Abstract: Example embodiments for evaluating programmable conditions applicable to an operation are described. In an example embodiment, a request to evaluate one or more programmable conditions applicable to an operation is received. The request includes data associated with the operation. One or more objects representing the one or more programmable conditions are retrieved from a database. The one or more objects include executable code for determining compliance of the operation with the one or more programmable conditions. At least a portion of the executable code is executed based on the data associated with the operation. An output of the executable code is returned to a computing system issuing the request. The output includes an indication as to whether the operation complies with the one or more programmable conditions.

Abstract: Systems and methods of embodiments are described of a campaign controller that establishes a model for using a plurality of types of exploits based on at least results of simulated phishing communications using those exploits, and uses the model to communicate a first simulated phishing communication to one or more devices of a user where the type of exploit used for the first simulated phishing communication is selected using the model. The campaign controller applies either artificial intelligence or machine learning to the results of simulated phishing communications to establish the model. The campaign controller selects the exploit by applying either artificial intelligence or machine learning to one or more attributes of the user and/or one or more responses from the user.

Abstract: Transactions may be performed using a mobile device such as a user-wearable device using LoRaWAN protocol to minimize power consumption while maximizing communication range. Transaction information may be stored in the user-wearable device and transmitted to a transaction processing device using LoRaWAN communications. Transaction information may include user-specific information, payment information, merchant information, product information, user preference information and the like. In some instances, the only communication interface (or wireless communication interface) provided in the mobile device is a LoRaWAN communication interface.

Abstract: A method is disclosed. The method includes forming a local data connection between a mobile communication device comprising a voice assistant module, and an access device in an interaction. The method also includes receiving, by the mobile communication device, a voice command with a request for the access device to automatically provide a resource to a user of the mobile communication device.

Abstract: Aspects described herein may allow transactions to be authenticated based on images taken at the transaction site. For example, a computing device may decline a transaction request based on a first category of the transaction indicated in the category information violates a transaction category restriction of the user account. The computing device may send, to a user device associated with the user account, an instruction to upload one or more photos that depict a physical environment where the transaction is requested. If the photos indicate the requested transaction belongs to another category that does not violate the transaction category restriction, the system may approve the transaction based on the photos.

Abstract: Systems and methods are provided for authenticating users in connection with transactions. One example computer-implemented method includes, in response to presentment of a payment device in connection with a transaction, identifying, by a point-of-sale (POS) device, the payment device as enabled for facial authentication and retrieving, from the payment device, a reference image. The method also includes capturing, by the POS computing device, via a camera, a facial image of the user presenting the payment device and authenticating the user based on a comparison of the captured facial image of the user to the reference image. The method then includes, in response to successfully authenticating the user: compiling an authorization request for the transaction, appending an authentication indicator to a data element of the authorization request, which indicates that the user was biometrically authenticated, and submitting the authorization request to a payment network.

Abstract: A method for handoff includes: scanning an indirect token displayed on a guest device, where a guest has previously registered a payment instrument with a server, and associated the payment instrument with a plurality of indirect tokens, and the server has stored a payment token that associates the plurality of indirect tokens with the payment instrument in a database record along with a notification identifier; transmitting the ephemeral token to the server; simultaneously displaying details for a transaction, where the server has accessed the notification identifier to transmit a push notification to the guest device, and where the guest device is executing a proprietary application that allows for simultaneously displaying details for the transaction; and receiving notification from the server that the transaction is complete, where transaction completion data was entered via the guest device and transmitted to the server.

Abstract: Automated integration systems and methods using a broker system to enable the integration of a user's stored online session with a current session on a computing device in a physical facility are discussed.

Abstract: This application provides an identity Identification method for a fixed-point authorization, and devices and servers therefor, comprises receiving an identification request sent by a service terminal; wherein the identification request comprises terminal information and live body biological characteristic information of a target object; the terminal information comprises a terminal merchant number and terminal location information; determining at least one valid user of the service terminal according to the terminal information, and obtaining biological characteristic information of each valid user; wherein the valid user has a direct or an indirect authorization relationship with the service terminal; completing the identity identification according to the live body biological characteristic information of the target object and the biological characteristic information of each valid user.

Abstract: A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A personal digital key (PDK) is programmed using a trusted programming device to initialize and/or register the PDK for use. In one embodiment, the initialization and registration processes are administered by a specialized trusted Notary to ensure the processes follow defined security procedures. In a biometric initialization, the programming device acquires a biometric input from a user and writes the biometric data to a tamperproof memory in the PDK. In registration, the Programmer communicates to one or more remote registries to create or update entries associated with the user PDK. Once initialized and registered, the PDK can be used for various levels of secure authentication processes.

Abstract: A method of shopping within an electronic commerce environment includes enabling a first user of a plurality of users to add one or more items to a virtual shopping cart of the first user that is maintained by a server computer system, generating, by the server computer system, statistical data related to the one or more items, and providing the statistical data to the first user in a web page that is generated by the server computer system. The statistical data includes a total quantity of at least one of the one or more items that are contained in the virtual shopping carts of all of the plurality of users.

Abstract: A system includes a computing device comprising a memory storing instructions configured to cause a processor to receive: purchase data associated with products purchased by a user, online activity data performed by the user and other users and associated with information pertaining to the products, and vendor information comprising retail sales data, after-market sales data, and product availability associated with the products. The processor determines one or more values of the products based on the purchase data, the online activity data, and the vendor information and whether the purchased products correspond to specialty products based on the purchase data, the online activity data, and the values of the products. The processor may then send a notification to the user comprising an offer for insurance for the products in response to determining the products correspond to specialty products.

Abstract: This application relates to systems and methods for automatically generating fraud strategies. A system may comprise customer computing devices, a database, and retailer computing device(s). The retailer computing device(s) are configured to receive data related to customer transactions, calculate a negative reaction score, negative resolution score, anomaly score, and impact score for at least one value of the received data, determine whether the calculated scores are greater than or equal to respective thresholds, identify a value of the received data as a potentially fraudulent data value when one or more of the calculated scores is greater than or equal to its respective threshold, generate an output comprising a list of potentially fraudulent data value(s) and impact scores, identify area(s) of high impact leaks based on the output, and determine which customer computing devices are executing fraudulent transactions based on the identification of areas of high impact leaks.

Abstract: A system comprises a combination of digital fingerprint authentication techniques, processes, programs, and hardware to facilitate highly reliable authentication of a wide variety of composite physical objects. “Composite” in this case means that there are distinct regions of the object that must be authenticating individually and in tandem to authenticate the entire object. Preferably, a template is stored that defines for a class of objects what regions must be found, their locations, optionally semantic content of the regions, and other criteria. digital fingerprinting is utilized to locate and attempt to match candidate regions by querying a database of reference object records.

Abstract: A user initiates a transaction by providing identification data at an access device. Certain elements of a validation identity token, such validation keys, may be distributed among several remote server computers. After the elements are retrieved during the transaction, the validation identity token may be generated using the retrieved elements. The validation identity token may indicate whether the user is authenticated. No single entity can possess all elements utilized to generate the validation identity token, which mitigates risk of the validation identity token being compromised. In some embodiments, the validation identity token may be a chromatic identity token, which may indicate validity by color.

Abstract: In some implementations, a terminal device may obtain exchange information associated with an exchange initiated at the terminal device. The exchange information may identify a medium used in the exchange. The terminal device may be configured to present a terminal-side user interface for performing a signing operation of the exchange. The terminal device may selectively obtain user information associated with the medium used in the exchange. The user information may identify a user device associated with the medium. The terminal device may transmit, to the user device and based on obtaining the user information, presentation information that identifies content for a user-side user interface for performing the signing operation at the user device. The terminal device may receive, from the user device, signing information associated with a performance of the signing operation at the user device via the user-side user interface.

Abstract: Identity verification using payment instrument(s) is described. In an example, an identifier associated with a user can be associated with a secure storage component of a payment instrument associated with the user. A verifying entity—which can be a computing resource and/or a service provider—can receive a request to access a computing resource availed via a computing device operable by the user. The verifying entity can determine whether to grant the user access to the computing resource based at least in part on an interaction between the payment instrument and a reader device associated with the computing device.

Abstract: Facial recognition is used to allow access to platform-agnostic account information. A processing and verification device receives a request for a transaction requiring access to account information of a user. Responsive to the request, a new image of the user is generated, such as using an image sensor of a camera. The new image is used to query a database to determine whether an existing image stored in the database matches or substantially matches the new image. Responsive to a positive result of the query, the request is allowed by the processing and verification device granting the access to the account information. The access to the account information is then used to complete the transaction. The account information uses a global architecture such that it can be used with different hardware and software configurations of a connected system.

Abstract: An authentication and payment system for paying a supplier via a network may include a non-transitory computer readable storage medium having program logic stored thereon having a code for an authentication and payment application executable by a processor of a computing device. The code may be programmed to perform a step of receiving a first set of specific data elements from a payer regarding an authorized purchase by the payer from the supplier. The code may be further programed to receive a second set of specific data elements from the supplier. If the first set of specific data elements matches at least a portion of second set of specific data elements, the code may be programed to generate and send a single-use number to the supplier. The single-use number may be usable as a credit card number for only one purchase.

Abstract: In some implementations, a system may receive, from a user device, a user-side request associated with establishing an application session, wherein the user-side request includes an optical code. The system may receive, from an agent device, an agent-side request associated with the agent device joining the application session, wherein the agent-side request includes authentication information that indicates that the agent device scanned the optical code from an output component of the user device. The system may send, to the user device, a notification to permit the user device to join the application session. The system may activate the application session to permit the user device and the agent device to communicate via the application session.

Abstract: The present disclosure is directed to a system and method for quickly and efficiently resolving customer service issues associated with online shopping. When a customer requiring assistance contacts a customer service agent, the agent may use the customer's identification information to search for the customer's account. After locating the customer's active shopping cart or the customer account, the agent may open a session to view and edit the customer's shopping cart information, order information or account information. The agent may use the one or more administrative options available to the agent and unavailable to the customer to make changes to the customer account as needed. After making changes to the customer account, the agent may direct the customer to refresh their customer account in order to get updated with the changes made by the agent, thus resolving the customer's issues quickly and efficiently.

Abstract: In a method of providing funds to a monetary repository, information is received identifying a payee and request by the payee to convert a negotiable instrument made to the payee to funds. In response to the information, confirmation is received whether to convert the negotiable instrument to funds. An image of the endorsed negotiable instrument is received. If a determination is made to convert the negotiable instrument to funds, an amount of funds corresponding to a value of the negotiable instrument is directed to a repository.

Abstract: Disclosed are systems and methods for mapping a virtual shopper to a physical shopper. The systems and methods may include receiving, at a backend system, unidentified customer data including information about an unidentified customer. Customer identity data including identifying information about the customer may be received from the customer. An authentication token may be generated that links the unidentified customer data to the customer identity data.

Abstract: Method and systems of collaborative content creation performed in a network. Selection data is received from a first computing device at a computing resource. The computing resource selects, based on the selection data, at least one data record of a plurality of data records stored in a database. The selected at least one data record has a first data size. The computing resource creates user interface information of the at least one data record and is configured to allow a second computing device of the plurality of computing devices to display a representation of the selected at least one data record in a user interface of the second computing device. The user interface information has a second data size that is smaller than the first size. The computing resource transmits the user interface information to the second computing device.

Abstract: An information processing apparatus includes: a reading unit that reads a medium of the user and acquires information including biometrics information on the user from the medium; a display unit provided at a higher position than the reading unit; and a biometrics information acquisition unit that is provided between the reading unit and the display unit and acquires biometrics information on the user from the user.

Abstract: In some implementations, a system may receive, from a user device, a user-side request associated with establishing an application session, wherein the user-side request includes an optical code. The system may receive, from an agent device, an agent-side request associated with the agent device joining the application session, wherein the agent-side request includes authentication information that indicates that the agent device scanned the optical code from an output component of the user device. The system may send, to the user device, a notification to permit the user device to join the application session. The system may activate the application session to permit the user device and the agent device to communicate via the application session.

Abstract: Systems and methods for multivariate Artificial Intelligence (AI) smart cards are provided. An AI smart card may include, for example, pre-stored policy data that may be utilized as a portion of multivariate input by a suite of AI modules to formulate and analyze a claim of loss.

Abstract: Embodiments disclosed herein generally relate to a system and method of verifying an identity of user. A computing system receives a HTTP request. The HTTP request includes at least a user name and an IP address associated with a router accessed by the remote client device. The computing system parses the HTTP request to extract the user name and the IP address contained therein. The computing system identifies a user account associated with the extracted user name. The computing system identifies an internet service provider associated with the IP address. The computing system transmits a verification message to the third party service provider. The computing system receives a confirmation message from the third party service provider. The computing system increases a level of confidence in an identification verification process based on the confirmation.

Abstract: An account management system establishes an account for a user. The user enters user account information into the account and the account management system establishes a facial template for the user based on an image of the face of the user. The user requests to change user account information at a merchant POS (POS) device. The merchant POS device captures a facial image of the user and transmits the image the account management system, which generates a facial template and compares the generated facial template against the existing facial template associated with user account. If the generated facial template is less than a threshold difference from the existing facial template, the user may update user account information at the merchant POS device, which communicates the updated user account information to the account management system. The account management system associates the updated user account information with the user account.

Abstract: Alternative service access with operations including determining that a system has met a plurality of criteria, including the system having a battery level below a threshold, identifying a merchant, generating an authentication token for authorizing a payment using a payment provider, and sending the authentication token to the payment provider.

Abstract: Method, system and non-transitory computer-readable medium configured to store instructions for implementing a method for providing automated collateral eligibility services implemented by one or more collateral management service (CMS) devices between a client and at least one other party. The method includes receiving a collateral eligibility schedule setup request from a client device. The collateral eligibility schedule setup request includes one or more attributes and one or more rules. The method further includes initiating a current collateral eligibility schedule based on the received collateral eligibility schedule setup request; transmitting a notification to the at least one other party to review the current collateral eligibility schedule; receiving approval of the current collateral eligibility schedule from the at least one other party; and activating the approved current collateral eligibility schedule.

Abstract: Methods and systems for dynamically generating a verification value for a transaction and for utilizing such value to verify the authenticity of the payment service application. The dynamically created verification value may be generated on a payment device, such as an integrated circuit credit card or smart card, embedded into the payment data, and transmitted to a point of sale terminal. Alternatively, payment data is sent by a payment device to a point of sale terminal, which generates a verification value and embeds it into the payment data. The embedded verification value is used by a service provider to verify the authenticity of the transaction. The methods and systems may be used in a contactless (wireless) environment or a non-wireless environment.

Abstract: A system described herein may provide for multiple levels of authentication, such that a User Equipment (“UE”) may receive secure content from an application server, which may include or may be implemented by a multi-access edge computing (“MEC”) system. As described herein, a user associated with a UE may register the UE and/or a particular application with an authentication system and/or the application server. The registration of the UE and/or the application may establish a “trust” relationship between the authentication system and the UE, such that a user-level authentication performed by the UE, such as biometric authentication, may be accepted by the authentication system and/or the application system as an authentication of the user.

Abstract: Facilitating transaction status indications for point-of-sale (POS) systems is described. A POS application stored on a POS terminal of a POS system may communicate with a payment reader device coupled to the POS terminal and a payment server application. The POS application may receive, from a customer device associated with a customer and via a short-range communication network, payment information for satisfying a cost of a transaction. The POS application may send the payment information to the payment server application to attempt to authorize the payment information for the cost of the transaction and may receive, from the payment server application, an indication of a status of the transaction. Responsive to receiving the indication of the status of the transaction, the payment reader device and the customer device may output respective aspects of a transaction status indication associated with the status of the transaction.

Abstract: The present invention relates to a system and method for individuals of social network service to transmit or receive digital gift items via mobile applications connected to merchant point of sale systems. The social networking service stores data pertaining to a plurality of merchant and customers subscribing to services of a social networking service. The social networking service may receive a request from a first user to send a digital gift, which represents a good or service offered by a merchant, to a second user. The social networking service transmits a representation of the digital gift and an interactive element to a second user for enabling the second user to accept the digital gift. Upon receiving an indication that the second user has accepted the digital gift, the social networking service is configured to instantly generate a communication channel for the second user to contact the first user, and also facilitate processing of a payment associated for the digital gift.

Abstract: A device implementing an inter-device credential transfer system may include at least one processor that is configured to receive a request to transfer a transaction credential from a first device to a second device, the transaction credential being associated with a stored monetary value and the request comprising a transaction credential identifier of the transaction credential. The at least one processor is further configured to prevent, responsive to the request, the transaction credential from being utilized for payment transactions by the first device. The at least one processor is further configured to provision an instance of the transaction credential on the second device. The at least one processor is further configured to cause the instance of the transaction credential to be activated on the second device with a balance corresponding to the stored monetary value associated with the transaction credential.

Abstract: A digital content security and communication system is disclosed. The digital content security and communication system may include one or more data stores to manage data within a network, and one or more servers to facilitate operations using information from the one or more data stores. The digital content security and communication system may include an analytics subsystem, the analytics subsystem system comprising a data access interface to receive data associated with a user interacting with an online application, and receive data from a data source.

Abstract: Facial recognition is used to allow access to platform-agnostic account information. A processing and verification device receives a request for a transaction requiring access to account information of a user. Responsive to the request, a new image of the user is generated, such as using an image sensor of a camera. The new image is used to query a database to determine whether an existing image stored in the database matches or substantially matches the new image. Responsive to a positive result of the query, the request is allowed by the processing and verification device granting the access to the account information. The access to the account information is then used to complete the transaction. The account information uses a global architecture such that it can be used with different hardware and software configurations of a connected system.

Abstract: A system comprises a combination of digital fingerprint authentication techniques, processes, programs, and hardware to facilitate highly reliable authentication of a wide variety of composite physical objects. “Composite” in this case means that there are distinct regions of the object that must be authenticating individually and in tandem to authenticate the entire object. Preferably, a template is stored that defines for a class of objects what regions must be found, their locations, optionally semantic content of the regions, and other criteria. digital fingerprinting is utilized to locate and attempt to match candidate regions by querying a database of reference object records.

Abstract: Association information received from a number of mobile devices is recorded at a server end, where each mobile device is associated with a user that is pre-registered with the server end. An identification request is received at the server end and from a cashier device, where the identification request includes identity information associated with a particular user. One or more payment candidates corresponding to the cashier device are determined by the server end. A particular user account corresponding to the particular user is determined by the server end by comparing the identity information from the identification request with identity information associated with each of the payment candidates. The particular user account is returned by the server end to the cashier device for making a payment.

Abstract: A method for conveyance of payment credentials through a third party data source includes: storing, in a memory of a computing device, at least a first public key and payment credentials associated with a transaction account; generating, by a generation module of the computing device, a machine-readable code encoded with at least the first public key; displaying, by a display device interfaced with the computing device, the generated machine-readable code; generating, by the generation module of the computing device, a key pair comprised of at least a private key and a second public key; encrypting, by an encryption module of the computing device, the payment credentials using the private key; and electronically transmitting, by a transmitting device of the computing device, the encrypted payment credentials to a publicly accessible data source.

Abstract: The invention relates generally to the processing of electronic payments that involve an payment instrument. A payment instrument reading device is paired with a payment initiating device to allow transaction information generated by the payment initiating device to be automatically transmitted to its associated payment instrument reading device. This means that rekeying of transaction information is not required. In some embodiments one or more beacons are provided in a premises, to allow the location of a mobile payment initiating device to be determined. This location is used to either direct the payment initiating device to a payment instrument reading device, or vice versa. Transaction data generated by the payment initiating device is automatically transmitted to the payment instrument reading device. A pairing module is also provided, which is configured to pair a payment instrument reading device with a payment initiating device.

Abstract: A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A personal digital key (PDK) is programmed using a trusted programming device to initialize and/or register the PDK for use. In one embodiment, the initialization and registration processes are administered by a specialized trusted Notary to ensure the processes follow defined security procedures. In a biometric initialization, the programming device acquires a biometric input from a user and writes the biometric data to a tamperproof memory in the PDK. In registration, the Programmer communicates to one or more remote registries to create or update entries associated with the user PDK. Once initialized and registered, the PDK can be used for various levels of secure authentication processes.

Abstract: The systems, methods and apparatuses described herein provide a virtual integrated circuit card (ICC). In one aspect, a method of creating a virtual ICC may be provided. The method may comprise obtaining executable code configured to run on a user device to facilitate financial transactions, preparing a first encryption key usable by the executable code, receiving a second encryption key associated with the user device, forming a virtual ICC comprising the executable code and the first encryption key, and encrypting the virtual ICC with the second encryption key. In another aspect, a virtual ICC may be embodied on a non-transitory computer-readable medium. The virtual ICC may comprise executable code configured to run on a user device to facilitate financial transactions and a first encryption key usable by the executable code. The virtual ICC may be encrypted using a second encryption key associated with the user device.

Abstract: This disclosure describes techniques and arrangements for splitting one or more items from a ticket to another ticket. Some techniques and arrangements facilitate the splitting of one or more items from an open ticket to one or more split tickets. In some implementations, a foster ticket is utilized to account for items associated with split tickets. Other techniques and arrangements include providing split ticket suggestions. In some implementations, split ticket suggestions are provided based on historical ticket information and/or customer information.

Abstract: Embodiments of the present invention provide a computer system, a computer program product, and a method that comprises identifying at least a first physical sensor and a second physical sensor within a computing device, wherein each physical sensor is associated with a respective count; performing a predetermined operation within the computing device; authenticating the received command of at least the first physical sensor and the second physical sensor identified within the computing device; and automatically halting the operation of the computing device.

Abstract: A system for managing and transferring a virtual shopping cart. The system includes a product identification system that is programmed to identify products from a product identification tag, a cart identification system that is configured to generate a cart identifier that uniquely identifies the virtual shopping cart, and a cart management engine. The cart management engine is configured to receive products to add to the virtual shopping cart from the product identification system, associate the products with the cart identifier, and transfer access to the virtual shopping cart from a first device to a second device.

Abstract: A server for processing a card-not-present transaction is described. The server comprises at least a computer processor and a data storage device, the data storage device comprising instructions operative by the processor to: (i) receive a transaction authorization request, where the transaction authorization request comprises an indication of a payment card number and a delivery address used in the card-not-present transaction; (ii) retrieve, from a database, a registered address associated with the indication of the payment card number, the database being operatively connected to the server; (iii) compare the delivery address with the registered address; and (iv) generate a transaction authorization response based on a result of the comparison, where the transaction authorization response comprises an indication that the card-not-present transaction is to proceed if the delivery address matches the registered address.

Abstract: Various embodiments herein each include at least one of systems, methods, and software for in situ and network-based transaction classification. Such embodiments use advanced data analytics and machine learning techniques of consumer's transaction attributes to reduce shrink at checkout. One embodiment, in the form of a method, includes processing a dataset of transactions to identify normal transaction patterns and processing a dataset of transactions that included known fraud to identify variation patterns between the identified normal transaction patterns and the data of each transaction. The method further includes generating at least one pattern model based on the identified normal transaction patterns and the identified variation patterns. In such embodiments, each pattern model typically includes classification values for determining a likelihood of fraud in transactions.

Abstract: An automated system/method for identifying and enabling viewer selection/purchase of products or services associated with digital content presented on a display device. Products within the digital content are identified and existing product placement data is ascertained. For products that do not include such data, other methodologies, with the assistance of third-party servers, are employed to assess identity and purchase availability. Viewer input designate products to assess or products can be automatically assessed. Viewers initiate purchase of identified products via the display device or other electronic devices controlled by viewers, such as via viewers' smart phones. Various processes for identifying products include use of AI processing, access to data on third-party servers, crowd sourcing and other methodologies. Various techniques for selecting products for purchases are employed including employing 3D codes (e.g.