Abstract: A user initiates a transaction by providing identification data at an access device. Certain elements of a validation identity token, such validation keys, may be distributed among several remote server computers. After the elements are retrieved during the transaction, the validation identity token may be generated using the retrieved elements. The validation identity token may indicate whether the user is authenticated. No single entity can possess all elements utilized to generate the validation identity token, which mitigates risk of the validation identity token being compromised. In some embodiments, the validation identity token may be a chromatic identity token, which may indicate validity by color.

Abstract: Disclosed are systems, apparatus, and methods for protecting digital media. An exemplary method includes receiving digital media, encrypting the digital media using an encrypted file format to generate an encrypted file, displaying a context menu when the encrypted file is accessed, the context menu including a licensing screen, enabling a user to obtain a license to the digital media using the licensing screen of the context menu, and configuring the encrypted file to enable access to the digital media based on a term of the license.

Abstract: An instance of a physical product includes a verification code and a unique identifier disposed thereupon by which authenticity or condition of the instance may be determined. The combination may be uniquely associated with the instance and stored, by the issuer or manufacturer for each authentic instance, locally or within a decentralized computing system having an immutable data store. The verification code may be concealed by a tamper-evident component such that access of the verification code is evident upon visual inspection. Verification may require revealing of the verification code with tamper-evidence and submission of a request including the verification code and the unique identifier (or representation thereof) to receive a verification result. Each request to verify an instance may be recorded and returned with a next request for verification of the same instance of the product to indicate whether another entity has already performed a verification.

Abstract: In an example implementation, a print supply cartridge comprises a microcontroller to receive a timing challenge and enable authentication of the cartridge by providing a challenge response. The challenge response is provided in a challenge response time that falls within an expected time window.

Abstract: A web-based method and system for applying a legally enforceable signature of a user on an electronic document. The user accesses a web environment from a secure electronic system having verified his identity. Once in this web environment, the user is presented with a web-based representation of the document, and with legal disclosure and consent information related to the signing process. The user must agree with all of the information presented to him before his signature is applied to the document. A process log of the signing is kept for future reference.

Abstract: A consumer terminal for a point-of-sale (POS) system used in performing a POS transaction between a merchant and a consumer. The consumer terminal includes a display, a touch panel, first electronics in a physically secure area and second electronics in a non-secure area. The first electronics are configured to display a series of screens to guide a consumer through the POS transaction. The second electronics comprises a microcontroller and a secure processor. Upon receiving a request for secure data from the non-secure processor, the secure processor sends a notification to the non-secure processor to exit pass-through mode and enter a secure touch mode. Upon completion of PIN entry, the secure processor instructs non-secure processor to exit secure touch mode and return to pass-through mode.

Abstract: Methods, apparatus and computer software are provided for authorizing an EMV transaction between a user device and a point of sale terminal, particularly, but not exclusively, in situations where a secure element is not made available for the deployment of a payment application on the user device. The payment application is instead deployed to a processing environment that is outside of any secure element on the user device. An ICC Master Key corresponding to the payment application is held by a trusted authority, such as the issuing bank. The trusted authority is adapted generate time-limited session keys on the basis of the ICC Master Key and distribute session keys to the payment application. Receipt of a session key by the payment application enables the payment application to conduct an EMV payment transaction. The session key is used to authorize a single EMV payment transaction.

Abstract: Vehicle access control is disclosed. In various embodiments, a vehicle reservation from a wireless communication device is received, the vehicle reservation is authenticated, and access to the vehicle is provided after authenticating the vehicle reservation. In various embodiments, a system for vehicle access control includes a vehicle access control component that is configured to provide access to a vehicle and a communication interface for communication with a wireless communication device, a communication interface for communication with a wireless communication device. Access to the vehicle is provided when a vehicle reservation is received from the wireless communication device.

Abstract: In an example implementation, a print supply cartridge comprises a microcontroller to receive a timing challenge and enable authentication of the cartridge by providing a challenge response. The challenge response is provided in a challenge response time that falls within an expected time window.

Abstract: In an example implementation, a print supply cartridge comprises a microcontroller to receive a timing challenge and enable authentication of the cartridge by providing a challenge response. The challenge response is provided in a challenge response time that falls within an expected time window.

Abstract: In an example implementation, a print supply cartridge comprises a microcontroller to receive a timing challenge and enable authentication of the cartridge by providing a challenge response. The challenge response is provided in a challenge response time that falls within an expected time window.

Abstract: In an example implementation, a print supply cartridge comprises a microcontroller to receive a timing challenge and enable authentication of the cartridge by providing a challenge response. The challenge response is provided in a challenge response time that falls within an expected time window.

Abstract: Systems and methods for providing check-in based payment processing are discussed. In an example, a method for check-in based payment processing can include receiving check-in data, generating a pre-approval, sending a one-time-use PIN, receiving a validated transaction, and processing a payment. The check-in data can include a merchant identifier and user information identifying a user registered with the check-in service and associated with a mobile device. The pre-approval can include a one-time-user PIN. The validated transaction can include the one-time-user PIN associated with the pre-approval.

Abstract: Embodiments of the invention are directed to methods, apparatuses, computer readable media and systems for providing, along with a token, a token assurance level and data used to generate the token assurance level. At the time a token is issued, one or more Identification and Verification (ID&V) methods may be performed to ensure that the token is replacing a PAN that was legitimately used by a token requestor. A token assurance level may be assigned to a given token in light of the type of ID&V that is performed and the entity performing the ID&V. Different ID&Vs may result in different token assurance levels. An issuer may wish to know the level of assurance and the data used in generating the level of assurance associated with a token prior to authorizing a payment transaction that uses the token.

Abstract: Methods and apparatus for pre-scaling media content to facilitate audience measurement are disclosed. An example method includes encoding a media content sample in accordance with a first encoding configuration and playing the encoded sample. The example method also includes attempting to detect the codes in the sample, and computing a ratio between the codes encoded in the sample and the codes detected when the sample is played.

Abstract: A method for secure transactions on a mobile handset or tablet equipped with a touch screen controlled by a secure processor such as a master secure element or Trusted Execution Environment having gesture recognition capabilities. Since the touch screen is fully controlled by the secure processor, the user can securely enter the transaction amount using gestures to validate the transaction.

Abstract: Proposed are a key protection method and system. The method comprises: a: receiving by a mobile terminal a registration instruction, generating a user's public key and private key, and sending the user's public key to a third-party e-business verification server, if the mobile terminal respectively passes identity verifications of the mobile bank server and a comprehensive pre-position bank server; b: performing a verification by the mobile bank server on user's trade information, and performing a trade by the comprehensive pre-position bank server if the verification is successful; c: generating by the mobile terminal an updated parameter for protecting a private key after the trade is performed, sending to the mobile bank server, receiving a successful updating result from the mobile bank server and encrypting and storing the user's private key. The present invention can increase the difficulty of an attack, and improve security.

Abstract: One embodiment of the present disclosure relates to a computer-implemented method that includes sending, by a mobile wallet server, an identification number that is part of a substitute card number to be used by a mobile device as a mobile wallet, determining an actual card number based on the substitute card number and sending the actual card number and the identification number for processing a payment.

Abstract: A method of conducting secure electronic payments to a payment acquirer using a credit card payment unit, comprising of a smart card, a portable card reader device, a mobile phone, a stand-alone PIN entry device and a payment server. The method is based on eliminating the unsecure keyboard in a mobile phone used for entering personal identification information, and instead use a separate secure PIN entry device which fulfills the EMV Level specification. Since all sensitive payment information, communicated to the payment server from the card reader and the PIN entry device, is encrypted using unique encryption keys an unsecure mobile phone may be used for relaying the communication between the card reader device and the PIN entry device to and from the payment server.

Abstract: An electronic transaction system comprising a host server, at least one transaction device; at least one service provider system; and a content management system. When a transaction device issues a client request to the host server for one or more of the electronic goods and/or services, the host server operates to generate a client response in reply to the client request. In generating the client response a service request may be issued to the at least one service provider system. Also includes a matrix recording a set of permissions and/or constraints applicable to the electronic transaction system. The content management system references the matrix in determining the content to be provided to each transaction device to ensure that the set of permissions and/or constraints are complied with. Each transaction device further receives a set of unique identifiers from the host server, each identifier representing a component of the content.