Abstract: A disclosed method includes receiving, by a first device from a server computer, a first hash value along with a plurality of other hash values, and a random value. The first hash value is generated by inputting at least a first credential and the random number into a hash function. The method includes reading a second credential from a second device operated by a second user, and generating a second hash value by inputting at least the second credential and the random value into the hash function. The method includes comparing the first hash value and the second hash value, and determining that the first hash value and the second hash value match. The method also includes validating an action of the second user when the first hash value and the second hash value match.

Abstract: A method conducted using a mobile device is disclosed. The method includes maintaining a plurality of software modules, wherein each software module of the plurality of software modules is built and executed independently of other software modules. The mobile device receives first interaction initiation data corresponding to a first transaction. In response to receiving the first interaction initiation data, a first subset of the plurality of software modules is selected via an application interface to execute the first transaction. The mobile device receives second interaction initiation data corresponding to a second transaction. In response to receiving the second interaction initiation data, a second subset of the plurality of software modules to execute the second transaction is selected via the application interface. The first subset of the plurality of software modules is different than the second subset of the plurality of software modules.

Abstract: Systems and methods for securing data transmissions using distance measurements are disclosed. A mobile device (such as a smart phone) and a base station can use ultra-wideband technology to determine the distance between the two devices. The distance measurements produced by the mobile device and the base station can be compared, directly or indirectly by the mobile device, the base station, and/or an access device to determine whether the mobile device is present at an access device or if the mobile device is not present at the access device (as expected during a relay attack). If the mobile device is not present at the access device, the access device can prevent or cancel an interaction based on the data transfer (e.g., opening a locked door of a secure building in response to receiving an access credential from the mobile device).

Abstract: A thin client may be utilized to facilitate data exchanges between two devices (e.g., a remote computer and a portable device). In some embodiments, the two devices may utilize differing communications protocols. The thin client may further be configured with a rules engine that determines one or more actions to be performed in response to one or more stimuli. The thin client may manage the processing flow between the two devices according to one or more predefined rules that are interpretable by the rules engine. The rules may be pushed to the thin client via any suitable device enabling the functionality of the thin client to be configured and/or modified without having to update the hardware and/or software of the thin client.

Abstract: Methods and systems for token-based off-chain interaction authorization are disclosed. A hub computer can maintain a network of off-chain (or “layer two”) channels between itself, cryptocurrency issuer computers, and cryptocurrency custodian computers. These off-chain channels correspond to one or more underlying blockchains. The hub computer can receive an access token, a resource provider identifier, and an interaction value. The hub computer can use the access token to identify a cryptocurrency issuer computer associated with the mobile device, and use the resource provider identifier to identify the cryptocurrency custodian computer associated with the access device. The hub computer can update the state of the off-chain channels corresponding to these two computers based on the interaction value, then transmit an authorization response message.

Abstract: A method includes rendering, by a display of a communication device, a user interface to a user after the user interacts with the communication device. A processor associated with the communication device determines a location of a contactless reader device in the display of the communication device. Responsive to determining the location, the method includes rendering an interaction graphic associated with the contactless reader device on the display proximate to the location.

Abstract: A method is disclosed and includes determining a test plan to test a kernel on a mobile device, and determining an interaction input message according to the test plan, the interaction input message comprising first data. The method also includes transmitting the interaction input message comprising the first data to the mobile device over a network-based communication channel. The kernel in the mobile device generates the interaction output message in response to receiving the interaction input message. The method also includes receiving, from the mobile device, the interaction output message comprising second data from the mobile device over the network-based communication channel, and determining if the interaction output message is consistent with the test plan.

Abstract: A method and system for biometric self-enrollment is provided. A user can receive a portable device and an enrollment device, as well as an enrollment identifier in a separate communication. The user can couple the portable device and the enrollment device, enter the enrollment identifier into the enrollment device. Using the coupled portable device, the user can capture a biometric that can be stored on the portable device. At another time, a user can provide an additional biometric to the portable device. The portable device can compare the biometric received during the biometric self-enrollment and compare it to the additional biometric as part of a biometric authentication procedure. An enrolled portable device can be utilized for a variety of subsequent transactions.

Abstract: Described herein are systems, methods, and apparatuses for performing a user-less payment for an item upon its delivery by an unmanned delivery vehicle. The unmanned delivery vehicle may navigate to a delivery location, receive payment information, initiate a payment transaction with a remote server, and release the item at a specified location upon successful completion of the payment transaction. Upon arrival of the unmanned delivery vehicle, a wireless data transmission device may send payment information to a remote server, and the remote server may provide the unmanned delivery vehicle with an indication of whether the item can be released and a specific location at which the item can be released.

Abstract: Embodiments provide an NDEF interface on a co-badged user card (e.g., a payment card storing multiple payment applications or accounts) to modify the payment application selection status on the co-badged card using a mobile application provided on a user device with NDEF support. The NDEF interface on the co-badged card allows communication with the mobile application stored on the user device operating a variety of operating systems (e.g., iOS and Android).

Abstract: Systems and methods for securing data transmissions using distance measurements are disclosed. A mobile device (such as a smart phone) and a base station can use ultra-wideband technology to determine the distance between the two devices. The distance measurements produced by the mobile device and the base station can be compared, directly or indirectly by the mobile device, the base station, and/or an access device to determine whether the mobile device is present at an access device or if the mobile device is not present at the access device (as expected during a relay attack). If the mobile device is not present at the access device, the access device can prevent or cancel an interaction based on the data transfer (e.g., opening a locked door of a secure building in response to receiving an access credential from the mobile device).

Abstract: A system and method are provided for generating access tokens on a user device rather than via a remote server computer. An access token can be generated on a second user device by combining and encrypting, with format preservation, a primary access identifier, variable value, and salt. The resulting value can be provided to a first user device that subsequently can provide the access token to an access device as a part of an interaction. The access device can generate an authorization request message that includes the access token and transmit the authorization request message to a remote server computer for processing. The remote server computer can process the access token to determine the primary access identifier despite not being involved in the generation of the access token, providing an improvement over conventional tokenization methods.

Abstract: Systems and methods provide dynamic application selection based on contextual data of a transaction. A portable device may include multiple applications with which a transaction may be processed. These applications may be associated with a variety of priorities. The portable device may provide a list of these applications to an access device from which one application may be selected.

Abstract: A method is disclosed. The method comprises transmitting, by an access device to a communication device, a resource provider certificate and an access device certificate. Then, establishing a secure channel between the access device and the communication device using data from the resource provider certificate and the access device certificate. Then, transmitting to or receiving data from the communication device using the secure channel.

Abstract: A method for conducting a transaction is disclosed. A processor in a thin client may receive transaction data from a portable device of a first portable device type. The processor may determine that the portable device is the first portable device type. The processor may apply an encryption protocol associated with a second portable device type to the transaction data to create encrypted data. The processor may transmit the encrypted data to a remote computer, wherein the remote computer utilizes the encryption protocol to decrypt the transaction data, and thereafter process the transaction data to conduct the transaction.

Abstract: A method includes an access device determining an interaction value associated with an interaction. The access device prompts a user operating a user device for a secret. The access device receives the secret. The access device receives an initial communication then a user device certificate comprising a public key from the user device. The access device then verifies the certificate. The access device concatenates at least the secret and an unpredictable number to form a concatenated value. The access device encrypts the concatenated value with the public key, then transmits the encrypted concatenated value. The user device decrypts the encrypted concatenated value with a private key, verifies the unpredictable number, verifies the secret, determines whether or not the interaction is approved, produces an interaction authorization result, and then provides the interaction authorization result to the contactless access device. The access device receives the interaction authorization result.

Abstract: The method includes receiving, in an interaction by a switch computer from a second device, data associated with a machine readable code generated by a first application on a first device and provided by a first device to a second application on the second device. The method also includes determining, by the switch computer, a first server computer associated with a first application, transmitting the data associated with the machine readable code and the interaction data to the first server computer, which processes the data associated with the machine readable code and the interaction data, determining, by the switch computer, a second server computer associated with the second application, and transmitting, by the switch computer, a communication to the second server computer. The communication informs the second server computer that the first server computer processed the data associated with the machine readable code and the interaction data.

Abstract: A method includes receiving, by a network processing computer, software information from a development computer. The network processing computer can determine one or more logical modules of a plurality of logical modules based on the software information. The network processing computer can provide the one or more logical modules to a testing computer. The testing computer evaluates one or more software modules corresponding to the software information using the one or more logical modules. The network processing computer receives a security evaluation report from the testing computer based on the evaluation of the one or more software modules using the one or more logical modules. The network processing computer creates a security evaluation summary based on the security evaluation report.

Abstract: A method is disclosed. The method includes transmitting, by a user device to an access device, a digital certificate and a seed. The access device encrypts the seed and a first access device key with a public key from the digital certificate to form encrypted data. The method also includes receiving from the access device, the encrypted data, decrypting the encrypted data using a private key corresponding to the public key to obtain the seed and the first access device key, verifying that the seed received from the access device matches the seed sent to the access device, encrypting a secret or derivative thereof with the first access device key to form an encrypted secret or derivative thereof, and transmitting to the access device, the encrypted secret or derivative thereof.