Abstract: The disclosed exemplary embodiments include computer-implemented systems, devices, apparatuses, and processes that dynamically implement and manage consent and permissioning protocols using container-based applications. By way of example, a device may receive, through a programmatic interface, a first request for an element of data generated by an executed application program. When the first request is consistent with consent data associated the executed application program, the device may obtain the requested data element and a digital signature applied to the requested data element by a computing system. Based on a verification of the applied digital signature, the device may generate and present a representation of the requested data element within a digital interface, along with an interface element that confirms the verification of the digital signature.

Abstract: Computing devices, systems, and methods for automatically prompting a foreign currency transaction by detecting a trip end condition associated with a registered user with respect to travel to a foreign location associated with a foreign currency. The methods and system may further determine that the registered user has a remaining foreign currency balance, and, as a result, may identify and send to the registered user's mobile device at least one option for using the remaining foreign currency balance. The at least one option may be a merchant offer from a merchant located in the area of the mobile device or may include an option to exchange the foreign currency for another currency. The trip end condition may be detected by determining that the registered user and/or user's mobile device is at an international departure location. The currency exchange may be with another registered user.

Abstract: The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that manage cryptographically secure exchanges of data using a permissioned distributed ledger. For example, an apparatus obtains parameter values characterizing an exchange of data and transmits the parameter values to a first computing system, which executed instructions included within a distributed ledger. The executed additional instructions cause the first computing system to access rules data recorded onto the distributed ledger and establish a consistency between the parameter values and at least a portion of the accessed rules data. The apparatus receives, from the first computing system, confirmation data indicative of the established consistency, and based on the confirmation data, transmit a request to execute the data exchange in accordance with at least the portion of the parameter values to a second computing system.

Abstract: In another aspect, a computer-implemented method is described. The method includes: detecting that an electronic device that has been previously configured to communicate with the ambient commerce system is at the ambient commerce premises, the electronic device associated with an entity; receiving, from the electronic device, a wallet identifier, the wallet identifier uniquely identifying a particular wallet that is to be used to complete an ambient commerce transaction; identifying, based on the sensor, one or more items that are to be associated with the ambient commerce transaction; and processing the ambient commerce transaction for the identified one or more items using the particular wallet identified by the wallet identifier.

Abstract: A server computer system, comprises a processor; a communications module coupled to the processor; and a memory coupled to the processor, the memory storing instructions that, when executed, configure the processor to receive, via the communications module and from a client device, a signal including a request to configure a transfer of data to a particular data record; determine that the particular data record is associated with a third party server; obtain a trust score associated with the particular data record; determine that the trust score satisfies trust criteria; and responsive to determining that the trust score satisfies trust criteria, enable one or more transfer features associated with a real-time transfer protocol.

Abstract: A server computer system, comprises a processor; a communications module coupled to the processor; and a memory coupled to the processor, the memory storing instructions that, when executed, configure the processor to obtain information associated with a request to transfer data to a data record; determine, based on an identifier associated with the data record, whether a real-time transfer protocol is available to complete the transfer; and send, via the communications module and to a client device associated with a recipient of the request to transfer the data to the data record, a signal updating one or more interface elements of an interface displayed on the client device based on whether the real-time transfer protocol is available to complete the transfer.

Abstract: According to an aspect there is provided an ambient commerce system. The ambient commerce system may include a sensor at an ambient commerce premises. The ambient commerce system may further include a processor coupled to the sensor and a memory coupled to the processor. The memory may store processor-executable instructions which, when executed, cause the processor to: detect, based on an output of the sensor at the ambient commerce premises, engagement of an entity with a first item satisfying first predetermined criteria; identify the entity; determine based on account data for the identified entity, a resource parameter for the identified entity; and when the resource parameter satisfies second predetermined criteria, generate a notification on an electronic device associated with the entity.

Abstract: According to an aspect there is provided an ambient commerce system. The ambient commerce system may include a sensor at an ambient commerce premises. The ambient commerce system may include a processor coupled to the one or more sensors. The ambient commerce system may include a memory coupled to the processor. The memory may store processor-executable instructions which, when executed, cause the processor to: detect, based on an output of one or more of the sensors, engagement of an entity with a restricted item; identify the entity; obtain at least a portion of a profile for the entity; determine, based on the at least a portion of the profile for the identified entity, eligibility for the entity to acquire the restricted item; and selectively generate, based on the determined eligibility for the entity, a notification on an electronic device associated with the entity.

Abstract: A computer-implemented method may comprise: receiving, via a first application on the computing device, a request to connect a first data record associated with the first application with a second data record associated with a second application on the computing device; and establishing a secure communication channel between the first application and the second application, the secure communication channel enabling transmission of data between the first application and the second application, wherein establishing the secure communication channel comprises: sending, to the second application, identifying information for the first data record and a first device token associated with the first application; receiving, from the second application, a second device token associated with the second application; and causing the second device token to be stored, in the memory, in association with the first application.

Abstract: The disclosed exemplary embodiments include computer-implemented devices, apparatuses, and processes that, among other things, perform dynamic biometric authentication based on distributed ledger data. For example, a device may compute a first hash value based on first biometric data captured by a sensor unit, and may transmit a request to, and receive a response from, a computing system across a communications network via the communications unit. The request may cause the computing system to execute instructions maintained within the distributed ledger data, and to extract second biometric data maintained within an element of the distributed ledger data. The second biometric data may include a second hash, which the computing system may incorporate into the response. The device may authenticate an identity associated with the device when the first hash value corresponds to the second hash value incorporated within the response.

Abstract: Computing devices, systems, and methods for automatically prompting a foreign currency transaction by detecting a trip end condition associated with a registered user with respect to travel to a foreign location associated with a foreign currency. The methods and system may further determine that the registered user has a remaining foreign currency balance, and, as a result, may identify and send to the registered user's mobile device at least one option for using the remaining foreign currency balance. The at least one option may be a merchant offer from a merchant located in the area of the mobile device or may include an option to exchange the foreign currency for another currency. The trip end condition may be detected by determining that the registered user and/or user's mobile device is at an international departure location. The currency exchange may be with another registered user.

Abstract: A system and method for managing access to entity identity data are described. The system comprises a communications module; a processor coupled with the communications module; and a memory coupled to the processor and storing processor-executable instructions which, when executed by the processor, configure the processor to authenticate a remote device as being associated with an entity; receive, via the communications module and from the remote device, pre-consent data identifying one or more third parties permitted to access entity identity data for the entity; store, in the memory, the pre-consent data in association with the entity; receive, via the communications module and from a digital identity network, a signal representing a request to release the entity identity data to the third party; determine, based on the pre-consent data, that the entity identity data is to be released to the third party; and initiate release of the entity identity data to a computing device associated with the third party.

Abstract: The present disclosure involves systems, software, and computer implemented methods for intercepting data exchange requests and automatically imposing a hold period while the data exchange is evaluated for a user profile initiating the request. One example system includes operations to detect a data exchange request prior to completion of the attempted data exchange, the data exchange request including information defining the attempted data exchange and associated wherein the attempted data exchange is associated with a particular user profile. A portion of the information is transmitted to a data exchange analysis system for execution of a user profile-specific data exchange analysis based on the information and a status of the user profile. A hold state is initiated for the data exchange request while the analysis is performed. The results of the analysis are presented and a confirmation to proceed is required before allowing the attempted data exchange to be processed.

Abstract: In some implementations, a method of providing contactless payments at a point of sale terminal includes: causing a point-of-sale terminal processing a transaction to display a machine-readable code, the machine-readable code encoding a web address; receiving a request from a device that scanned the machine-readable code, the request received at the web address; in response to receiving the request, causing the device that scanned the machine-readable code to output an interface that includes a prompt for input required to complete the transaction; receiving a response to the prompt; and sending an indication of the response to the prompt to the point-of-sale terminal to allow for completion of the transaction based on the response at the point-of-sale terminal through use of a physical token at the point-of-sale terminal.

Abstract: A server comprises a communications module; a processor coupled with the communications module; and a memory coupled to the processor and storing processor-executable instructions which, when executed by the processor, configure the processor to receive, via the communications module and from a computing device, a signal representing a request to add an authorized user to an account of an entity hosted by a first institution associated with the server; send, via the communications module and to a second server associated with a second institution hosting an account of the authorized user, a signal that includes a unique key and an identifier of the entity, the signal causing the second server to store the unique key and the identifier in memory and associating the unique key and the identifier with the account of the authorized user; receive a signal representing a request to perform an operation for the entity; in response to receiving the request to perform the operation, send, via the communications module

Abstract: A server includes a processor that receives, from a first device, initiation message(s) each including a service identifier and a service value and, for each initiation message, saves in a database a record comprising the service identifier in association with the service value. The processor receives, from a second device, authorization message(s) each including one of the service identifiers and an authorization value, and for each authorization message, validates one of the initiation messages by (i) locating in the database the record comprising the one service identifier, and (ii) confirming that the service value in the located database record matches the authorization value. The processor updates a journal with an entry identifying a transfer between a first ledger and a second ledger in an amount equal to a sum of the service values of the validated initiation messages, and provides the first device with a message confirming the transfer.

Abstract: The disclosed exemplary embodiments include computer-implemented systems, devices, apparatuses, and processes that dynamically implement and manage consent and permissioning protocols using container-based applications. By way of example, a device may receive, through a programmatic interface, a first request for an element of data generated by an executed application program. When the first request is consistent with consent data associated the executed application program, the device may obtain the requested data element and a digital signature applied to the requested data element by a computing system. Based on a verification of the applied digital signature, the device may generate and present a representation of the requested data element within a digital interface, along with an interface element that confirms the verification of the digital signature.

Abstract: A trusted session is to be established between a smart speaker and a computer server. The computer server may receive an instruction to initiate a trusted session with the smart speaker. The instruction includes an indication of an account linking token for linking a first and second account associated with the smart speaker and the computer server, respectively. The computer server generates a session token and sends it to the smart speaker for acoustic signalling. The acoustic signal is captured by a mobile device and used to reconstruct the session token. The computer server receives the reconstructed session token along with identifying information from the mobile device. The computer server system uses the identifying information to confirm that the mobile device is associated with the second accord. Upon so confirming, the computer server may establish a trusted session between the first smart speaker and the computer server system.

Abstract: The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that monitor and reconcile indirectly initiated exchanges of data between network-connected devices and computing systems using a permissioned distributed ledger. For example, an apparatus may obtain and transmit first transaction information characterizing a data exchange to a first computing system. The first computing system may submit a portion of the first transaction information to a second computing system through a programmatic interface inaccessible to the apparatus, and the second computing system may execute the data exchange in accordance with at least the portion of the first transaction information.

Abstract: A method may include: causing a point-of-sale terminal processing a transaction to display a machine-readable code, the machine-readable code encoding a web address; receiving a request from a device that scanned the machine-readable code, the request received at the web address; in response to receiving the request, causing the device that scanned the machine-readable code to output an interface; receiving, through the interface, an input of an indication to separate the transaction into multiple transaction parts and one or more parameters indicating how the transaction is to be separated; and sending, to the point-of-sale terminal, a message that configures the point-of-sale terminal to separate the transaction in accordance with the one or more parameters.