Abstract: Methods and systems are described herein for identifying anomalies within streamed event-based time-series data based on retroactively captured data lineage information. For example, the system may receive a request to identify an anomaly associated with a security-event-based time-series. The system may obtain the security-event-based time-series comprising a set of security-alerts further comprising security-alert data. Then the system may store the security-alert data for each security-alert in a database according to a schema. The system may then populate, based on the schema, a set of predefined prompts sections with the security-alert data of the set of security-alerts. The system may then identify the anomaly associated with the security-event-based time-series based on a summary generated by an artificial intelligence model using the set of predefined prompts.

Abstract: Described herein are systems, methods, and programming for determining network resource code updates in real time while also reducing network resource consumption used to determine performance impacts of the network resource code updates. Updates to code portions may be generated and evaluated in a secure virtual computing space for an event of a sequence of events. If the updates to the code portions satisfy processing conditions, other events from the sequence may be evaluated against the same updates. A retroactive analysis of a portfolio of authorized accounts, each including a respective sequence of events, may be analyzed to determine the impact of the network resource code updates to the portfolio.

Abstract: Systems and methods are disclosed herein for real-time digital authentication. According to some embodiments, the system authenticates a user credential associated with a first transaction initiated via a web browser at a first merchant website, authorizes the first transaction, binds the user credential to the web browser, receives a digital signature signed by a private key corresponding to a second transaction initiated via the web browser at a second merchant website, and authorizes the second transaction without a re-entry of the user credential or sensitive payment information. The authentication method may further include in response to determining that the user is eligible for the first transaction, generating an authentication challenge to the user, in response to the user successfully completing the authentication challenge, retrieving payment credentials of the user and authenticating the user, and authorizing a checkout operation associated with the first transaction.

Abstract: Systems and methods for authenticating users based on user location data from various sources are disclosed herein. In some aspects, the system may transmit a first request for network and location information. The system may receive wireless network configuration metadata and location data. The system may transmit a second request for cellular network information. The system may receive cellular network metadata. The system may determine a user location. The system may retrieve a user profile. The system may provide the user location and the user profile to a machine learning model. The system may generate an authentication probability. The system may transmit an authentication message based on the authentication probability.

Abstract: Methods and devices for transmitting a hidden identity are disclosed. An application executing on a processor of a first computing device associated with a first account receives, from a contactless card associated with a second account, an encrypted payload including identifying information of a second account. The application sends the encrypted payload to a server for authentication of the second account. The application receives verification of the second account and confirmation that the identifying information of the second account has been stored in association with a record of an event.

Abstract: Methods and systems for intercepting convergent data streams. In some aspects, the system may, in response to receiving a first data stream including a plurality of user activities executed by a user, generate a first projected future data stream. The first projected future data stream can include potential future activities for the user. The system may process the first projected future data stream to determine a first cluster to associate with the user. Furthermore, the system may determine whether the first cluster is a type of intervention cluster requiring direction to the user for future activity. In response to determining that the first cluster is a type of intervention cluster, the system may generate a notification to the user including one or more user activities to execute to exit the first cluster. This allows the system to prevent or intercept undesired activities executed by users.

Abstract: Disclosed herein are system, method, and computer readable media embodiments for global identity verification of a user for multiple services. In some embodiments, a centralized authentication platform (CAP) may receive a request from an independent service to generate an authentication token for a client device based on authentication performed by the service. The CAP may generate an authentication token of a particular authorization level, based on the method of authentication used by the service. The CAP may send the token to the client device as well as store the token in a database. The CAP may receive a second request from a second, unrelated service to validate the authentication token on the client device. The CAP may validate the token on the client device against the token in the database and send a response to the second service indicating that token validity and authentication level.

Abstract: A method for reducing fraud for SMS OTP authentication includes receiving, by a server from a plurality of participating entities, a plurality of phone numbers and a plurality of metadata associated with a user, and determining, by the server, a phone number tenure for each of the plurality of phone numbers, based on the plurality of metadata. The method further includes determining, by the server, a phone number consistency for the plurality of phone numbers, based on the plurality of metadata, and determining, by the server, a device binding status for each of the plurality of phone numbers, based on the plurality of metadata. The method further includes determining, by the server, a most reliable phone number associated with the user from the plurality of phone numbers, and transmitting, by the server, to the most reliable phone number a SMS OTP, and authenticating the user based on the SMS OTP.

Abstract: Systems and methods are described for performing secure communications with rotating key communications. For example, the system may receive a first applet request to perform a first rotating key communication across one or more computer networks to access a first server host. The system may then determine a first processing characteristic for the first applet request and a first plurality of server locations of the first server host (e.g., across the one or more computer networks). The system may then determine a first plurality of connection paths to a first subset of the first plurality of server locations. The system may then filter the first plurality of connection paths to generate a first subset of the plurality of connection paths. Based on the first subset of the plurality of connection paths, the system may generate a first rotating key for performing the rotating key communication.

Abstract: Systems and methods are disclosed herein for real-time digital authentication. According to some embodiments, receiving a hashed user credential from the third party entity, performing a matching operation between the received hashed user credential and a stored hashed credential stored in the non-transitory memory, the received hashed user credential and the stored hashed credential being hashed using the same hashing algorithm, and in response to detecting a match between the received hashed user credential and the stored hashed user credential, performing a user eligibility operation associated with the first transaction.

Abstract: Systems and methods for authenticating users based on user location data from various sources are disclosed herein. In some aspects, the system may transmit a first request for network and location information. The system may receive wireless network configuration metadata and location data. The system may transmit a second request for cellular network information. The system may receive cellular network metadata. The system may determine a user location. The system may retrieve a user profile. The system may provide the user location and the user profile to a machine learning model. The system may generate an authentication probability. The system may transmit an authentication message based on the authentication probability.

Abstract: In some embodiments, a system may detect a request for a token interaction between a token and a user device. The system may access profile data associated with a user, where the profile data is derived from feedback indicating signal-strength-related results corresponding with one or more prior token interactions that occurred in connection with presentation of one or more components at one or more locations of a user interface. Based on the request and the profile data, the system may cause presentation of one or more indications of a location within the user interface at which to present a component for the token interaction.

Abstract: Disclosed herein are system, method, and computer readable media embodiments for global identity verification of a user for multiple services. In some embodiments, a centralized authentication platform (CAP) may receive a request from an independent service to generate an authentication token for a client device based on authentication performed by the service. The CAP may generate an authentication token of a particular authorization level, based on the method of authentication used by the service. The CAP may send the token to the client device as well as store the token in a database. The CAP may receive a second request from a second, unrelated service to validate the authentication token on the client device. The CAP may validate the token on the client device against the token in the database based on an authentication level thereof, and send a response to the second service indicating token validity.

Abstract: Disclosed embodiments include methods, systems, and computer-readable media configured to provide wearable devices storing tokens associated with digital versions of physical documents/cards. The wearable devices may further transfer tokens securely to interested parties without Bluetooth® or other network connectivity beyond NFC radio. In some embodiments, a token vault operator system may receive a request to establish a token vault account for a user, authenticate an identity of the user based at least on the received request, and generating a token vault ID associated with the user. The token vault operator system may further configure access to data sets generated for and associated with the token vault ID, generate tokens associated with the token vault ID, each token corresponding to one of the one or more data sets, and provide the generated plurality of tokens associated with the token vault ID to at least one user device.

Abstract: Systems and methods for digital media-based user authentication are disclosed herein. In some aspects, the system may receive an authentication request. The system may transmit a user verification request based on the authentication request. The system may receive media recordings in response to the user verification request. The system may detect one or more features in the media recordings. The system may generate a plurality of risk metrics for the user based on generating risk metrics for the one or more features. The system may determine an authentication probability based on the plurality of risk metrics.

Abstract: Systems and methods are described for performing secure communications with rotating key communications. For example, the system may receive a first applet request to perform a first rotating key communication across one or more computer networks to access a first server host. The system may then determine a first processing characteristic for the first applet request and a first plurality of server locations of the first server host (e.g., across the one or more computer networks). The system may then determine a first plurality of connection paths to a first subset of the first plurality of server locations. The system may then filter the first plurality of connection paths to generate a first subset of the plurality of connection paths. Based on the first subset of the plurality of connection paths, the system may generate a first rotating key for performing the rotating key communication.

Abstract: Systems and methods to detect network activity deviations are described. The network activity data can include a set of network activities of a user and can be used to categorize the user into a segment. Deviations in the network activity can be detected based on one or more patterns of previous network activities of the user. For example, a value associated with the network activity can be determined to deviate from an expected value by a threshold value, determined based on the segment. Remediation to prevent the network activity from impacting future activities of the user can be determined based on scores of the network activity's participants, which includes the user. In an example, the network activity can be removed from an account of the user based on the determined remediation.

Abstract: A method and related system may analyze metadata associated with a first set of transactions to determine whether to perform a second set of transactions. The method and related system may include determining a data category based on first device-provided data of a first database transaction indicating a first record associated with a second record, and may further include obtaining, based on whether the data category satisfies a first set of criteria, an identifier and an amount based on image data using a prediction model. The method may further include querying a database based on the identifier to obtain an indication that the identifier is mapped to an object category, validating the amount based on a result indicating whether the object category satisfies a second set of criteria, and causing a second transaction that changes fields of the first and second records.

Abstract: In some embodiments, a system may obtain first feedback indicating one or more first signal-strength-related results corresponding with one or more first token interactions occurring in connection with presentation of one or more first components at one or more first locations of a user interface of a user device. Based on the first feedback, the system may obtain one or more second locations of the user interface and cause presentation of one or more second components at the one or more second locations of the user interface. The system may obtain second feedback indicating one or more second signal-strength-related results corresponding with one or more second token interactions. Using the first and second feedback, the system may update a user interface presentation location at which to present a component for a token interaction within a profile associated with a user of the user device.

Abstract: Systems and methods are described herein for leveraging offline virtual authentication tokens during periods of inaccessible network connectivity. In some aspects, after determining the system is offline, systems and methods request an authentication code from a user and determine whether the authentication code received from the user is valid. In response to determining that the authentication code is valid, systems and methods select an offline virtual authentication token from the plurality of stored offline virtual authentication tokens associated with the user account.