Abstract: Systems and methods are provided for use in securing open service connections. One example computer-implemented method includes initiating communication between a user and an account host as part of a request for an open service connection by the user, whereby the user provides login credentials to the account host for an account issued by the account host to the user. In response to the request, the method includes receiving access tokens for the open service connection from the account host and identifying data for the user and/or the account. The method also includes performing an assessment of the open service connection based on the identifying data, wherein the assessment is based on current and prior usage of the identifying data, and returning the access token and a result of the assessment to the open service customer.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: Systems, methods, and non-transitory computer-readable media for biometrically confirming a trusted engagement between two or more individuals that overcomes an identity challenge from a digital environment. The identity challenge including but not limited to: when two or more individuals met in the digital environment only to meet in person, when two or more parties to a contract want to ensure that the true parties sign an agreement, when one or more individuals wants to provide proof of past interactions, when an individual or an entity wants to minimize a risk of a party to a financial transaction is using stolen identity credentials, when an individual receives a friend request from an unknown individual, when an individual wants to ban interactions with an undesired personal contact, when an individual meets with an imposter during a person-to-person transaction, and when an individual meets a friend that has created a new digital persona.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying or verifying an individual over time without retaining sensitive biometric data (e.g., biometric images or biometric templates) for the purpose of securely storing data regarding the individual.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: Systems and methods are provided for use in monitoring decentralized data structures including identity attributes, through tokenization of the attributes. One example computer-implemented method includes receiving a request associated with a digital identity including multiple attributes and, for each of the attributes in the request, generating a token specific to the attribute, searching for the generated token in a network graph having multiple stored tokens, and identifying one of the multiple stored tokens as a match to the generated token. The computer-implemented method then further includes, for each of the attributes in the request, retrieving additional ones of the multiple stored tokens linked to the identified one of the stored tokens, comparing the retrieved tokens to the generated token, and promoting the request for further action, in response to at least one of the retrieved tokens being inconsistent with the generated token.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: The disclosure herein relates to methods, apparatuses, and systems for improving authentication using geolocation data. In some examples, a user may be authenticated by comparing user provided geolocation data with a predetermined geolocation. The user input may be made on a map interface. In some examples, the user may be authenticated by comparing two geolocations together. A slope of a line intersecting the user inputted geolocation and the pre-defined primary geolocation may be computed. If the calculated slope value corresponds to an initial slope value, then the answer may be deemed valid. In some examples, the authentication system may authenticate the user by comparing three geolocations together. An angle between two lines may be computed, where each line is formed by intersecting one of two geolocation answers and an intersecting the primary geolocation. If the computed angle corresponds with a stored secret angle, the answer may be deemed valid.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: Biometric tokenized networks. In one embodiment, a system includes a network and a server. The server includes a memory storing a biometric token vault, a communication interface, and an electronic processor. The electronic processor is configured to: receive a biometric token (i.e., identity token), a merchant identifier, and transaction details via the network, confirm a uniqueness of the biometric token with a second biometric token stored in the biometric token vault, generate a relationship identifier based on the merchant identifier and a global unique identifier linked to the second biometric token, and determine whether the relationship identifier is associated with a payment account reference, and output the merchant identifier, the transaction details, and a personal account number associated with the payment account reference to an issuer via the network in response to determining that the relationship identifier is associated with the payment account reference.

Abstract: Biometrically-enhanced verifiable credentials of an individual. In one embodiment, an electronic device including a biometric capture circuitry, a memory, and an electronic processor. The biometric capture circuitry configured to capture one or more biometrics of an individual. The memory storing a digital identity application. The electronic processor, when executing the digital identity application, is configured to receive the one or more biometrics of the individual that are captured by the biometric capture circuitry, generate a biometric token of the individual based on the one or more biometrics, receive identity information of the individual, generate biometrically-enhanced verifiable credentials including the identity information and the biometric token, and control the memory to store the biometrically-enhanced verifiable credentials.

Abstract: Biometrically-linked electronic proof of health status of an individual. In one embodiment, an electronic device including a biometric capture circuitry, a memory, and an electronic processor. The biometric capture circuitry configured to capture one or more biometrics of the individual. The electronic processor is configured to receive the one or more biometrics of the individual that are captured by the biometric capture circuitry, generate a biometric token of the individual based on the one or more biometrics, receive information indicative of a health status of the individual, link the information indicative of the health status of the individual to the biometric token, and control the memory to store the biometric token and the information indicative of the health status of the individual that is linked to the biometric token.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying or verifying an individual over time without retaining sensitive biometric data (e.g., biometric images or biometric templates) for the purpose of various data-related interactions. The data interactions including but not limited to: accessing, sharing, exchanging, controlling, or processing of personal data or any data related to an individual, entity, or thing.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying or verifying an individual over time without retaining sensitive biometric data (e.g., biometric images or biometric templates) for the purpose of securely storing data regarding the individual.

Abstract: A method and a system are provided for obfuscating payment card holder transactions. The method and system can be configured to capture payment card holder sentiments and moods associated with a privacy or gift mode. A host server provides a control interface comprising an obfuscation server. A payment card processing system processes a payment card transaction from a client device. The client device comprises a payment card user module. The payment card user module comprises an obfuscation client configured to with an obfuscation transaction mode interface. A control interface is configured to allow the payment card user to, via the client device, select or implement an obfuscation criterion for a payment card transaction using a payment card.

Abstract: An entity communicates with a central authority to issue an asset to an individual. The asset has associated therewith a distinct URI or “unique ID”. The asset uniquely identifies the individual to the issuing entity and to other entities in communication with the central authority. Select data about the individual obtained by one or more entities is stored in the central authority or in a network memory in communication therewith using the Resource Description Framework, which allows for this data to be queried by the entities with increased efficiency.

Abstract: A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface.

Abstract: An entity communicates with a central authority to issue an asset to an individual. The asset has associated therewith a distinct URI or “unique ID”. The asset uniquely identifies the individual to the issuing entity and to other entities in communication with the central authority. Select data about the individual obtained by one or more entities is stored in the central authority or in a network memory in communication therewith using the Resource Description Framework, which allows for this data to be queried by the entities with increased efficiency.