Abstract: A set of forwarding elements act as a gateway to a data network for a subscriber end station. A controller network element includes a control plane operable to communicate with the forwarding elements, which are operable to communicate with the subscriber end station. The controller network element includes a quota management module, which determines a quota amount to be assigned to the forwarding elements for a traffic flow. The quota management module assigns portions of the quota amount to the forwarding elements. The quota management module determines to change the distribution of an unconsumed quota amount amongst the forwarding elements for the traffic flow, determine the unconsumed quota amount, and determine and assign portions of the unconsumed quota amount to the forwarding elements.

Abstract: Embodiments of the invention provide systems and methods for identifying devices by a trusted service manager. According to one example embodiment of the invention, a method for identifying communications is provided. The method can include receiving, by a service provider from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and evaluating, by the service provider, the received CPLC information in order to identify the secure element.

Abstract: Embodiments of the invention can provide systems and methods for encrypting mobile device communications. According to one example embodiment of the invention, a method for encrypting mobile device communications is provided. The method can include generating, by a first application stored on a first memory of a mobile device, a message to be communicated to an intended recipient; providing, by the first application to an authentication application stored on a second memory of the mobile device, the message; encrypting, by the authentication application, the message; providing, by the authentication application to the first application, the encrypted message; and directing, by the first application, communication of the message to the intended recipient.

Abstract: Embodiments of the invention provide systems and methods for authenticating mobile devices. A registration request and identifying information for a mobile device or a secure element associated with the mobile device may be received. Based upon the received identifying information and a base level key, a rotated key for the mobile device may be determined. The determined rotated key may then be provided to the mobile device, and the rotated key may be utilized for subsequent authentication of the mobile device.

Abstract: Embodiments of the invention can provide systems and methods for tokenizing financial information associated with mobile device transactions. According to one example embodiment of the invention, a method for providing tokens to devices can be provided. The method can include receiving, from a device, a request for a token to represent financial information; identifying, in response to the request, token information associated with the token; providing at least a portion of the token information to the device; and providing the token to a third party entity, wherein the third party entity utilizes the received token to evaluate a second token subsequently received from one of the device or a user of the device.

Abstract: Embodiments of the invention provide systems and methods for authenticating mobile devices. Device identifying information may be received for a mobile device. A base level key may also be communicated to the mobile device. The base level key may be utilized by the mobile device to derive unique transaction specific keys to encrypt subsequent communications output by the mobile device. A communication encrypted with a unique transaction specific key may be received from the mobile device. Based at least in part upon the device identifying information and the base level key, a derived key may be generated, and the derived key may be utilized to decrypt the received communication and authenticate the mobile device. In certain embodiments, the above operations may be performed by one or more computers associated with a service provider.

Abstract: A method for providing Quality of Service (QoS) for a Multilink Protocol (MP) subscriber at the subscriber level is described. In one embodiment of the invention, a network element fragments a packet destined for a subscriber into multiple fragments and adds any necessary encapsulations (e.g., MP protocol encapsulation, Point-to-Point protocol encapsulation, layer 2 encapsulations). The network element links the fragments together to form a MP batch packet. The network element sends the MP batch packet to a single egress queue associated with the subscriber. The fragments are distributively transmitted across the links associated with the subscriber. Other methods and apparatuses are also described herein.

Abstract: A method and system for reducing congestion and latency in a communication system by creating a pruned forwarding set for scalable tunneling applications. The communication system provides a communication link between a mobile communication device and a network, such as the Internet. The method entails using information included within a data packet to determine a corresponding tunnel peer address, which is then resolved onto a set of paths. Each path includes respective adjacency information. A determination of whether to prune each respective path is made by using the respective adjacency information. The pruned set of paths is used to identify available paths for the communication link. By pruning in this manner, the line card being used as the home slot for a given session may also be used as the egress slot, thereby reducing congestion and latency in the communication system.

Abstract: A method for managing a plurality of subscriber sessions tied to mobile devices in a router, each subscriber session of the plurality of subscriber sessions assigned to a line card in the router, the line card implementing a data plane entity and a control card implementing a control plane entity, the method comprising: redistributing each subscriber session in the plurality of subscriber sessions assigned to a failed line card in the router to minimize packets lost and maximize subscriber session retention, redistributing including classifying each subscriber session in the plurality of subscriber sessions into a plurality of priority queues, in response to detection of the failed line card, transferring each subscriber session in the plurality of subscriber sessions assigned to the failed line card to one of a plurality of operating line cards in priority queue order.

Abstract: A contactless device comprises circuitry storing information, a switch having a first position and a second position, and a fusible link. When the fusible link is intact, wireless reading and writing of the information is enabled regardless of the position of the switch. When the fusible link has been parted, wireless reading of the information is enabled when the switch is in the first position, and wireless reading of the information is disabled when the switch is in the second position. The contactless device may be placed in a non-responsive state, and transformed to a responsive state by parting a second fusible link, or by transmitting an authenticating code to the device. The contactless device may be a card, or some other kind of device.

Abstract: A financial transaction card is provided according to various embodiments described herein. The financial transaction card includes a card body with at least a front surface and a back surface. The financial transaction card may also include a near field communications transponder and/or a magnetic stripe, as well as a digital display configured to display alphanumeric characters on the front surface of the card body. The financial transaction card may also include a processor that is communicatively coupled with the near field communications transponder or magnetic stripe and the digital display. The processor may be configured to calculate one-time passwords and communicate the one-time passwords to both the near filed communications transponder or magnetic stripe and the digital display.

Abstract: An adaptive method and apparatus for accurate network traffic volume limit reporting including receiving a network traffic volume limit for each subscriber based on the subscriber's level of service and reporting the network traffic volume on a more frequent basis for subscribers who are approaching their network volume limit.

Abstract: A method and apparatus for brokering a transmission control protocol (TCP) session between two clients that are each situated behind a firewall that blocks incoming TCP session requests is described. Each of the two clients transmits a TCP session request to the other client in order to establish a TCP session between these clients. This brokering allows the two clients to establish the TCP session between the two clients.

Abstract: A method for managing a plurality of subscriber sessions tied to mobile devices in a router, each subscriber session of the plurality of subscriber sessions assigned to a line card in the router, the line card implementing a data plane entity and a control card implementing a control plane entity, the method comprising: redistributing each subscriber session in the plurality of subscriber sessions assigned to a failed line card in the router to minimize packets lost and maximize subscriber session retention, redistributing including classifying each subscriber session in the plurality of subscriber sessions into a plurality of priority queues, in response to detection of the failed line card, transferring each subscriber session in the plurality of subscriber sessions assigned to the failed line card to one of a plurality of operating line cards in priority queue order.

Abstract: The present invention is directed to a poker lottery game, including a poker lottery ticket, which leverages commonly known gaming rules and introduces multiple levels of game play. The ticket may be generated by a terminal located at, but separate from, a point of sale location. The ticket includes one or more lottery numbers along with card values corresponding to the lottery numbers. The ticket may be generated with one or more levels of play disabled or with one or more of the lottery numbers/card values concealed. The disabled levels may be enabled, the one or more of the lottery numbers/card values may be revealed, or the play value of one or more levels may be increased by registering the ticket, as part of a loyalty rewards program or web loyalty program, by purchase, by disabling one or more enabled game play levels or by combining multiple poker lottery tickets.

Abstract: Methods and systems are provided of managing a cryptographic key. A first key component is received from a first key custodian. A second key component is received from a second key custodian. A key operation is performed on the first and second key components to generate the cryptographic key. A cryptographic-key number is assigned to the cryptographic key. A key form is printed specifying the cryptographic key. An association is recorded between the cryptographic-key number and an electromagnetic tag identifier coupled physically with the key form.

Abstract: A method for providing Quality of Service (QoS) for a Multilink Protocol (MP) subscriber at the subscriber level is described. In one embodiment of the invention, a network element fragments a packet destined for a subscriber into multiple fragments and adds any necessary encapsulations (e.g., MP protocol encapsulation, Point-to-Point protocol encapsulation, layer 2 encapsulations). The network element links the fragments together to form a MP batch packet. The network element sends the MP batch packet to a single egress queue associated with the subscriber. The fragments are distributively transmitted across the links associated with the subscriber. Other methods and apparatuses are also described herein.

Abstract: A financial transaction card is provided according to various embodiments described herein. The financial transaction card includes a card body with at least a front surface and a back surface. The financial transaction card may also include a near field communications transponder and/or a magnetic stripe, as well as a digital display configured to display alphanumeric characters on the front surface of the card body. The financial transaction card may also include a processor that is communicatively coupled with the near field communications transponder or magnetic stripe and the digital display. The processor may be configured to calculate one-time passwords and communicate the one-time passwords to both the near filed communications transponder or magnetic stripe and the digital display.

Abstract: Radio-frequency devices that have internal radio-frequency chips are personalized. A radio-frequency device is inserted into a package. An identifier is read electromagnetically from the radio-frequency chip with a radio-frequency transceiver while the radio-frequency device is within the package. Personalization information is written electromagnetically onto the radio-frequency chip while the radio-frequency device is within the package. An association between the personalization information and the identifier is recorded on a storage device.

Abstract: A contactless device comprises circuitry storing information, a switch having a first position and a second position, and a fusible link. When the fusible link is intact, wireless reading and writing of the information is enabled regardless of the position of the switch. When the fusible link has been parted, wireless reading of the information is enabled when the switch is in the first position, and wireless reading of the information is disabled when the switch is in the second position. The contactless device may be placed in a non-responsive state, and transformed to a responsive state by parting a second fusible link, or by transmitting an authenticating code to the device. The contactless device may be a card, or some other kind of device.