Abstract: PIN authentication can be added to a nonce using cryptographic protocols. A server can generate and send a session nonce to a computing device. The computing device can receive the session nonce and a user PIN (user input) and generate a secondary nonce based thereon. The computing device can send the secondary nonce to a contactless card, and upon receipt, the contactless card can generate a message including encrypted data and the secondary nonce. The contactless card can transmit the message to the computing device, which can transmit the message to the server. The server can execute multifactor authentication of the contactless card by successfully decrypting the encrypting data and confirming that the user PIN matches a stored PIN for the contactless card. The server can generate a confirmation nonce based on the session nonce and the stored PIN to determine whether the user PIN matches the stored PIN.

Abstract: The present disclosure is directed to a managed cloud-based FIDO authenticator implemented with a distributed switchboard system. The disclosed switchboard implementation enables proxy automation and management of FIDO-related service, including registration and/or access operations, between FIDO service requesting and relying parties. The described process is based on generation of a single pre-validated and personalized identity token, based on validation, tokenization and identity mapping of an identification record associated with a FIDO service-requesting entity (SRE). The generated FIDO identity token can be used as a validity signature for streamlined resolution of identity for generation of FIDO access credentials. The managed FIDO authenticator further provides a FIDO credential management and recovery features for user and/or client applications reliant upon FIDO-authenticated services.

Abstract: The disclosed systems and methods are directed to an implementation of non-transparent data query with a switchboard system linking multiple service-providing and client entities. A source device, initiating a user-related data query, may canonicalize and obscure a user identification record(s) prior to transmitting it, along with a data request, to the switchboard system. In one embodiments a cache of session data collected from previous contactless card transactions may be used to quickly determine a set of contactless payment options that are available to the user. If no identification is determined from the cache, the switchboard references its issuers database and generates a distributed query with the obscured data which is then disseminated among recipient issuing entities in accordance to one or more optimization criteria. The results returned from the queried switchboard members may then be processed and returned result to the query-initiating switchboard member (e.g., a merchant client entity).

Abstract: Various methods and processes, apparatuses or systems, and media for automated generation of a user interface that is tailored for an individual user based on user-specific requirements by using a trained model are disclosed.

Abstract: Embodiments cover registering, deregistering, and checking the status of contactless cards. A personalization system creates card data, including identifiers, for new and replacement cards, which are registered or deregistered as needed. A validation system verifies card activity and validity by processing queries with identifiers and encrypted data. Embodiments further include a system that manages contactless card registrations and billing via a card registration database to maintain card data, an API for registration and status updates, and a billing module to calculate charges for issuers.

Abstract: Described herein are methods, systems and devices for distribution of multi-factor information in a switching network. The method includes processing a request from a computing device, the request requiring multi-factor authentication. Encrypted data from a user's contactless card is then received and validated and the encrypted data includes a unique token. Using the unique token, a biometric template for the user is gathered from a domain server in a switching network. The switching network distributes the biometric template to a server processing the request or the user's device and the user's biometric data is captured and validated using the biometric template. If the validation is successful, the user's request is granted.

Abstract: Methods and devices for routing authentication using a switchboard network are disclosed. A computing device accesses a merchant server hosting a website or application requiring personal data associated with a user account to process a transaction, the personal data being stored on an issuer server associated with a contactless card associated with the user account. The computing device receives a request from the merchant server to authenticate the user account and the contactless card responds and indicates the authentication method to be used, which is forwarded to a node in a switching network that extracts information from the response and determines the issuer server associated with the contactless card. The node initiates authentication of the user with an issuer server and retrieves personal data for the merchant server.

Abstract: Systems and methods of validating transactions are provided. An exemplary system includes a server including a memory and a processor. The server is configured to: receive from an entity a transaction validation request of validating a transaction; validate the transaction; generate a logging record of the transaction validation; cryptographically hash the logging record to create a hashed logging record; digitally sign the hashed logging record using a key to create a signed hashed logging record; and transmit the signed hashed logging record to a computer device.

Abstract: Systems and methods for generating a shared secret key for a transaction card are provided. An exemplary system can include a transaction card including a card private key and a card public key derived from the card private key, a server including a server private key and a server public key derived from the server private key, and a user device. The user device can be configured to open a communication field, read the card public key, transmit the card public key to the server, wherein the server generates a shared secret key from the card public key and the server private key, receive the server public key from the server, and transmit the server public key to the transaction card. The card can configured to generate the same shared secret key from the server public key and the card private key.

Abstract: The present disclosure is directed to a managed cloud-based FIDO authenticator implemented with a distributed switchboard system. The disclosed switchboard implementation enables proxy automation and management of FIDO-related service, including registration and/or access operations, between FIDO service requesting and relying parties. The described process is based on generation of a single pre-validated and personalized identity token, based on validation, tokenization and identity mapping of an identification record associated with a FIDO service-requesting entity (SRE). The generated FIDO identity token can be used as a validity signature for streamlined resolution of identity for generation of FIDO access credentials. The managed FIDO authenticator further provides a FIDO credential management and recovery features for user and/or client applications reliant upon FIDO-authenticated services.

Abstract: Described herein are methods and systems for universal identity verification for FIDO key registration. Some embodiments include receiving, at a server associated with a website, a request from a user account to register, with the website, a FIDO key associated with the user account. In response to receiving the request, causing, by the server, a program on a device associated with the user account to be initiated, the program to permit the device to receive encrypted data from a contactless card associated with the user account and to send the encrypted data to an authentication server to validate an identity of the user account. In response to receiving a first message indicating that the identity of the user account that sent the request has been validated, granting the request from the user account and registering the FIDO key associated with the user account with the website.

Abstract: An applet executing on a processor of a contactless card may receive, from a device, a message comprising a nonce. The applet may determine a first portion of the nonce associated with a state message. The applet may perform, based on the first portion of the nonce, an operation associated with the state message.

Abstract: Systems and methods for generating a shared secret key for a transaction card are provided. An exemplary system can include: a transaction card including a card private key and a card public key derived from the card private key; a server including a server private key and a server public key derived from the server private key; and a user device. The user device can be configured to: open a communication field, read the card public key, transmit the card public key to the server, wherein the server generates a shared secret key from the card public key and the server private key, receive the server public key from the server, and transmit the server public key to the transaction card, wherein the card generates the same shared secret key from the server public key and the card private key.

Abstract: Systems and methods for automated identification of emerging trends are disclosed. A method may include: (1) receiving, by a computer program executed on an electronic device, a plurality of documents; (2) training, by the computer program, a proximity model to identify word pairs in each of the plurality of documents, wherein the word pairs comprise two words within a predetermined distance of each other at a predetermined frequency in the plurality of documents; (3) identifying, by the computer program and using the proximity model, trends involving the word pairs, wherein the trends are based on a frequency that the word pairs appear in the plurality of documents and/or a velocity at which the word pairs appear in the plurality of documents over a period of time; and (4) outputting, by the computer program, the word pairs and the trends to a downstream system.

Abstract: The disclosed technology relates to assessing and securing credit risk using credit worthiness tokens issued in a blockchain network responsive to particular financial events. An exemplary blockchain node device may store an issuance smart contract associated with an identity and including a first wallet address and allocation parameters. An event query may be sent to an oracle device external to the blockchain network. The event query may include the identity. Event data associated with the identity may then be received from the oracle device in response to the event query. A number of credit worthiness tokens is determined based on an application of the allocation parameters to the event data. The determined number of credit worthiness tokens is then allocated to the identity via the first wallet address. Thereafter, the credit worthiness tokens can be transferred or collateralized, e.g., and can represent credit worthiness for the identity across financial institutions.

Abstract: Embodiments cover registering, deregistering, and checking the status of contactless cards. A personalization system creates card data, including identifiers, for new and replacement cards, which are registered or deregistered as needed. A validation system verifies card activity and validity by processing queries with identifiers and encrypted data. Embodiments further include a system that manages contactless card registrations and billing via a card registration database to maintain card data, an API for registration and status updates, and a billing module to calculate charges for issuers.

Abstract: In some implementations, an augmented reality device may establish a link with a transaction device. The augmented reality device may scan a surrounding environment to identify one or more objects in the surrounding environment using computer vision. The augmented reality device may determine, based on a notification that the transaction device was used to perform a transaction, a category associated with one or more objects that were identified in the surrounding environment at a time that the transaction was performed. The augmented reality device may send, to a transaction backend system, information that identifies a merchant category code (MCC) associated with the transaction based on the category associated with the one or more objects that were identified in the surrounding environment at the time that the transaction was performed.

Abstract: The disclosed systems and methods are directed to an implementation of time-based authentication with a contactless card based on remotely provisioned timing data. In one described implementation the timing information is provided by an external agent such as a client device and/or a remote verification server associated with the user account. The timing information is then incorporated into a cryptogram generation process executing on the contactless card, resulting in creation of an encrypted time-based token. The authentication request message that includes the time-based authentication token, may be further supplemented by the inclusion of the timing information separately encoded using, for example, public key cryptography. This modification of the authentication request message generated by the contactless card, enables an additional time-based filtering mechanism that may be performed by a third-party client device.

Abstract: Systems and methods of validating transactions are provided. An exemplary system includes a server including a memory and a processor. The server is configured to: receive from an entity a transaction validation request of validating a transaction; validate the transaction; generate a logging record of the transaction validation; cryptographically hash the logging record to create a hashed logging record; digitally sign the hashed logging record using a key to create a signed hashed logging record; and transmit the signed hashed logging record to a computer device.

Abstract: A new cultivar of Sorbaria sorbifolia plant named ‘Hyfaria’ that is characterized by its compact plant habit, its large leaves, its young foliage that is intensely deep red in color with the red color holding into summer.