Abstract: The disclosure herein describes providing access to documents in a document storage platform using a document access facilitator. A base address and a security key associated with the document storage platform is obtained. A document summary presentation message is received from a presenter including a document identifier of a document and a recipient identifier of a recipient. A document summary presentation notification is sent to the recipient using the recipient identifier, the notification including the document identifier, and a document presentation request is received from the recipient. A secure access link to the document is generated using the base address, the document identifier, and the security key associated with the document storage platform. The secure access link is then sent to the recipient in response to the received document presentation request, whereby the recipient is enabled use the secure access link to access the document in the document storage platform.

Abstract: An apparatus is described that comprises: communication circuitry configured to receive from a submitter, over a network, a data item being of a first data type and processing circuitry configured to: transform the first data type to a second, different, data type; remove non-significant content from the data item in the second data type; generate a hash of the data item having non-significant content removed to be signed; and provide the hash for signing.

Abstract: A method for managing personal data is disclosed. A request for an identifier (ID) token corresponding to a user is received from a virtual wallet. The ID token is generated and transmitted to the virtual wallet, where the ID token is presented to a third-party entity by a device of the user. A request for the personal data corresponding to the ID token is received from the third-party entity. A trustworthiness score for the third-party entity is determined based at least in part on an analysis of entity data corresponding to the third-party entity. The trustworthiness score and received request are transmitted to the virtual wallet and passed on to the user device. An indication of acceptance of the request and encrypted personal data associated with the generated ID token are received from the virtual wallet and transmitted to the third-party entity for processing.

Abstract: The present disclosure concerns a computer-implemented method for reconstructing a dataset after detection of a network security threat in a network. The method comprises: determining a maximum flow for returning data associated with the network security threat to a source dataset via each of a plurality of paths through which the data has passed from the source dataset to the destination dataset; starting from the destination dataset, determining the data to be transferred to each dataset in the plurality of paths between the destination dataset and the one or more source datasets such that the data can be returned to the one or more source datasets, the data transferred in each path not exceeding the determined maximum flow for the path; adding the details of the determined amount of data to be transferred to a forensic report; and outputting the forensic report.

Abstract: A data processing apparatus including communication circuitry configured to receive data indicative of a user and data indicative of an instruction associated with the user, and control circuitry configured to determine whether the received data indicative of the user and data indicative of the instruction associated with the user have been generated in the absence of an explicit command from the user using previously obtained data indicative of the user and data indicative of an instruction associated with the user, to determine whether the received data indicative of the user and data indicative of the instruction associated with the user include a predetermined characteristic, to execute processing to reject the instruction associated with the user as indicated by the received data, and to execute processing to accept the instruction associated with the user as indicated by the received data.

Abstract: An apparatus is described. The apparatus comprises: communication circuitry configured to receive from a submitter, over a network, a data item of a first data type, wherein the data item comprises a plurality of components and the apparatus further comprises: processing circuitry configured to: sequentially receive the plurality of components of the data item and for each component in succession in the sequence, the processing circuitry is configured to: remove non-significant content from the component of the data item; generate a data item of a second data type from the sequentially received plurality of components; generate a hash of the generated data item; and provide the hash for signing.

Abstract: A method of verifying the destination of a transaction between nodes in a network includes receiving transaction information corresponding to a transaction between the nodes, where the transaction information comprises a unique destination identifier and a destination name and where the unique destination identifier defines a destination account of the transaction; obtaining from a storage unit a set of names used in previous transactions to that destination account; determining at least one disparity value between the destination name and the set of names; and producing a destination verification value based on the at least one disparity value, wherein the destination verification value is used to verify whether the transaction between nodes should proceed.

Abstract: An apparatus for storing a set of events, is provided, the apparatus comprising one or more circuitry configured to: receive an electronic message comprising information of a first event between a first party and a second party, the first event being initiated by the first party; determine whether a record of the first event exists in a first storage unit; wherein when it is determined that the record of the first event does not exist, the one or more circuitry is configured to: determine whether any subsequent events between the second party and a third party are initiated by the second party within a predetermined time of the first event; and store an association between the second party and a first set of events, the first set of events comprising the first event and the subsequent event, in a second storage unit, when the subsequent event is initiated within the predetermined time.

Abstract: A system for simulating a network includes a request processor operably connected to a simulation engine. The request processor receives a request for network simulation data and input data relating to a topology of a network including node data and relationship data with relationship parameters. The simulation engine outputs a stream of event data based on the relationship data to the request processor and generates respective events by determining a source node and a destination node and corresponding relationship parameters, determining an event time, and determining a transfer value.

Abstract: A method, apparatus and computer program product for identifying accounts of interest in a network are provided, the method comprising controlling circuitry to: receive information indicative of a plurality of target accounts, the plurality of target accounts including at least a portion of the accounts in the network; monitor for each target account of the plurality of target accounts, at a number of instances of time, connections between that target account and other accounts in the network; using a result of the monitoring, select target accounts associated with an increase of connections to accounts in the network with which the target account has no previous connection, above a first threshold level, as a first set of accounts; using a result of the monitoring, select target accounts associated with a decrease in connections to accounts in the network with which the target account has a previous connection, above a second threshold level, as a second set of accounts; and identify at least one target acco

Abstract: An apparatus, method and computer program product is provided in accordance with embodiments of the disclosure, for identifying a message of interest exchanged between nodes in a network.

Abstract: An apparatus, method and computer program product are provided, the apparatus for identifying a set of messages of interest in a network, the apparatus comprising circuitry configured to: receive information of a plurality of sets of messages which have been exchanged by nodes in a network; select a portion of the plurality of sets of messages which have been received using a property of a source message of each set of messages of the plurality of sets of messages; generate individual first values for the nodes of each set of messages of the selected portion of the plurality of sets of messages using a property of the nodes associated with each set of messages; and identify at least one set of messages of the selected portion of the plurality of sets of messages as a set of messages of interest using the individual first values which have been generated for the selected portion of the sets of messages.

Abstract: A method, apparatus and computer program product for reporting an exchange of messages between nodes in a network is provided by the present disclosure, the method comprising: receiving from a first device, using circuitry, a request for data for a target node, the data indicative of an exchange of messages between nodes in a network linked to the target node determining, by the circuitry, whether a request for data for the target node has previously been received; and, when a request for data for the target node has previously been received, the method comprises: building, by the circuitry, data indicative of the exchange of messages between nodes in the network linked to the target node; identifying, by the circuitry, a new portion of the data based on a comparison of the data with previous data which has been built for the target node; and reporting to the first device, by the circuitry, the new portion of the data.

Abstract: A network simulation system comprises a request processor and a simulation engine. The request processor receives node data indicative of resource levels of nodes of the network, and relationship data indicative of relationship parameters of a plurality of relationships between the nodes. The simulation engine outputs a stream of event data based on the relationship data.

Abstract: An apparatus for storing a set of events, is provided, the apparatus comprising one or more circuitry configured to: receive an electronic message comprising information of a first event between a first party and a second party, the first event being initiated by the first party; determine whether a record of the first event exists in a first storage unit; wherein when it is determined that the record of the first event does not exist, the one or more circuitry is configured to: determine whether any subsequent events between the second party and a third party are initiated by the second party within a predetermined time of the first event; and store an association between the second party and a first set of events, the first set of events comprising the first event and the subsequent event, in a second storage unit, when the subsequent event is initiated within the predetermined time.

Abstract: A method for peer-to-peer prepaid card accounts can create a prepaid card that can receive donations through a QR code disposed on the physical card. Restrictions can also be placed on the card to control where or how the funds may be used. The method can, in response to receiving a request at a card management service to create an account, obtain account information, wherein the account information comprises a user name, an account number, a QR code image, and optionally a biometric data. The account information can be stored as a card account for the user, which is funded by receiving a payment from a second party using the QR code. Then, when a card holder uses the card for a transaction, the card management service can function as an issuer to authorize its use.

Abstract: A system for verifying information associated with a user can include at least three devices. The first device is configured to transmit, to the second device, user-associated information, a unique identifier associated with the user-associated information and an identity digital signature generated using an identity private key associated with the user and a message comprising a previously determined hash of a portion of the user-associated information combined with the unique identifier. The second device is configured to generate the hash of the portion of the user-associated information combined with the unique identifier and transmit the generated hash and the identity digital signature to the third device. The third device is configured to lookup the generated hash in a database, verify the identity digital signature using the identity public key related to the generated hash in the database, and upon successful verification, transmit a success response to the second device.

Abstract: The present disclosure relates to a secure method of providing a delivery address during a tokenized payment transaction scheme. A consumer places an order with a merchant without providing a delivery address. A distributor that collects payments due to the merchant requests a payment identification code and a delivery address from a payment agent. The request includes payment information. The payment agent generates and stores a payment identification code along with the payment information, and sends the code to the consumer via the distributor. The consumer forwards the code to a financial institution for forwarding to the payment agent who returns the payment information along with a request for a delivery address. The consumer may respond by authorizing the payment and by providing a delivery address. The financial institution then arranges the payment to the merchant and sees that the merchant receives the delivery address.