted second identity data, derived from the second identity data, from a memory in the server computer.

Abstract: A method is disclosed. The method includes receiving, by a user device from the access device, a routing path list comprising a first set of network nodes. After receiving the routing path list, the user device determines a routing options list comprising a second set of network nodes based on the first set of network nodes in the routing path list. The method also includes obtaining an encrypted credential or token, and transmitting, by the user device to the access device, the routing options list, and the encrypted credential or token to the access device. The access device transmits an authorization request message comprising the encrypted credential or token, and the routing options list to a server computer via at least some of the network nodes in the second set of network nodes. The server computer may be an authorizing entity computer.

Abstract: A method and system for migrating a payment instrument portfolio. A payment network computer receives a payment instrument portfolio conversion request message from an issuer computer to convert a payment instrument portfolio from a prior payment instrument scheme to a new payment instrument portfolio based on a new payment instrument scheme. The request message includes information about existing payment instrument references from the prior payment instrument scheme. The payment network computer creates enrollments based on the information about the existing payment instrument references and sends a portfolio migration event notification message to a payment instrument requestor partner computer associated with a payment network payment instrument requestor identifier subscribed to a new event type for the payment instrument portfolio migration.

Abstract: A method includes receiving a first encrypted first identity attribute. A first doubly encrypted first identity attribute is formed by encrypting the first encrypted first identity attribute. A second doubly encrypted first identity attribute is formed by encrypting the first encrypted first identity attribute. They are transmitted to a user device, which removes a user layer of encryption on each to form a second encrypted first identity attribute and a third encrypted first identity attribute. Layers of encryption are added to the second encrypted first identity attribute to form a third doubly encrypted first identity attribute and the third encrypted first identity attribute to form a fourth doubly encrypted first identity attribute. The server computer receives them and transmits, to the second identity provider computer, the fourth doubly encrypted first identity attribute. The second identity provider computer obtains a first identity attribute and compares it to a second identity attribute.

Abstract: A method includes extracting, by an analysis computer, a plurality of first datasets from a plurality of graph snapshots using a structural self-attention module. The analysis computer can then extract at least a second dataset from the plurality of first datasets using a temporal self-attention module across the plurality of graph snapshots. The analysis computer can then perform graph context prediction with at least the second dataset.