Abstract: In one arrangement, a method for using symmetric keys between two entities comprising a device and a host include initiating, by the device, a transaction involving original data, wherein the original data needs to be verified by the host. The method further includes deriving, by the device, a first key based on a previously generated key and a first number, wherein the first key is unique to the transaction, and the first number is randomly generated. The method further includes sending, by the device, the first key to the host for verification.

Abstract: Arrangements of the present disclosure relate to a method for securing data located in a blockchain having a plurality of blocks. The method includes creating a pointer within a block of the plurality of blocks, the pointer pointing to a security vault located external to the blockchain. The method further includes copying the block, storing the copied block in the security vault using the pointer, and securing the security vault.

Abstract: Systems and methods for protecting user data received by, stored on, and/or requested by third-party computing devices include a data entry computing system on a first network node. The data entry computing system includes a processing circuit configured to: identify user-entered data as sensitive user data, generate a content encryption key (CEK), generate encrypted user data by encrypting the sensitive user data with the CEK, and tag the encrypted user data and the CEK with a tag readable by a database server on a network node different than the data entry computing system. The tag includes information indicative of the user data. The processing circuit is configured to transmit the encrypted user data to the database server, wherein the database server excludes a private key of a key manager on a network node different than the data entry computing system.

Abstract: A computing system includes a network interface configured to communicate data over a network, a vendor database configured to retrievable store vendor data related to a vendor of interest, and a processing circuit with a processor and memory. The memory is structured to store instructions that are executable by the processor and cause the processing circuit to identify a vendor of interest; conduct a search of internal documents and external resources to obtain the vendor data related to the vendor of interest, store the vendor data in the vendor database, and generate a vendor performance score based on the vendor data.

Abstract: Various arrangements relate to a method performed by a processor of a computing system. An example method includes tokenizing a first value using a tokenization algorithm to generate a first token. The first value and first key are inputs of the tokenization algorithm. A message is generated. The message includes a first value identifier associated with the first value and a first key generation identifier associated with the generation of the first key. The message is associated with the first token. A second key is generated. A second value is tokenized using a tokenization algorithm to generate a second token. The second value and second key are inputs of the tokenization algorithm.

Abstract: A method includes aggregating profile information corresponding to a plurality of advisors; receiving a search criteria from a first mobile device associated with a first advisor; determining a search result comprising one or more advisors from the plurality of advisors based on the profile information of the one or more advisors meeting the search criteria; receiving an indication of a selection of an advisor of the one or more advisors from the first mobile device; establishing a communication session between the first mobile device associated with the first advisor and a second mobile device associated with the selected advisor; monitoring and analyzing communications between the second mobile device associated with the selected advisor and the first mobile device associated with the first advisor; and generating a partnership agreement to formalize a wealth management business relationship between the first advisor and the selected advisor including the one or more terms.

Abstract: Methods and systems of managing payment cards are disclosed. A financial institution computing system includes a token database storing a plurality of tokens and token information, a network interface circuit enabling the financial institution computing system to exchange information over a network; and a token management circuit. The token management circuit enables a graphical user interface on a customer device over the network that can be used to generate new token requests, re-provision token requests, and management requests. The management requests enable and disable tokens, such that transactions against a payment card account using an enabled token are completed, and transactions against the payment card account using a disabled token are denied.

Abstract: Various examples are directed to systems and methods for interfacing between a user and a computing device. The computing device may receive data describing a projected periodic savings amount and first expense data describing a first expense of the user. The first expense data may indicate an amount of the first expense and a first expense time when the first expense will be incurred. The computing device may display a graphical user interface at a display. The graphical user interface may comprise a savings shape having a size based at least in part on the projected periodic savings amount and a first expense shape having a size based at least in part on the first amount. The computing device may receive an instruction to place the first expense shape in the savings shape and may determine that the projected periodic savings amount is sufficient to fund the first expense at the first time.

Abstract: An information processing and display system includes a first database storing milestones associated with an approval process. A computing system is configured to access the first database and estimate start dates for the milestones. A risk of delay is determined for the milestones based on information associated with the approval process, and first adjusted start dates are estimated based on the determined risk of delay. Alternative actions associated with the determined risk of delay are determined, and second adjusted start dates based on the alternative actions are estimated. The computer generates a display of the first adjusted start dates, the alternative actions, and the second adjusted start dates.

Abstract: A method for determining a value of an item includes receiving an image of a first item captured as a result of focusing an augmented reality (AR) device on the first item. The image of the first item is compared with images of one or more second items from a database. An image of one of the second items is identified that closely corresponds to the image of the first item. Metadata is obtained for the one of the second items. Using the metadata, value information is obtained for the first item. The value information is permitted to be displayed on the AR device.

Abstract: Systems and methods for mutual authentication of a user and a container administrator computer system. A container administrator computer system receives a request from a mobile computing device for a user to access a secure container. The request includes a user identifier. The administrator system receives a first authentication factor corresponding to the user. The administrator system authenticates the user by verifying that the first authentication factor matches a first reference authentication factor associated with the user identifier. The administrator system sends a second authentication factor associated with the administrator system to a human-machine interface associated with the secure container or the mobile computing device. The administrator system receives a notification of authentication of the administrator system using the authentication factor. The administrator system transmits an unlock signal to unlock the secure container.

Abstract: A method for performing payment transactions includes obtaining payor or payee information for a social media payment transaction and using the payor or payee information in a funds payment transaction on another system. Other systems, apparatuses, and methods are also described.

Abstract: A method implemented on an electronic computing device for viewing and adjusting cash flows related to a building purchase includes receiving information regarding origination points and destination points for the cash flows. An icon is rendered on a display screen of the electronic computing device for each of the origination points and destination points. Connection lines are rendered between a plurality of the origination points and destination points. Each of the connection lines represents a cash flow between one of the origination points and one of the destination points. A change is detected in a connection of one of the connection lines to a different one of the origination points or to a different one of the destination points. As a result of the change in the connection, a cash flow between end points of the one of the connection lines is updated and displayed on the display screen.

Abstract: A method of authenticating a smart card with a mobile device is disclosed. The method includes receiving and underwriting a new payment card application at a card issuer computing system. Upon completing the underwriting process and approving the new payment card application, the card issuer computing system issues an enabling token to the mobile device, which allows the mobile device to complete transactions based on a new payment card.

Abstract: Access controls for transferring funds from a customer to a designated recipient using a transaction machine and a one-time account and/or an authentication process that does not involve the use of a transaction card are disclosed. An example method (and system) can include storing identification data associated with a one-time account or transfer for the designated recipient of the one-time account; receiving authentication data from the transaction machine; determining that the user corresponds to the designated recipient using the received authentication data and the stored identification data; and executing the selected transaction after the determination.

Abstract: The innovation disclosed and claimed herein, in one aspect thereof, comprises systems and methods of an improved multi-domain management system. The innovation provides mitigation of uncontrolled privilege and access, lacking defined roles for at user. The innovation mitigates risk of inadvertent error while not diminishing desired trans-domain user capability. Functions such as creating user and/or service accounts, group creations, group memberships, host memberships, and the like, may thus be undertaken from a single high level location, based on controlled user rules at that level, and may do so without regard or limitation to the specific domains or master server controls at the specific domains. Agnostic aspects are coupled with scalability regardless of number of domains.

Abstract: Various embodiments relate to a dynamic biometric enrollment system. The dynamic biometric enrollment includes a processor and instructions stored in non-transitory machine-readable media. The instructions are configured to cause the server system to receive at least one biometric authentication sample from the user. The at least one tokenized biometric enrollment sample has been generated by tokenizing at least one biometric enrollment sample captured from a user associated with a unique user identifier. At least one biometric authentication sample captured from the user is retrieved. The at least one tokenized biometric enrollment sample is detokenized to retrieve the at least one biometric enrollment sample. The at least one biometric enrollment sample is processed using a biometric processing algorithm to generate a dynamic biometric reference template. It is determined whether the at least one biometric authentication sample matches with the dynamic biometric reference template.

Abstract: A method may include presenting a user interface on a computing device, the user interface including a character input portion and a predictive suggestion portion; converting, using at least one processor, a set of characters entered in the character input portion into a word vector; inputting the word vector into a neural network; based on the inputting, determining a set of output terms from the neural network; querying a data store to retrieve a user specific data value for an output term of the set of output terms; and presenting a paired output term that includes the output term and the user specific data value in the predictive suggestion portion of the user interface.