Abstract: An apparatus maintains a segregated database in a multiple distributed ledger system. The apparatus includes a storage device that stores software instructions for controlling a processor that when executed by the processor configure the processor to: create distributed ledgers, each created distributed ledger being associated with a respective individual profile; maintain a segregated database apart from the distributed ledgers including, for each individual profile, profile balance data; and process a data exchange between exchanging profiles.

Abstract: Computer-implemented methods and systems reliant on establishing a common session key between an electronic device and a computer server are disclosed. The method and systems may be for processing de-tokenization requests in payment transaction processing and for preparing an electronic device to perform payment transactions. During such a transaction, the server may perform a method that includes receiving a de-tokenization request including a payment token and a cryptogram generated by the electronic device using a session key generated by the electronic device based on a fingerprint of the electronic device, a secret value previously shared with the electronic device, the payment token, and a transaction counter; retrieving the fingerprint, the secret value, and the transaction counter and generating the session key based on the same; verifying the cryptogram using the session key; retrieving an associated account number; and sending response to the request including the account number.

Abstract: A computer system for selectively enabling a data transfer method is disclosed. The computer system includes a processor, a communications module, and a memory. The memory stores instructions that, when executed by the processor, cause the computer system to: receive a signal from a remote electronic device via a network using the communications module, the received signal representing information including a context for a transfer of value between a database record associated with a data sender and a database record associated with a data receiver, the context including an identifier for the data receiver; obtain a condition to be satisfied in performing the transfer of value based on the identifier for the data receiver; determine that the condition is satisfied by performing the transfer of value using a particular data transfer method; and enable the transfer of value using the particular data transfer method.

Abstract: A computer system provides a user interface efficient in its use of screen space allowing values to be provided for attributes. The computer system comprises a processor and a display, an input interface, and a memory coupled to the processor. The memory stores instructions that, when executed by the processor, cause the computer system to: display, within a first region of the display, a plurality of icons corresponding to a plurality of attributes; receive, via the input interface, input corresponding to a drag-and-drop operation wherein a particular one of the plurality of icons is dragged to and then dropped at a drop position within a second region of the display; and assign a value to an attribute corresponding to the particular one of the plurality of icons based on a location of the drop position within the second region. Related methods and computer-readable media are also disclosed.

Abstract: An apparatus for use in electronic document control includes a storage device a processor coupled to the storage device. The storage device storing software instructions for controlling the processor that when executed by the processor configure the processor to: receive a signal representing data including an original document, append a unique identifier to the original document to generate a modified document, generate a hash value of the modified document, and transmit the hash value corresponding to the modified document to an electronic distributed ledger.

Abstract: The disclosed embodiments include processes that manage a cryptographically secure generation and exchange of data between network-connected systems operating within a computing environment using a permissioned distributed ledger. For example, and based on secure interaction with a distributed smart contract maintained within ledger blocks of the permissioned distributed ledger, an apparatus and a counterparty system may generate local symmetric encryption keys that facilitate a secure communication session between the apparatus and the counterparty system. Using the symmetric encryption key, the apparatus may generate a cryptographically secure representation of generated or obtained data, which may be transmitted to the counterparty system across the secure communications channel.

Abstract: The disclosed embodiments include computerized methods and systems that automatically provision one or more services available to an Internet-of-Things (IoT) devices upon connection to and registration onto communications network. In one aspect, a device may receive, from a computing system, data specifying one or more first services provisioned to the device. The device may identify a subset of the first services that are consistent with a device type of an additional device, and may transmit a portion of the stored first data that specifies the subset of the first services to that additional device. The additional device may process the transmitted portion to provision the subset of the first services to the additional device prior to a successful authentication.

Abstract: The disclosure generally describes computer-implemented methods, software, and systems, including a method for placing a card into an alert state. An alert detection indication is received during an attempted data exchange using a permanent account number (PAN) associated with a card. The alert detection indication is received by an electronic controller embedded in the card and is received through an interface. The alert detection indication indicates that the PAN has an alert state identified for the PAN by an entity that issued the card. An operational mode of the card is modified into the alert state by the electronic controller and is based on receipt of the alert detection indication. An electronic display indicating that the card is in the alert state is displayed by the electronic controller.

Abstract: The disclosure generally describes computer-implemented methods, software, and systems, including a method for placing a card into a usable state. A biometric input is received for a user to which a card has been issued by an entity. The card has an operational mode of an unusable state that has been previously identified by the entity for a particular PAN. The particular PAN is invalidated for use in further data exchanges using the card. The biometric input is received by an electronic controller embedded in the card. A determination is made that the biometric input matches one of one or more stored biometric profiles of users authorized to use the card. Based on the determining, a new PAN is activated for the card. The new PAN is usable in further data exchanges of the card. The operational mode of the card is modified to a usable state by the electronic controller.

Abstract: An apparatus for use in electronic document control includes a storage device a processor coupled to the storage device. The storage device storing software instructions for controlling the processor that when executed by the processor configure the processor to: receive a signal representing data including an original document, append a unique identifier to the original document to generate a modified document, generate a hash value of the modified document, and transmit the hash value corresponding to the modified document to an electronic distributed ledger.

Abstract: The disclosed embodiments include computer-implemented systems and processes that perform operations that initiate, approve, and execute exchanges of data between network-connected systems, apparatuses, and devices in a computing environment. For example, a network-connected apparatus may receive a first value of a parameter that characterizes an exchange of data initiated at a terminal device, identify a second value of the parameter allocated to the client device. In response to a determination that the first parameter value exceeds the second parameter value, the apparatus may request, and receive, parameter data from an application program executed by the at least one processor. The parameter data may identify a third value of the parameter allocated to the client device by the executed application program, and the apparatus may authorize, based on the second and third parameter values, a performance of the initiated data exchange in accordance with the first parameter value.

Abstract: The disclosed embodiments include computerized methods and systems that automatically provision one or more services available to an Internet-of-Things (IoT) devices upon connection to and registration onto communications network. In one aspect, a device may receive, from a computing system, data specifying one or more first services provisioned to the device. The device may identify a subset of the first services that are consistent with a device type of an additional device, and may transmit a portion of the stored first data that specifies the subset of the first services to that additional device. The additional device may process the transmitted portion to provision the subset of the first services to the additional device prior to a successful authentication.

Abstract: The disclosed embodiments include processes that securely approve and execute exchanges of data between systems, apparatuses, and devices in a computing environment. For example, a terminal device may establish communications with a client device across a direct channel of communication, and may initiate an exchange of data with that additional device across the direct communications channel. The initiated data exchange may be characterized by a value of a data-exchange parameter, and the terminal device may determine to authorize the current data exchange in real-time based on cryptographically secure distributed ledger data maintained by the client device and provided to the terminal device across the direct communications channel. Further, and based on transmitted confirmation data, the client device may generate additional, cryptographically secure of the distributed ledger data to reflect the authorized data exchange.

Abstract: The disclosed embodiments include computer-implemented systems and processes that perform operations that initiate, approve, and execute exchanges of data between network-connected systems, apparatuses, and devices in a computing environment. For example, a network-connected apparatus may receive, from a network-connected terminal device, data specifying an exchange of data initiated at the terminal device. The apparatus may, in some instances, identify a data type corresponding to the received data, and based on a block-chain ledger that tracks data exchanges involving the identified data type, determine an availability of the identified data type for use in the data exchange. In response to the determination, the apparatus may transmit a message confirming the availability of the identified data type to the terminal device prior to executing the data exchange in accordance with a data exchange parameter and using the identified data type.

Abstract: The disclosed embodiments include computer-implemented systems and processes that facilitate an initiation and a performance of one or more trustless transactions between counterparty devices operating within a trusted, secure computer-networking environment. For example, an apparatus may receive, through a touchscreen display unit, first data that identifies a session identifier associated with a transaction session, and may determine a validity of the session identifier based on the received first data. The apparatus may establish the transaction session in response to the determined validity of the session identifier. The transaction session may be associated with first and second operations characterized by values of corresponding parameters.

Abstract: There is provided a gesture-based GUI (system, method, etc.) to facilitate input of numerical data using a continuous swipe gesture. A gesture-based I/O device displays a GUI presenting a gross number and a gross number control to initially define a specific number for further defining with specificity. In response to a first gesture (hard click or pause) interacting with the gross number control, the specific number is initially defined as the gross number and a finer number control is presented to refine the specific number. In response to a continuous swipe gesture continuing from the first gesture and interacting with the finer number control, the interface further defines the specific number with finer specificity where a quantum varies in response to a direction and distance of the continuous swipe. Successive finer number controls may be also be presented to refine the specific number by continuing the swipe.

Abstract: A device has a secure element including a memory that stores at least one address, a set of rules, and a state of an asset. A processor is configured for receiving a request to change the state of the asset associated with the address, validating the request in the case where changing the state of the asset according to the request complies with the set of rules, and invalidating the request in the case where changing the state of the asset according to the request violates the set of rules. A communications module is coupled to the secure element for transmitting information responsive to the request to a distributed network of peer processors for recording a change in the state of the asset in a distributed electronic ledger in the case where the secure element validates the request.

Abstract: The present disclosure involves systems, software, and computer implemented methods for providing UI-based modifications to adjust and interact with data exchange splits. One example system includes a processor for identifying a newly received data exchange (DE) request associated with a particular user profile and receiving a first signal including a request to split the DE request with at least one other user profile. In response to the first signal, the processor can analyze the DE to identify at least one data exchange parameter and search a repository of DEs for previously submitted DEs associated with the at least one DE parameter of the identified DE. In response to identifying at least one previously requested DE, a set of DE split parameters associated with the at least one previously requested DE satisfying the search can be identified. The set of proposed DE split parameters can then be transmitted accordingly.

Abstract: An apparatus for use in a digital messaging system includes a storage device and a processor coupled to the storage device. The storage device storing software instructions for controlling the processor that when executed by the processor configured the processor to: generate a first message comprising a payload portion; encrypt the payload portion of the message; derive a first session key from a domain-specific key; and sign the message using the first session key.

Abstract: The present disclosure involves systems, software, and computer implemented methods for providing user interface (UI)-based modifications to adjust and interact with data exchange splits. An example client device can include can identify a data exchange (DE) associated with at least three entities, the DE associated with a total value. A visualization representing the DE can be presented via a UI and can include a chart comprising the total value of the DE exchange divided into value areas that are each associated with a particular entity. In response to a detection of input associated with a selection of an edge between a first and second value area, the combined value area associated with the first and second value areas can be locked. In response to detected movement input associated with the edge, the relative values of the first and second inside the combined value area can be adjusted in the visualization.