Abstract: The SOCIAL CHECKOUT WIDGET GENERATION AND INTEGRATION APPARATUSES, METHODS AND SYSTEMS (“CWI”) transforms developer credentials, codes and parameter inputs via the CWI component into buy widgets, payment acceptance and purchase transaction outputs. In one embodiment, the CWI may facilitate obtaining a plurality of authentication parameters and widget customization parameters. The CWI may authenticate a user using a parameter derived from the plurality of authentication parameters and may dynamically generate a purchase widget for the authenticated user using the plurality of widget customization parameters.

Abstract: A virtual payment system for paying for goods, services and content ordered over an internetwork comprising a commerce gateway component and a credit processing server component (53) is disclosed. Buyers and sellers becomes registered participants by applying for virtual payment buyer and seller accounts. Once an account is established, a digital certificate is stored on the registered participant's computer. A buyer can then order a product, i.e., goods, services or content from a seller and charge it to the virtual payment account. When the product is shipped, the seller notifies the commerce gateway component, which in turn notifies the credit processing server, which applies the charges to the buyer's virtual payment account. The buyer can settle the charges using a prepaid account, a credit account, or by using reward points earned through use of the virtual payment card. A buyer may create sub-accounts.

Abstract: A method of reconstructing a packet that includes financial card information from a mobile device uses a card reader. The card reader has a read head, a slot for swiping a magnetic stripe of a card and device electronics that includes a microcontroller with logic resources with code. The card reader has a unique identifier and associated cryptographic key. The same code is used to produce an encrypted and signed signal. The encrypted and signed signal, that includes the card reader identifier, is sent to the mobile device. The mobile device sends an encrypted and signed packet to a back end of a payment system. A cryptographic key is used to decrypt and verify the contents of the packet at the back end. Non-encrypted financial card information is sent to a payment gateway.

Abstract: Embodiments are directed at systems, apparatuses, and methods for indirect device pairing through a trusted intermediary. One embodiment is directed to a method including receiving a pairing identifier associated with an untrusted device controller. The method further comprises extracting the pairing identifier from the pairing request, searching a pairing identifier database for a matching pairing identifier, determining an untrusted device controller associated with the matching pairing identifier, and sending the pairing request to the untrusted device controller. The untrusted device controller may identify the untrusted device, associate the pairing identifier with the trusted intermediary, and lock the pairing identifier. The method further comprises receiving a pairing response indicating that the untrusted device is paired with the computer.

Abstract: The systems and methods of the invention provide a technique for authenticating a finance related transaction. The method may include providing a token which contains a token counter, the token counter periodically advancing to generate a changing token value, the token counter being synchronized to a base counter that generates an authenticating value; transforming the token value into a token output sequence using logic; and outputting at least part of the token output sequence to an authenticating authority, the authenticating authority having access to the authenticating value.

Abstract: A system and method for issuing, circulating and trading financial instruments with smart features is disclosed. In one particular exemplary embodiment, a financial instrument having smart features may comprise a document portion and a token device attached to or embedded in the document portion. The token device may comprise a storage device and a communication interface, wherein the token device is configured to provide a unique address for the financial instrument, the unique address including a device identifier that matches at least in part the document portion and a network address that changes based on a network location of the financial instrument and to communicate securely with an external entity at least to report an identity or a status of the financial instrument.

Abstract: A secure, closed virtual payment system comprising registered buyers and sellers for ordering and paying for goods, services, and content over an internetwork is disclosed. A buyer becomes registered by applying for a virtual payment account. A seller becomes registered by applying for a seller account. A credit processing component (53) immediately evaluates the buyer's application and assigns a credit limit to the account. Once an account is established, a digital certificate is stored on the registered participant's computer. The buyer can then order goods, services, or content from a seller and charge it to the virtual payment account. When the product is shipped, the seller notifies a commerce gateway component (52), which, in turn, notifies the credit processing server, which applies the charges to the buyer's virtual payment account.

Abstract: A method of relicensing digital encrypted radio media content transmitted via a network and received by a user electronic device includes receiving a request to relicense an encrypted digital media data file included within digital encrypted radio media content. The encrypted digital media data file is retrieved from the digital encrypted radio media content stored in a memory of the user electronic device. The encrypted digital media data file is decrypted using a radio encryption key to generate an unbound digital media data file. The unbound digital media data file is bound with the user electronic device to generate, a bound encrypted digital media data file. The bound encrypted digital media data file is stored in the memory of the user electronic device.

Abstract: A virtual payment system for paying for goods, services and content ordered over an internetwork is disclosed. The virtual payment system includes a commerce gateway. Buyers and sellers becomes registered participants by applying for virtual payment buyer and seller accounts. Once an account is established with the commerce gateway, a digital certificate is stored on the registered participant's computer. A buyer can then order a product, i.e., goods, services or content from a seller and charge it to the virtual payment account. When the product is shipped, the seller notifies the commerce gateway, which applies the charges to the buyer's virtual payment account. The buyer can settle the charges using a prepaid account, a credit account, or by using reward points earned through use of the virtual payment account. A buyer may create sub-accounts.

Abstract: A client device comprises a first secure element and a second secure element. The first secure element comprises a first computer-readable medium having a payment application comprising instructions for causing the client device to initiate a financial transaction. The second secure element comprises a second computer-readable medium having a security key, a payment instrument, stored authentication data and instructions for generating a secure payment information message responsive to the payment application. The secure payment information message comprises the payment instrument and is encrypted in accordance with the security key.

Abstract: An electronic personal data locker system is described in which personal data is stored, organized, accessed, and/or maintained, among others activities. In an embodiment, the personal data locker system comprises multiple personal data lockers that each store different types of personal information and/or data of a user. The personal data lockers are established by the system and may be integrated with mobile computing devices. The system may enable the sharing of the gathered data with third parties and/or may enable the user to set preferences for what data is to be shared with various third parties. The system may further provide convenience in providing personal data to third parties via a standard application programming interface (API). The system may also enable the finding and/or calculating of user-related insights based on the gathered data through correlation, aggregation, and/or analysis of the user's personal data.

Abstract: Methods and systems are disclosed for executing financial transactions between customers and merchants. An identifier of a financial account is received from the customer at a merchant system. A one-time password is also received from the customer at the merchant system, with the customer having been provided with the one-time password by a mobile electronic device or contactless presentation instrument. A cryptogram is generated to include the identifier of the financial account encrypted using the one-time password. An authorization request is formulated at the merchant system. The authorization request includes the cryptogram and transaction information describing at least a portion of the financial transaction. The authorization request is transmitted from the merchant system to an authorization processor for authorization of the financial transaction.

Abstract: When new music content is generated on the basis of replication of original music content, additional information including information indicating that the generated new music content is based on replication and replication source information identifying a replicated-from source of the replicated content is generated and added to the new music content based on the replication. When the new (i.e., replicated) music content is to be used, a search is made for original music content on the basis of information identifying a replicated-from source and use of the new (replicated) music content is permitted only when the c original music content has been successfully found. Such arrangements reliably allow the replicated content to be used by a given person only when the person possesses the original music content.

Abstract: Embodiments of the disclosure relate generally to methods and systems for delivering digital or media content to a mobile device and associating the digital rights for the content with an identifier of the mobile device or user of the mobile device. In some embodiments, a clearing house may store the digital rights for the content and provide authorization for delivery requests from the mobile device. In some embodiments, the mobile device may receive the content via communication with one or more of: the clearing house, a media provider, and/or a transport provider.

Abstract: An apparatus and method provide simple and secure financial transactions in an instant messaging (IM) environment. Two users may engage in an IM session (chat session), with negotiations for a product or service taking place during the chat session. One or both of the users may activate an IM financial transaction mechanism during the chat session. The IM financial transaction mechanism analyzes the chat text, and presents a draft transaction to both buyer and seller, with options based on the analyzed chat text. The draft transaction may be modified by both buyer and seller, who both confirm the draft transaction when all of the details are correct. The confirmed transaction is then sent to a web server that includes an interface to the buyer's online account, and payment is made by transferring the funds for the confirmed transaction from the buyer's online account to an account for the seller.

Abstract: In general, the subject matter described in this disclosure can be embodied in methods, systems, and program products. A computing device provides a user interface of a third-party application program. The user interface includes an interface element that causes purchase of a product. The computing device receives an indication that the user has selected the interface element. The computing device identifies a first identity certificate that is assigned to the third-party application program from among multiple identity certificates that are assigned to multiple respective third-party application programs. The computing device sends the first identity certificate to a server system so as to cause the server system to determine whether the first identity certificate matches a second identity certificate. The computing device receives an indication that the third-party application program is able to legitimately purchase the product. The computing device sends a request for purchasing the product.

Abstract: Systems and methods are provided for facilitating guided entry of a passcode. The exemplary guided passcode entry system provides additional security to traditional secret PIN or passcode entry systems by generating a randomized input sequence (order of entry) and prompting a user to input a passcode according to the randomized input sequence. The system also causes a test of the user's input data against a database of passcodes associated with the particular user for an exact match. The testing step can include comparing characters of the input data to a particular passcode associated with the user which is stored in a database in accordance with the randomized input sequence in regard to the order that the input data was received. Based on the comparison of the received passcode to the stored passcode, the system can advance a transaction with the user.

Abstract: A client (e.g., an eReader) receives and displays a sample version of content to a user retrieved from a store server. The sample version is a subset of the full version of the content. The client determines a location in the sample content in which to insert a buy page that allows the user to purchase the full version. The buy page may be inserted at a location that minimizes the time the user spends waiting for the full version to be installed on the client. The client uses one or more locating factors to determine the location. The user may interact with the buy page inserted at the determined location to purchase the full version of the content. The client interacts with the store server to conduct the purchase transaction, and seamlessly transitions the user from the sample to the full version of the content.

Abstract: The invention relates to a system and method providing access of one or more heterogeneous digital contents to at least one offline Digital Rights Management (DRM) user by a DRM server. This invention involves establishing the trust relationship among the DRM server, DRM client, user's machine and the end user by means of digital certificate. The server generates protected digital content by means of using a standard encryption algorithm. The invention further involves determining whether a license for accessing the protected file is requested by the legitimate user, and if so, generating a license consisting the user rights and the protected decryption key to be downloaded by legitimate user. The DRM client decrypts the protected file using a decryption key of the license, and renders the content to the end user by calling the appropriate and customized viewer during consumption.

Abstract: According to an embodiment, access to an online resource is enabled by associating a telephony number with a network resource that is made available at a network location, where network resource is protected so as to be inaccessible without access being provided for users individually. A particular user may be detected in initiating a telephony session using the number. Access to the network resource may be activated or authorized for the particular user in response to detecting the user initiating the telephony session.