Abstract: Systems and methods are presented for quickly obtaining a mortgage payoff report.

Abstract: A method for providing an accurate evaluation of a borrower's creditworthiness includes using a network-connected aggregation server to aggregate records of a plurality of financial transactions from one or more network-connected financial institution servers, wherein each record of a financial transaction comprises a unique identifier associated with its transaction and using the records of the plurality of financial transactions to determine estimated financial information of the borrower. The estimated financial information of the borrower may include an estimated cash flow stream of the borrower, an estimated income stream of the borrower, an estimated trade line of the borrower, or estimated assets of the borrower. The method may also include using the estimated financial information of the borrower to create an evaluation of the borrower's creditworthiness and providing the evaluation of the borrower's creditworthiness to a recipient that is considering whether to extend a loan to the borrower.

Abstract: A cargo restraint system includes a driveshaft having a plurality of drive pins and a plurality of first restraints each configured to actuate between a lowered position and a raised position. Each of the plurality of first restraints includes a head to actuate between the lowered position and the raised position, a drive disk rotatably coupled to the head and having a notch to receive a respective drive pin of the plurality of drive pins, and a locking disk to be received by the drive disk in response to the head being in the raised position. The cargo restraint system further includes a handle coupled to the driveshaft and configured to translate the driveshaft and to actuate such that the respective drive pin is received by the notch of the respective first restraint to move the respective first restraint between the lowered position and the raised position.

Abstract: A first server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different, second, server. The first server transmits messages between the client device and the second server where the second server has access to a private key that is not available on the first server. The first server receives from the second server a set of session key(s) used in the secure session for encrypting/decrypting communication between the client device and the first server. The session key(s) are generated using a master secret that is generated using a premaster secret generated using Diffie-Hellman public values selected by the client device and the second server. The first server uses the session key(s) to encrypt/decrypt communication with the client device.

Abstract: Systems and methods provide improved control and sharing of financial account and financial transaction information from a plurality of disparate banks to a plurality of disparate customers using a plurality of disparate financial services apps on a plurality of disparate devices. A centralized hub is used to provide communication between disparate bank and customer systems and devices, and a hub provider ensures that disparate financial services apps comply with applicable requirements before being allowed to participate in the information sharing system. The systems and methods provide new mechanisms to share data and new sources by which to monetize and incentivize the sharing of data.

Abstract: Managing private key access in multiple nodes is described. A piece of data (e.g., a private key) is encrypted using identity-based broadcast encryption and identity-based revocation encryption so that only certain servers in a distributed network of servers can decrypt the piece of data. The piece of data is encrypted with a key encryption key (KEK). The KEK is split into two pieces. The first piece is encrypted using identity-based broadcast encryption with a first set of identities as input such that only servers of the first set of identities can decrypt the first piece, and the second piece is encrypted using identity-based revocation encryption so that all servers except those that have the second set of identities can decrypt the second piece. The keys are transmitted to the servers.

Abstract: Systems and methods for rapidly verifying income are disclosed.

Abstract: A server receives a piece of data for encryption. The server encrypts the piece of data such that no single key can decrypt the encrypted piece of data and any combination of a first multiple of unique keys taken a second multiple at a time are capable of decrypting the encrypted piece of data. Each of the first multiple of unique keys is tied to account credentials of a different user. The second multiple is less than or equal to the first multiple. The encrypted piece of data is returned.

Abstract: A request for a web page is received and the requested web page is retrieved. The web page is modified to obfuscate a set of form attribute values into a corresponding set of obfuscated form attribute values. The modified web page is transmitted to the requesting device. The modified web page does not include the set of form attribute values in their original form. Form data for the set of obfuscated form attribute values is received from the requesting device. The set of obfuscated form attribute values is deobfuscated thereby revealing the original set of form attribute values. The form data for the set of original form attribute values is further processed.

Abstract: A server receives a request from a client to establish a secure session. The server analyzes the request to determine a set of one or more properties of the request. The server selects, based at least in part on the determined set of properties, one of multiple certificates for a hostname of the server, where each of the certificates is signed using a different signature and hash algorithm pair. The server returns the selected certificate to the client.

Abstract: The present invention provides improved methods for maintaining the physical separation and identity integrity of a biological cellular sample from a patient during processing. The invention enables parallel processing of biological cellular samples, such as patient samples, in a space and time efficient fashion. The methods of the invention find particular utility in processing patient samples for use in cell therapy.

Abstract: A tread wear indicator for a tire is provided. The tire includes a pair of sidewalls and a tread and the tread includes a plurality of circumferential grooves and a plurality of lateral grooves. The tread wear indicator is formed in a selected one of the lateral grooves adjacent a selected one of the circumferential grooves. The indicator includes a plurality of step elements descending from a radially outward surface of the tread toward the base of the selected one of the lateral grooves. Each step element includes an axially-extending surface that is approximately parallel to and is radially inward of the radially outward surface of the selected one of the tread elements, and a radially-extending surface that extends approximately perpendicular to the axially-extending surface. The axially-extending surface of each step element is formed with indicia visible to a user of the tire.