Abstract: A method for generating keys in a multi-cloud environment that minimizes the impact of a breach may include: generating and storing a first key encryption key (KEK) in a first environment key management service (KMS); generating a first data encryption key (DEK) using the first KMS; generating a second DEK for a second environment using the first KMS; encrypting the first DEK with the first KEK and the second DEK with the first KEK; storing the encrypted first DEK and the encrypted second DEK in a database; generating a second KEK and storing the second KEK in a second environment KMS; encrypting the first DEK with the second KEK and the second DEK with the second KEK; and storing the encrypted first DEK and the encrypted second DEK in the database.

Abstract: A method for extended authentication sessions on an electronic device may include an authentication service computer program executed by an authentication service electronic device: receiving a customer identifier for a customer and a unique identifier for a mobile electronic device; authenticating the customer based on the customer identifier and the unique identifier for the mobile electronic device; setting a device cookie that is specific to the mobile electronic device on the mobile electronic device; and providing the device cookie and a client secret to an OAuth services backend, wherein the OAuth services backend validates the customer identifier and client secret and generates a first token and a second token, the first token having an expiration that is shorter than that of the second token. The mobile electronic device is configured to receive and store the first token and the second token.

Abstract: A method for generating keys in a multi-cloud environment that minimizes the impact of a breach may include: generating and storing a first key encryption key (KEK) in a first environment key management service (KMS); generating a first data encryption key (DEK) using the first KMS; generating a second DEK for a second environment using the first KMS; encrypting the first DEK with the first KEK and the second DEK with the first KEK; storing the encrypted first DEK and the encrypted second DEK in a database; generating a second KEK and storing the second KEK in a second environment KMS; encrypting the first DEK with the second KEK and the second DEK with the second KEK; and storing the encrypted first DEK and the encrypted second DEK in the database.

Abstract: Systems and methods for key synchronization in multi-cloud environments are disclosed. A method may include: (1) generating, by a synching computer application and using a first key management service in a first cloud environment, a data encryption key and storing the data encryption key in the first key management service; (2) generating, by the synching computer application and using a second key management service in a second cloud environment, a key encryption key pair comprising a private key and a public key and storing the key encryption key pair in the second key management service; (3) fetching, by the synching computer application, the public key from the second key management service; (4) encrypting, by the synching computer application, the data encryption key with the public key; and (5) storing, by the synching computer application, the encrypted data encryption key in a database in the second cloud environment.

Abstract: Systems and methods for enhancing digital wallet security are disclosed. In one embodiment, a method may include a service provider computer program: (1) receiving a request from a computer program executed by a user electronic device for user authentication with a product identifier for a product; (2) generating a verification code; (3) communicating the product identifier and the verification code to a verification computer program, wherein the verification computer program is configured to retrieve user contact information for a user associated with the product identifier and communicate the verification code to the user electronic device; (4) receiving, by the service provider computer program, a received verification code from the computer program, wherein the received verification code was received at the user electronic device; and (5) communicating authorization for an action involving the product to the computer program in response to the received verification code matching the verification code.

Abstract: A method and system for classifying and verifying data are provided. The method includes receiving first information that relates to an individual person; categorizing each item of the first information as relating to either a non-mutable attribute or a mutable attribute of the individual person; verifying an accuracy of each item of the first information by comparing the respective item with second information that is independently maintained by an external source; and when a request for updating first information that relates to a mutable attribute of the individual person is received, verifying an accuracy of the first information to be updated by using an external source.

Abstract: A method for extended authentication sessions on an electronic device may include an authentication service computer program executed by an authentication service electronic device: receiving a customer identifier for a customer and a unique identifier for a mobile electronic device; authenticating the customer based on the customer identifier and the unique identifier for the mobile electronic device; setting a device cookie that is specific to the mobile electronic device on the mobile electronic device; and providing the device cookie and a client secret to an OAuth services backend, wherein the OAuth services backend validates the customer identifier and client secret and generates a first token and a second token, the first token having an expiration that is shorter than that of the second token. The mobile electronic device is configured to receive and store the first token and the second token.

Abstract: Integrating systems using an enablement token are disclosed. According to one embodiment, in an information processing apparatus for a first provider comprising at least one computer processor, a method for linking a plurality of accounts using an enablement token, may include: (1) receiving, from a first provider user interface for the first provider and from a customer, a request for an enablement token to link a product provided by the first provider with a second provider; (2) generating the enablement token; (3) sending the enablement token to the first provider user interface; (4) receiving, from a second provider, the enablement token and a customer identifier for the customer with the second provider; (5) validating the enablement token; and (6) sending an authorization code and a product identifier for the product to the second provider.