Abstract: A method for linking an initial authentication of an online transaction to a subsequent authorization of the online transaction is provided.

Abstract: Systems, methods, apparatuses, and computer-readable media are provided for rules execution testing using live production data. Live production authorization requests may be received at a production computing device. Production authorization decisions may be determined at the production computing device for the live production authorization requests using a set of production rules. The production authorization requests, data used to arrive at the corresponding production authorization decisions, and/or the corresponding authorization decisions may be streamed in real-time to a test device. Test authorization decisions may be determined at the test device for the received live production authorization requests using the received data used to arrive at the production authorization decisions, and using a set of test rules. Production and test authorization decisions may be compared to determine decision differences. One or more user interfaces or reports may be generated for outputting the decision differences.

Abstract: An input device includes a control portion for controlling the input device encrypts image data, which is data of an image displayed on a display surface of a display mechanism, and transmits it to the display mechanism, and a detection mechanism for detecting a position of the user's fingertip in an aerial-image display region encrypts position data, which is data of a detected position of the user's fingertip, and transmits it to the control portion. In addition, in this input device, at least a fraud against a position-data signal line which transmits the position data from the detection mechanism to a control board and a fraud against the control board can be detected by a fraud detection mechanism for detecting that a fraud against the input device.

Abstract: Systems and methods for electronic fobs that communicate via short range communications protocols to conduct transactions with a nearby device are provided. Such electronic fobs may use electronic tokens to conduct electronic transactions, such as payment transactions. Account data may be stored within a secure element of the electronic fob. Electronic tokens may also be stored by the secure element. Using such data and/or tokens, electronic fob may write electronic tokens to be used in electronic transactions. Also, such electronic fobs may also be used to perform other tasks and interface with other devices.

Abstract: A method and a system for facilitating secure card-based transactions are provided. A payment network server stores a mapping database that is indicative of a mapping between actual card data of a transaction card and a plurality of proxy datasets that are stored in the transaction card. The payment network server receives a transaction request for a transaction that is initiated by way of the transaction card. Instead of the actual card data, the transaction request includes a first proxy dataset as an identifier to the transaction card. The payment network server accesses the mapping database and retrieves the actual card data mapped to the first proxy dataset. The payment network server then communicates the transaction request having the actual card data to an issuer of the transaction card. The issuer processes the transaction based on the actual card data.

Abstract: Systems, methods, apparatuses, and computer-readable media are provided for rules execution testing using live production data. Live production authorization requests may be received at a production computing device. Production authorization decisions may be determined at the production computing device for the live production authorization requests using a set of production rules. The production authorization requests, data used to arrive at the corresponding production authorization decisions, and/or the corresponding authorization decisions may be streamed in real-time to a test device. Test authorization decisions may be determined at the test device for the received live production authorization requests using the received data used to arrive at the production authorization decisions, and using a set of test rules. Production and test authorization decisions may be compared to determine decision differences. One or more user interfaces or reports may be generated for outputting the decision differences.

Abstract: In accordance with an example embodiment there is disclosed herein a method for authenticating a touch screen layout. A file containing the touch screen layout is signed by a key known to the device that is to deploy the touch screen layout, such as, for example an automated banking machine and/or a point of sale system. Before the touch screen is used by the device's user interface, the device validates the touch screen.

Abstract: Systems, computer program products, and methods are described herein for intrusion detection using resource activity analysis. The present invention is configured to receive, from a computing device of a user, an indication that the user has accessed a resource allocation portfolio of a customer; determine a geographic information of the user; retrieve a geographic information of the customer; determine that the geographic information of the user does not match the geographic information of the customer; determine an exposure level associated with the user access of the resource allocation portfolio of the customer; determine that the exposure level is greater than a predetermined threshold; and automatically trigger a transmission of a notification to a computing device of an administrator indicating that the exposure level associated with the user access of the resource allocation portfolio of the customer is greater than the predetermined threshold.

Abstract: Provided is a computer-implemented method for authenticating a customer during payment transactions based on biometric identification parameters of the customer that includes receiving image data associated with an image template for identification of a customer, receiving image data associated with an image of a biometric identification parameter of the customer during a payment transaction between the customer and a merchant, establishing a short-range communication connection with a user device associated with the customer during the payment transaction between the customer and the merchant, authenticating an identity of the customer for the payment transaction via the short-range communication connection, determining an account identifier of an account of the customer based on authenticating the identity of the customer for the payment transaction, and processing the payment transaction using the account identifier of the account of the customer. A system and computer program product are also disclosed.

Abstract: Embodiments herein are directed to a vehicle floating fleet vehicle system for determining a location of a user and one or more car-sharing vehicles. The system includes a server computing device operated by a floating fleet service provider. The server computing device includes at least one processor; a memory communicatively coupled to the at least one processor; and machine readable instructions stored in the memory. The machine readable instructions cause the vehicle floating fleet system to perform at least the following when executed by the at least one processor receive a request for the one or more car-sharing vehicles, determine the one or more car-sharing vehicles in one or more nearby gated parking facilities, send information about the one or more car-sharing vehicles to the user, and receive a selected car-sharing vehicle in a nearby gated parking facility of the one or more nearby gated parking facilities from the user.

Abstract: Smart vehicle parking apparatus and related methods are disclosed herein. An example system includes a processor to reserve a personal vehicle for a time interval. The personal vehicle is to park at a location during the time interval. The processor is also to match a vehicle use option to the personal vehicle based on the time interval and the location. The vehicle use option is associated with a person to use the personal vehicle during the time interval.

Abstract: A transaction device is described. The device comprises storage configured to store a first data record comprising first value data and a unique identifier associated with one other device; communications circuitry configured to receive an identifier and second value data from a device; and control circuitry configured to compare the received identifier with the unique identifier and in the event of a positive comparison, the control circuitry is further configured to update the stored first value data in accordance with the exchanged second value data.

Abstract: An automated package retrieval system is provided. The automated package retrieval system includes a hub apparatus that includes multiple docking stations for multiple delivery devices, a power supply unit coupled to the hub apparatus, and a controller. The controller is configured to instruct at least one of the delivery devices to travel to a location to deliver an item ordered by a user. Once it is determined that the user has not retrieved the item from the delivery device, the delivery device is instructed to return to the hub apparatus. In response to detecting the user in proximity to the hub apparatus after the delivery device has returned to the hub apparatus, the user is provided with access to a storage compartment of the delivery device.

Abstract: A money handling machine includes: a housing; a drawer that is drawable from the housing; a locking mechanism configured to lock the drawer in the housing; an identification information acquisition unit configured to acquire identification information of an operator; and a controller configured to control the locking mechanism such that, when an error occurs in a handling unit, the drawer can be drawn from the housing subject to the identification information of the operator having been acquired by the identification information acquisition unit.

Abstract: A transmitter comprises a multi-phase radio-frequency (RF) converter configured to output multiple sinusoidal RF power signals; and a multi-phase resonator configured to receive the multiple sinusoidal RF power signals and resonate multiple inductors and capacitive electrodes at a resonant frequency at multiple phases to transfer power via resonant electric field coupling.

Abstract: A system for performing secure maintenance on automated machines may include a maintenance management apparatus and an automated machine. The maintenance management apparatus is configured for scheduling the maintenance appointment for the automated machine, in response to scheduling the maintenance appointment and creating and communicating a maintenance security code to the automated machine. The automated machine is configured for receiving a request from a maintenance provider to initiate the maintenance appointment, validating the maintenance provider using the maintenance security code and providing access to a secure item storage unit, determining that the maintenance provider has completed the maintenance appointment, and communicating information associated with the maintenance appointment to the maintenance management apparatus and/or a computing device of the maintenance provider.

Abstract: A structure of a human-powered vehicle including at least one coupling kit having a fastening zone and a complementary fastening zone. The fastening zone being configured to be coupled to the complementary fastening zone presented by a second similar vehicle or by a fixed terminal. A vehicle and/or terminal including at least one coupling kit of the structure. A method of recharging battery of such vehicle.

Abstract: Various switchable RFID devices are disclosed. These switchable RFID devices may include one or more RFID tags and one or more switches. Some of these one or more switches are optionally wireless. In various embodiments, the switchable RFID devices include cellular phones, security devices, identity devices, financial devices, remote controls, and the like. The switchable RFID devices are optionally disposed in a cellular phone.

Abstract: A system for performing secure maintenance on automated machines may include a maintenance management apparatus and an automated machine. The maintenance management apparatus is configured for scheduling the maintenance appointment for the automated machine, in response to scheduling the maintenance appointment and creating and communicating a maintenance security code to the automated machine. The automated machine is configured for receiving a request from a maintenance provider to initiate the maintenance appointment, validating the maintenance provider using the maintenance security code and providing access to a secure item storage unit, determining that the maintenance provider has completed the maintenance appointment, and communicating information associated with the maintenance appointment to the maintenance management apparatus and/or a computing device of the maintenance provider.

Abstract: A method for access control accepts a first data from a first mobile computing device of a first patron. The first data is representative of at least a certificate and represents an authorization for access. The method further provides the access in response to the first data, and makes a record in the first station. The record includes a second data representing the access and an identifying portion of the certificate. The method further provides, after the access, a third data to a second mobile computing device of any patron. The third data is deliverable by the second mobile computing device to the management system and is representative of the record. The method further accepts a fourth data that is representative of at least an acknowledgment of the record, and deletes the record from the first station in response to the fourth data.

Abstract: A cash processing system capable of preventing erroneous operations by an operator during cash transfer processing and enabling the cash transfer to be executed efficiently. This system comprises a first cash processing machine for performing an outgoing cash transfer, a second cash processing machine for performing an incoming cash transfer, and a portable terminal. The portable terminal is equipped with a display unit, an operation unit for receiving input of cash transfer information, including cash information, and a communication processing unit. Upon receiving outgoing cash transfer information included in the cash transfer information from the portable terminal, the first cash processing machine pays out cash based on the outgoing cash transfer information. Upon receiving incoming cash transfer information included in the cash transfer information from the portable terminal, the second cash processing machine receives cash based on the incoming cash transfer information.

Abstract: A user device is configured to allow a user to select any one of a plurality of accounts associated with the user to employ in a financial transaction. In one embodiment, the user device includes a biometric sensor configured to receive a biometric input provided by the user, a user interface configured to receive a user input identifying information concerning an account selected by the user from the plurality of accounts. In a further embodiment, the user device a processor coupled to the biometric sensor to receive information concerning the biometric input and to the user interface. According to one embodiment, the processor is configured to generate a non-predictable value and to generate encrypted authentication information from the non-predictable value and any of the account identifying information, information concerning the biometric input, and secret information.

Abstract: A communication device, which is capable of presenting one or more of a plurality of virtual keyboards, may be operable to receive application content. The application content may require a user to enter particular data via one of the plurality of virtual keyboards. The plurality of virtual keyboards may comprise a system keyboard and one or more third-party keyboards. The communication device may be operable to determine whether the particular data to be entered by the user may comprise sensitive personal information associated with the user. Based on the determination of the personal information and/or based on a configuration option communicated from the user, the communication device may be operable to determine whether to cause presentation of the system keyboard for the user to enter the particular data. The communication device may cause presentation of the system keyboard by disabling the one or more third-party keyboards.

Abstract: A wireless end-user device, comprising one or more modems enabling the wireless end-user device to communicate with a network system over a wireless access network, a touch-screen user interface, and one or more processors configured to execute one or more instructions that, when executed by the one or more processors, cause the one or more processors to detect a user input through the touch-screen user interface, the user input comprising a request to remove the wireless end-user device from an existing device group account, the existing device group account being associated with one or more devices including the wireless end-user device, and send a message to the network system over the wireless access network, the message conveying the request to remove the wireless end-user device from the existing device group account.

Abstract: A communication device, which is capable of presenting one or more of a plurality of virtual keyboards, may be operable to receive application content. The application content may require a user to enter particular data via one of the plurality of virtual keyboards. The plurality of virtual keyboards may comprise a system keyboard and one or more third-party keyboards. The communication device may be operable to determine whether the particular data to be entered by the user may comprise sensitive personal information associated with the user. Based on the determination of the personal information and/or based on a configuration option communicated from the user, the communication device may be operable to determine whether to cause presentation of the system keyboard for the user to enter the particular data. The communication device may cause presentation of the system keyboard by disabling the one or more third-party keyboards.

Abstract: A method and receiver are provided. The receiver comprises a first delay buffer and redundant data removal block. The first delay buffer is configured to delay a first data stream carrying first content. The first data stream is comprised of a plurality of compressed data blocks. The redundant data removal block configured to for each compressed data block of the first data stream: identify redundant data in the compressed data block; remove the redundant data to provide a reduced compressed data block; and store the reduced compressed data block in the first delay buffer.

Abstract: A technique involves modular storage of network service plan components and provisioning of same. A subset of the capabilities of a service design system can be granted to a sandbox system to enable customization of service plan offerings or other controls.

Abstract: A wireless end-user device is disclosed. One or more user inputs indicate that a user of the wireless end-user device authorizes the device to send a first file to a server over a network of a first network type, and that the user does not authorize the device to send a second file to the server over the network of the first type. Based on the one or more user inputs and a determination that the device is connected to the network of the first type, the device sends the first file, but not the second file, to the server over the network of the first network type. Upon detecting that the device is connected to a network of the second network type, the device sends the second file to the server over the network of the second network type.

Abstract: Systems and methods for authentication code entry in touch-sensitive screen enabled devices are disclosed. In one embodiment, a method for entering data to a data entry device comprising at least one computer processor, a memory, and a touch-sensitive screen may include the touch-sensitive screen providing an input interface comprising a plurality of virtual keys; the touch-sensitive screen sensing a first touch on the touch-sensitive screen; the touch-sensitive screen sensing a release of the first touch and a location of the first touch at the time of release; the computer processor determining a corresponding virtual key based on the location of the first touch at the time of release; the computer processor receiving an entry gesture at an entry gesture interface; and the computer processor identifying the corresponding virtual key as a value in an authentication code following the receipt of the entry gesture.

Abstract: A portable terminal device has enclosures with a movable portion, a display section that displays visible information showing an operation target area, and a touch sensor that detects a position on a display screen of the display section touched by a user's finger, or the like. A shape detection section detects a change in the shape of the enclosure; an input operation management section manages a position detected by the touch sensor and an operation target area of each of pieces of visible information displayed on the display section in an associated manner; and a display control section automatically makes a change to at least display positions of the respective pieces of visible information about the operation target displayed on the display section in accordance with a change in shape of the enclosure detected by the shape detection section.

Abstract: The invention provides a solution for secure input of a user's input into an electronic device. The invention comprises methods and apparatus for secure input of a user's identifier e.g. password or other code. An image of a keyboard is superimposed over a scrambled, operable keyboard within a display zone of a screen associated with an electronic device. The keyboard image depicts a non-scrambled keyboard, in that the keys depicted in the image are in an expected or standardised format or order eg QWERTY keyboard arrangement. The difference in positions of the keys depicted in the image, and those in the operable keyboard, provides a mapping which enables an encoded form of the identifier to be generated, such that the un-encoded version is never stored in the device's memory. Preferably, the image depicts a keyboard which is standard for the device which it is being displayed on.

Abstract: Embodiments of the present application provide a method and device for generating digital verification codes. The specific implementation of the method comprises the following steps: selecting a first number of different digitals from digitals 0-9 when it is needed to generate a digital verification code, wherein the first number is smaller than the number of digits of the digital verification code to be generated; generating a digital verification code including at least two identical digitals appeared consecutively by arranging and combining the first number of different digitals according to a preset rule; and outputting the generated digital verification code to a designated user terminal. By applying the embodiments of the present application, it is possible to reduce the difficulty for a user to remember the digital verification codes.

Abstract: Strategies, tools and techniques for establishing purchase cards for customers of a financial institution are provided. A primary purchase card can be established for a customer in association with at least one account of the financial institution. Also, at least one secondary purchase card can be established for the customer in addition to the primary purchase card. The secondary purchase card can be linked to the primary purchase card and to at least one of the same accounts associated with the primary purchase card. Customer configuration of various rules for the secondary purchase card can be facilitated, such as rules that govern purchase limits, activation parameters, deactivation parameters, and/or automatic replenishment schedules for the secondary purchase card.

Abstract: A control section allows a screen of a display section to display a plurality of numeric keys, detects a touch gesture on the individual numeric key through a touch panel to allow an input of a numeric number corresponding to the numeric key subjected to the touch gesture, and detects an action on each of hard keys to accept an instruction to perform a function corresponding to the hard key subjected to the action. When a predetermined action is performed on one or more individuals of the hard keys, the control section assigns numeric numbers to the respective hard keys and detects an action on the individual hard key to allow an input of the numeric number corresponding to the hard key subjected to the action.

Abstract: Novel tools and techniques are provided for implementing Internet of Things (“IoT”) functionality. In some embodiments, a computing system or IoT management node might receive sensor data from one or more IoT-capable sensors, analyze the sensor data to determine one or more actions to be taken, and identify one or more devices (e.g., household devices associated with a customer premises; vehicular components associated with a vehicle; devices disposed in, on, or along a roadway; devices disposed throughout a population area; etc.) for performing the determined one or more first actions. The computing system or IoT management node then autonomously controls each of the identified one or more devices to perform tasks based on the determined one or more first actions to be taken, thereby implementing smart environment functionality (e.g., smart home, building, or customer premises functionality, smart vehicle functionality, smart roadway functionality, smart city functionality, and so on).

Abstract: A method is provided for authenticating debit card transactions engaged in by a cardholder on a communications network.

Abstract: Devices, systems, and methods are disclosed which relate to an NFC-enabled security token that is removably coupled to a mobile device. The security token may be provisioned with the information by the mobile device, then decoupled from the mobile device and used to authenticate the user or perform a transaction at a POS terminal equipped with an NFC reader. The security token includes logic for user-controlled restrictions on allowable purchases, such as payment limits, timeouts, vendor identifiers, allowed purchases, and location-based restrictions. The security token is further equipped with “self-destruct” security features, such as deactivating itself or erasing any sensitive information upon being unable to contact the mobile device for a specified duration, or being subject to an unauthorized or restricted transaction, until such time as it is re-coupled to the mobile device.

Abstract: Systems and methods according to the present invention provide a more secure Automated Teller Machine (ATM) transaction by preventing observation of banking customers' Personal Identification Number (PIN). Such systems and methods make it difficult to obtain a customer's PIN by tracking the hand movement of a customer using an ATM. Inputs presented for a customer selection are preferably dynamically displayed in different locations preferably each time the customer is asked to enter a PIN. Dynamically changing the sequence of the display and/or location of the presented inputs reduces the possibility of mapping the hand movement of the customer to the positions of the inputs displayed for a customer selection. Inputs may also be presented at a very narrow viewing angle, thereby making observation of a PIN difficult. Hence, banking customers are preferably provided with a more robust and secured ATM transaction system.

Abstract: Systems and methods according to the present invention provide a more secure Automated Teller Machine (ATM) transaction by preventing observation of banking customers' Personal Identification Number (PIN). Such systems and methods make it difficult to obtain a customer's PIN by tracking the hand movement of a customer using an ATM. Inputs presented for a customer selection are preferably dynamically displayed in different locations preferably each time the customer is asked to enter a PIN. Dynamically changing the sequence of the display and/or location of the presented inputs reduces the possibility of mapping the hand movement of the customer to the positions of the inputs displayed for a customer selection. Inputs may also be presented at a very narrow viewing angle, thereby making observation of a PIN difficult. Hence, banking customers are preferably provided with a more robust and secured ATM transaction system.

Abstract: A system for authenticating near field communication (NFC) transactions that has an NFC merchant reader that provides an electromagnetic field and an NFC hand-held device that senses the electromagnetic field and prompts a user for a personal identifier (PI) in response to the electromagnetic field. Additionally, the NFC hand-held device wirelessly transmits the PI, and the NFC hand-held-device receives an approval code transmitted to the NFC hand-held device in response to the PI. Further, the NFC hand-held device transmits the approval code to the NFC merchant reader, and the NFC merchant reader transmits a payment request comprising the approval code.

Abstract: A method, a portable data storage medium, an approval apparatus and a system for approving a transaction using acceleration sensors integrated in a portable data storage medium.

Abstract: A key fob includes a biometric sensor including a fingerprint area sensor having a surface for receiving a finger, and a controller includes at least one processor configured to authenticate a user of the key fob based on biometric information obtained with the biometric sensor and stored biometric information for an individual. The key fob includes a RF transmitter for communicating stored transaction information to a reader upon authentication of the user and a housing. The housing includes a base for supporting the biometric sensor and a cover sleeve slidably engaged with the base to allow for extension from and retraction into the sleeve by the base, thereby permitting selective exposure of the fingerprint area sensor under user actuation.

Abstract: A transponder-reader payment system includes a fob including a transponder, and a RFID reader for interrogating the transponder. The system may further include a personalization system for populating onto the fob and RFID reader identifying information and security and authentication keys which may be used during mutual authentication of the fob and the reader and for completing a transaction. In exemplary operation, the fob and RFID reader may be personalized, the fob may be presented to the RFID reader for interrogation, the fob and reader may engage in mutual authentication, and fob identifying information may be provided to the reader for transaction completion. In another exemplary embodiment, operation of the transponder-reader payment system may be controlled by an activation circuit. Further, the fob may be responsive to multiple interrogation signals.

Abstract: Systems and methods for generating a derived biometric template are provided. A biometric sample of a user is determined. A base biometric template includes a plurality of features extracted from the biometric sample. A degree of rotation is determined, and a derived biometric template is generated using the degree of rotation.

Abstract: A method, portable data carrier (1) and system for releasing a transaction using acceleration sensors (4, 5, 6) and a structure (8) on the data carrier (1).

Abstract: When processing repeated operations on the keyboard of a mobile communication device, mainly at direct debits, used is a separate data carrier with a memory in which is stored at least one file with a sequence of keyboard orders of a macro type. Data carrier is energetically supplied contact-free by electromagnetic field of the mobile communication device while receiving the requiring order and, according to this order, chooses from the memory and encodes appropriate file with a sequence of keyboard orders. Data carrier sends the encoded file into the mobile communication device which decodes the received file and performs processes representing the keystrokes according to the sequence of keyboard orders. The invention also describes connection and data carrier to perform above described method where the data carrier consists of a processor, transmitting and receiving unit, block for transforming electromagnetic field and a memory to store a file of orders.

Abstract: Among other things, one or more techniques and/or systems are provided for authorizing an action using vehicle identification information (e.g., supplied by a vehicle) and user identification information (e.g., supplied by a mobile device associated with a user of the vehicle). Such an action may relate to, among other things, refueling the vehicle, parking the vehicle, using a fee-based road segment, and/or other vehicle-centric actions, for example. Moreover, in one embodiment, as part of the authorization, a payment transaction may be initiated by an authorization system configured to authorize the action.

Abstract: A personal digital key (e.g., which can be carried by a human) contains a memory having different service blocks. Each service block is accessible by a corresponding service block access key. As the personal digital key (PDK) moves around, it is detected by sensors. The sensors report position data, thus enabling location tracking of the PDK. The sensors also provide a data path to various applications. An application that has access to a service block access key can therefore access the corresponding service block on the PDK. The sensors themselves may also contain service block access keys.

Abstract: A portable electronic apparatus has a first storage section configured to store information to be communicated to the processing apparatus and formats for a frame to be transmitted to the processing apparatus, in association with one another. The processing apparatus has a second storage section configured to store information communicated by the portable electronic apparatus and the format of the frame transmitted by the portable electronic apparatus, in association with each other. The portable electronic apparatus select one of the formats stored in the first storage section based on the data to be transmitted to the processing apparatus. The processing apparatus recognize information communicated by the portable electronic apparatus based on the format of the frame received from the portable electronic apparatus.

Abstract: A key fob includes a biometric sensor including a fingerprint area sensor having a surface for receiving a finger, and a controller includes at least one processor configured to authenticate a user of the key fob based on biometric information obtained with the biometric sensor and stored biometric information for an individual. The key fob includes a RF transmitter for communicating stored transaction information to a reader upon authentication of the user and a housing. The housing includes a base for supporting the biometric sensor and a cover sleeve slidably engaged with the base to allow for extension from and retraction into the sleeve by the base, thereby permitting selective exposure of the fingerprint area sensor under user actuation.