Abstract: The present application relates to devices and components including apparatus, systems, and methods to migrate one or more credentials from a first device to a second device. The migration of the one or more credentials can include performing authentication procedures corresponding to the one or more credentials for determining whether migration of the one or more credentials is allowable, and utilizing certificate authority security domains of secure elements to bind the one or more credentials to the secure elements for migration.

Abstract: A method may include receiving configuration data associated with an application used for secure data transfers. The method may include accessing certificate data indicating a certificate chain from a certificate service. The method may include generating a configuration script based at least in part on the configuration data and including at least a portion of the certificate data in the certificate data. The method may include generating a script hash based on at least a portion of the configuration script. The method may include receiving a validation signature for the configuration script from the certificate service. The method may include providing the configuration script, the script hash, and the validation signature to a user device may include the application used for secure data transfers such that the application is modified using the configuration script.

Abstract: The present application relates to devices and components including apparatus, systems, and methods to provision a credential to a user device. In some embodiments, a physical object corresponding to the credential may be detected within a proximity of the user device for provisioning of the credential.

Abstract: A computer-implemented method that may include receiving a data transfer request to transfer data between an user account of an user associated with the user device and a third-party user account and receiving a first hashed token based at least in part on the data transfer request, generating a signed token by signing the first hashed token with a private key, generating a public key associated with the signed token, receiving an authorization request to authorize the data transfer request, generating a second hashed token by hashing the cryptogram and a second combined identifier stored by the processing server, extracting the first hashed token by decrypting the signed token with the public key, determining whether the second hashed token corresponds to the first hashed token, and performing a data transfer action between the user account to the third-party user account in accordance with the determination and the data transfer request.

Abstract: A method may include receiving configuration data associated with an application used for secure data transfers. The method may include accessing certificate data indicating a certificate chain from a certificate service. The method may include generating a configuration script based at least in part on the configuration data and including at least a portion of the certificate data in the certificate data. The method may include generating a script hash based on at least a portion of the configuration script. The method may include receiving a validation signature for the configuration script from the certificate service. The method may include providing the configuration script, the script hash, and the validation signature to a user device may include the application used for secure data transfers such that the application is modified using the configuration script.

Abstract: Techniques for using an authorizer in a virtual terminal on a multipurpose device to authorize operations of a cryptographic applet in a secure element associated with the multipurpose device are described herein. These techniques include receiving an authorization token and setting authorization criteria for the operation of the cryptographic applet based on the authorization token.

Abstract: Techniques for using an authorizer in a virtual terminal on a multipurpose device to authorize operations of a cryptographic applet in a secure element associated with the multipurpose device are described herein. These techniques include receiving an authorization token and setting authorization criteria for the operation of the cryptographic applet based on the authorization token.

Abstract: A method may include receiving, by an application executed on a user device, sensitive data associated with one or more data exchanges. The method may include generating, by a background application executed on the user device, validation data. The method may include retrieving, by the application executed on the user device, the validation data from the background application. The method may include transmitting, by the application executed on the user device, the validation data, and the sensitive data to a first computing system. The method may include receiving, by a second computing system, the validation data from the first computing system. The method may include generating, by the second computing system, the token, digitally signed by the second computing system. The method may include transmitting, by the second computing system, the token to the first computing system. The method may include receiving the token from the first computing system.

Abstract: A method may include receiving, by an application executed on a user device, sensitive data associated with one or more data exchanges. The method may include generating, by a background application executed on the user device, validation data. The method may include retrieving, by the application executed on the user device, the validation data from the background application. The method may include transmitting, by the application executed on the user device, the validation data, and the sensitive data to a first computing system. The method may include receiving, by a second computing system, the validation data from the first computing system. The method may include generating, by the second computing system, the token, digitally signed by the second computing system. The method may include transmitting, by the second computing system, the token to the first computing system. The method may include receiving the token from the first computing system.

Abstract: Techniques for using an authorizer in a virtual terminal on a multipurpose device to authorize operations of a cryptographic applet in a secure element associated with the multipurpose device are described herein. These techniques include receiving an authorization token and setting authorization criteria for the operation of the cryptographic applet based on the authorization token.

Abstract: Techniques for using an authorizer in a virtual terminal on a multipurpose device to authorize operations of a cryptographic applet in a secure element associated with the multipurpose device are described herein. These techniques include receiving an authorization token and setting authorization criteria for the operation of the cryptographic applet based on the authorization token.

Abstract: Techniques to privacy proof secure element generated certificates anonymous secure element attestations are described herein. An attestation certificate request can be generated that is signed using the static key of the secure element. The attestation certificate request can then be sent to an attestation server, which can verify the attestation certificate request and return an anonymized attestation certificate. The device containing the secure element can transmit the certificate to third parties to verify attestation data signed by the secure element using the certificate and provide assurance to the third parties that the data being attested to has been generated inside a secure element associated with a specific manufacturer.

Abstract: The present application relates to devices and components including apparatus, systems, and methods to manage kernels within a secure element for performance of a data transfer.

Abstract: Techniques to privacy proof secure element generated certificates anonymous secure element attestations are described herein. An attestation certificate request can be generated that is signed using the static key of the secure element. The attestation certificate request can then be sent to an attestation server, which can verify the attestation certificate request and return an anonymized attestation certificate. The device containing the secure element can transmit the certificate to third parties to verify attestation data signed by the secure element using the certificate and provide assurance to the third parties that the data being attested to has been generated inside a secure element associated with a specific manufacturer.