Abstract: A system, device, and method for implementing secure control over audio visual (AV) equipment connected to an AV gateway is disclosed. The solution implements secure and remote control over audio visual (AV) equipment included in an AV network by enabling a web browser running on a user device to utilize a web proxy shuttle to communicate control commands to an AV gateway that controls the AV equipment.

Abstract: A nonce is sent to a user communication device. Obfuscated biometric data is received from the user communication device. The obfuscated biometric data is generated by an obfuscation process that uses the nonce and first biometric data. The first biometric data is generated from a biometric of a user at the user communication device. For example, the first biometric data may be biometric data from a fingerprint scan. The obfuscation process is reversed by using the first nonce to produce the first biometric data. The first biometric data is compared to known biometric data of the user. In response to the first biometric data being within a threshold of the known biometric data, the user is authenticated.

Abstract: A method for processing breast tissue image data includes processing the image data to generate a set of image slices collectively depicting the patient's breast; for each image slice, applying one or more filters associated with a plurality of multi-level feature modules, each configured to represent and recognize an assigned characteristic or feature of a high-dimensional object; generating at each multi-level feature module a feature map depicting regions of the image slice having the assigned feature; combining the feature maps generated from the plurality of multi-level feature modules into a combined image object map indicating a probability that the high-dimensional object is present at a particular location of the image slice; and creating a 2D synthesized image identifying one or more high-dimensional objects based at least in part on object maps generated for a plurality of image slices.

Abstract: Systems, methods, articles of manufacture, and computer-readable media. A web browser of a device may receive selection of a uniform resource locator (URL). An operating system may download an application from an application server based on the URL. The application may identify a plurality of applications installed on the device and select a first institution corresponding to a first application. The application may receive a cryptogram from a contactless card associated with the first institution and transmit the cryptogram to an authentication server. The application may receive an authentication result specifying the authentication server decrypted the cryptogram. The web browser may receive, based on the decryption of the cryptogram, an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number. The web browser may provide the account number, expiration date, and CVV to a server associated with the application.

Abstract: Examples in this application disclose information sharing methods, media, and systems. One example computer-implemented method includes receiving, by a trusted execution environment (TEE), a first sharing request from a first institution and a second sharing request from a second institution, where the first sharing request comprises a user identity of a first user and first anti-money laundering (AML) risk information and the second sharing request comprises a user identity of a second user and second AML risk information, comparing the user identity of the first user with the user identity of the second user, in response to that the user identity of the first user is the same as the user identity of the second user, combining the first AML risk information and the second AML risk information, and sending the combined first AML risk information and second AML risk information to the first institution and the second institution.

Abstract: The invention relates to a computer implemented campaign management system (CAMS), the system including a graphical user interface (GUI), the management system (CAMS) processing a plurality of participant records (PREC) according to a user-configured process structure (PS) of a plurality of configured logic templates (CLT); wherein the participant records (PREC) comprise participant attributes (PA), and wherein the processing of participant records involves processing or modification of one or more of the participant attributes (PA) of the participant record (PREC), wherein the management system reads, processes and/or modifies participant attributes (PA) of participant records (PREC) by a sequence of one of more executable program fragments (EPF) according to the process structure (PS) and wherein the execution of one of more executable program fragments (EPF) can be suspended in response to user action (UACT) and/or participant action (PACT) and wherein the execution of the process structure can be resumed

Abstract: A processor-implemented mobile payment method includes: receiving a one-time pad (OTP) key generated based on a plurality of true random numbers; encrypting a payment token based on the OTP key; and performing a payment based on the encrypted payment token.

Abstract: A computer that dynamically generates a customized second document is described. During operation, the computer receives information specifying activation of a hosted field in a document associated with a third party, where the information specifies a willingness to receive one or more messages from the computer and specifies a telephone number. In response, the computer dynamically generates the customized second document that includes information about one or more transactions (such as one or more upcoming events) of interest to an individual associated with the telephone number. Then, the computer sends a message to an address corresponding to the telephone number, where the message includes a link to the customized second document. Next, when the computer receives information specifying activation of the link from an electronic device, the computer provides information specifying the customized second document to the electronic device for display on the electronic device.

Abstract: Provided is a method for detecting audio, which includes acquiring audio file data; determining attribute detection data corresponding to the audio file data; and generating a voice detection result corresponding to the audio file data by voice violation detection on the attribute detection data by a fully connected network model. A device for detecting audio and a non-transitory computer-readable storage medium are also provided.

Abstract: An apparatus verifies hosted information associated with a user. The apparatus establishes, by the online host serving as a relying party system (RPS), a secure connection between the RPS and a user mobile-identification-credential device (UMD). The RPS sends a mobile identification credential (MIC) user information request to the UMD, via the secure connection, seeking release of MIC user information (official information). The RPS obtains from authorizing party system (APS) verification of the MIC user information received in response to the MIC user information request. The RPS stores the MIC user information as hosted information pertaining to the user. The RPS designates the hosted information as base truth information representing the user.

Abstract: Biometric features are derived from security data associated with a subject. The security data is obtained from a security device. A biometric value is calculated from the biometric features. The biometric value is anonymized to an identifier associated with the subject. The identifier is integrated with event data associated with a security system. In an embodiment, the security device is a Personal Identification Number (PIN) pad integrated into a transaction terminal, the security data is fingerprint data, which is read from a finger of the subject placed on a fingerprint reader integrated into the PIN pad, and the biometric value is a PIN calculated from fingerprint data during a transaction at the transaction terminal. In an embodiment, the security device is a security camera, the security data is a secure video stream, and the biometric features are facial features of the subject in the secure video stream.

Abstract: The CONVERGED MERCHANT PROCESSING APPARATUSES, METHODS AND SYSTEMS (“CMP”) facilitates the generation of user accounts with merchants. The user may be logged into an electronic wallet or issuer account, and may initiate an account generation process with a one-click mechanism. The CMP may provide information to the merchant in order to facilitate the generation of the account after receiving data from the electronic wallet or issuer.

Abstract: A method and system for expressive conversion of more expressive metadata to less expressive metadata while maintaining lossless conversion including receiving a request for a second system metadata, retrieving a first system metadata, generating the second system metadata in response to the request for the second system metadata and the first system metadata wherein the second system metadata includes a first subset of the first system metadata, generating a site metadata mapping in response to the second system metadata and the first system metadata wherein the site metadata mapping includes a second subset of the first system metadata not included in the second subset of the first system metadata, storing the site metadata mapping in a memory, and transmitting the second system metadata to a client application.

Abstract: In some implementations, a device may receive an indication of information associated with a stored value medium. The device may populate a database with the information associated with the stored value medium, where the database includes a table to link the information associated with the stored value medium with an entity identifier of an entity associated with the stored value medium. The device may receive an indication of an exchange associated with the entity identifier of the entity, where the exchange is not associated with the stored value medium. The device may parse the database using the entity identifier associated with the entity to identify the information associated with the stored value medium indicated in the database. The device may communicate, with a backend system, to enable the exchange to be at least partially completed using the resources associated with the stored value medium.

Abstract: Systems, methods, and computer-readable storage media utilized in math-based currency (MBC) exchange utilizing MBC transaction guarantees. One method includes receiving, from a merchant point of sale (POS) terminal, a payment reimbursement request comprising a guarantee identifier associated with an MBC transfer. The method further includes determining, utilizing the guarantee identifier, transaction information. The method further includes determining, utilizing the transaction information, the guarantee identifier is associated with a failed transaction based on accessing and analyzing a plurality of disputed transactions on an MBC blockchain. The method further includes, in response to identifying the failed transaction, initiating an MBC payment from the financial computing system to an MBC address of a merchant. The method further includes providing, to the merchant POS terminal, a payment confirmation.

Abstract: Methods and systems are disclosed for payment authentication. For example, a method may include: the method comprising: storing a first device fingerprint in association with a token representing a primary account number, the first device fingerprint being derived from a device attribute of a user device and behavioral biometric data derived from a behavioral pattern of a user in using the user device; receiving an authentication request indicative of the token and a second device fingerprint generated by a customer device associated with a customer of a merchant, the authentication request being associated with a transaction between the merchant and a customer using the token; identifying the stored first device fingerprint based on the token indicated by the authentication request; and determining whether the second device fingerprint matches the stored first device fingerprint.

Abstract: The invention to provides an improved controller for providing a location-based service to an area, wherein the controller comprises a memory and a transceiver, wherein the controller is configured to: obtain a location of a mobile device associated with a person; obtain sensor data from at least one sensor arranged for monitoring the person in the area when the obtained location of the mobile device is within the area; store the sensor data in the memory; forward, via the transceiver, the stored sensor data to the mobile device when the obtained location of the mobile device is no longer within the area, and subsequently delete the sensor data from the memory. The invention further provides related systems for providing a location-based service to an area and related methods.

Abstract: Provided is a keyword management method of an electronic apparatus. The keyword management method may include confirming a landing page type corresponding to a keyword associated with a search service of another apparatus, checking whether the keyword corresponds to a keyword set, changing the landing page type corresponding to the keyword when the keyword corresponds to the keyword set and the confirmed landing page type is not a landing page type related to the keyword set, and providing information on the changed landing page type to the other apparatus.

Abstract: An optical module configured to control a peer to peer transaction includes a silicon photonics substrate, memory formed on the silicon photonics substrate and configured to store a private key, application circuitry formed on the silicon photonics substrate and coupled to the memory, the application circuitry configured to receive, via an external interface, an electrical signal carrying instructions for executing a transaction, verify the transaction using the private key stored in the memory, and selectively generate a transaction message including information for completing the transaction, and optical communication circuitry formed on the silicon photonics substrate and responsive to the application circuitry, the optical communication circuitry configured to generate an optical signal based on the transaction message and transmit the optical signal to at least one remote entity.

Abstract: A self-service lender portal provides lenders with a suite of tools for interacting with a multi-lender architecture configured to provide loan applicants with automated pre-qualification and eligibility evaluation for multiple candidate lenders. The lender portal provides lenders with an interface for uploading rule sets defining lending and eligibility criteria, downloading operational data generated from processing loan applicant information, generating and managing security keys for encryption and decryption of sensitive data, and managing access policies for providing single sign-on by interfacing with the lender's own identity management systems.

Abstract: Systems and methods are provided for processing global CBDC transactions in a blockchain supported network, where domestic and foreign banking institutions may provide mutual hosting of a consortium blockchain to allow more seamless and direct CBDC supported transactions, and CBDC exchanges in real-time or near-real time.

Abstract: Methods and systems of managing payment cards are disclosed. A financial institution computing system includes a token database storing a plurality of tokens and token information, a network interface circuit enabling the financial institution computing system to exchange information over a network; and a token management circuit. The token management circuit enables a graphical user interface on a customer device over the network that can be used to generate new token requests, re-provision token requests, and management requests. The management requests enable and disable tokens, such that transactions against a payment card account using an enabled token are completed, and transactions against the payment card account using a disabled token are denied.

Abstract: Systems and methods are described related to using flexible circuitry in a payment device. In one embodiment, a payment device comprises a computing device and a memory. The computing device is configured to store a biometric identifier associated with a transaction account. The computing device is configured to at least receive, by the antenna, an interrogation signal from a point of sale (POS) device in order to activate the payment device for a payment transaction. The computing device is configured to determine a scanned fingerprint identifier of a user based at least in part on the interrogation signal activating the payment device and authenticate the scanned fingerprint identifier by matching the scanned fingerprint identifier to the biometric identifier. The transaction account is transmitted to the POS device for processing the payment transaction based at least in part on the authentication of the scanned fingerprint identifier.

Abstract: A computer-implemented method for prepaid card funding for sponsored purchases includes receiving a payment request for funding a sponsored purchase using a payment vehicle, deducting funds from a financial account associated with the payment vehicle, such that the financial account has a negative balance, and loading additional funds into the financial account associated with the payment vehicle, such that the financial account has a zero balance.

Abstract: According to an embodiment of the present invention a user equipment (UE) may receive, in a first search space set, first downlink control information (DCI) that schedules a first physical downlink control channel (PDSCH) based on a first transmission configuration index (TCI) value and receive, in a second search space set of the plurality of search space sets, second DCI that schedules a second PDSCH based on a second TCI value. The UE may determine that a transport block (TB) in the second PDSCH is re-transmission of a TB in the first PDSCH, based on that the first DCI and the second DCI indicates a same hybrid automatic repeat request (HARQ) process identifier (ID), and the first DCI and the second DCI indicates a same new data indicator (NDI) value, even if the first TCI value associated with the first PDSCH is different from the second TCI value associated with the second PDSCH.

Abstract: Embodiments related to systems and methods comprising receiving payment data at an access device; receiving an identifier for a mobile device at the access device; and generating and sending an authorization request message to a payment processing network, wherein the payment processing network generates a verification token, which is then sent to the mobile device whereby the mobile device is thereafter used to conduct payment transactions.

Abstract: A financial institution computing system includes a network circuit exchanging information over a network, a customer database storing financial information, and a transaction circuit. The transaction circuit receives a transaction request associated with a user computing device. The transaction request specifies a financial account. The transaction circuit receives payment card location information indicative of a location of a payment card with respect to the user computing device. The payment card location information indicates that the payment card is within a threshold distance of the user computing device. The transaction circuit authenticates the transaction request using the payment card location information and by determining whether the payment card is associated with an authorized user of the financial account.

Abstract: Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Abstract: Embodiments include systems and techniques to perform secure transactions including processing registration information for each computing device of a plurality of computing devices having authority over a financial account. In one example, embodiments include receiving a pending transaction against the financial account from a computing device. Embodiments include executing an authentication protocol to determine the computing device is a member of the plurality of computing devices based upon the registration information, and processing data identifying another computing device within a configurable distance from the computing device. Embodiments further include the system to execute the authentication protocol to determine the other computing device is a member of the plurality of computing devices based upon the registration information and bypass a portion of a security procedure for authorizing execution of the pending transaction.

Abstract: A device may run an application having information with multiple accounts associated with processing of transactions. The application may provide account information that is used to process the transactions. At the same time, a background application may operate on the device. The background application may be compatible with a second device, and when within range of the second device, may communicate background messages relevant to the transaction. The transaction may then be processed based on the account information and the background messages.

Abstract: A computer-implemented method includes acquiring information regarding the user and generating one or more indicators of a data breach for an entity that stores one of data regarding the user or an indication of a transaction with the user in a past predefined time period. The computer-implemented method further includes determining that the one or more indicators meet a threshold level for notifying the user of the data breach; in response to determining that the one or more indicators meet the threshold, generating a notification specific to the user regarding the data breach; and providing the notification to the user during a log-in process associated with the provider computing system.

Abstract: In general, intelligent fuel dispensers are provided. In at least some implementations, an intelligent fuel dispenser can determine customer identities and/or other characteristics and provide customized fueling sessions based on the determined customer identities and/or other characteristics. In at least some implementations, the fuel dispenser includes a touchless interface allowing customers to complete fueling sessions with minimal physical contact with the fuel dispenser.

Abstract: Embodiments are disclosed to determine customer's prescription information and their position while waiting in a drive-thru lane. The drive-thru lane may have one or more transmitters installed at predetermined locations. By utilizing an application installed on each customer's mobile computing device, each mobile computing device may transmit customer information and ranging data when within range of one or more of the transmitters. The ranging data may include an indication of a range between each of the customer's mobile computing device and one or more proximate transmitters. By correlating the customer information to prescription information from recently filled and/or called in prescriptions, each customer's prescription order may be retrieved. Furthermore, by analyzing the ranging data, the position of each customer in the drive-thru lane may be determined.

Abstract: Systems and methods are provided which allow for the management of multiple beacons using a network-connected primary beacon in communication with the multiple beacons. The primary beacon may be in communication with the other beacons in the network using a low power wireless technology, such as Bluetooth® low energy (BLE). The primary beacon may receive updates and content from a server over a network to which the primary beacon is in communication, and then send the received updates and content to the other beacons. Moreover, the other beacons may periodically provide updates or collect information and provide this information to the primary beacon, which can then send the updates or collected information to the server for storage and/or analysis.

Abstract: Techniques are described for using an identity management system. One of the methods includes providing access to a decentralized identity management system to a user. The method includes storing user identity information on the decentralized identity management system. The method includes enabling one or more other users to store reputation information associated with the user identity. The method also includes using the reputation information in a transaction with the user.

Abstract: A method is provided for collecting diagnostic information in a device having a rich execution environment (REE) and a secure element (SE). The method includes detecting initialization of the device. If it is determined that the initialization of the device was a result of a potential security related event, a communication component of the REE responsible for communicating with the secure element is activated if not already activated. The secure element sends a request to the communication component for diagnostic information related to the security event. The diagnostic information is received in the SE from the communication component and stored in an attack log for storing security events. An attack log is generated in the secure element including the potential security event and the related diagnostic information. The attack log and the related diagnostic information is communicated to a secure server via a secure channel.

Abstract: The subject technology may be implemented by a device that includes at least one processor configured to encrypt a data object based at least in part on an encryption key. The at least one processor may be further configured to sign the encrypted data object with a private key and transmit the signed encrypted data object to a server for retrieval by another device. The at least one processor may be further configured to generate a sharing object corresponding to the data object, wherein the sharing object includes an encryption key and a public key that corresponds to the private key. The at least one processor may be further configured to encrypt the sharing object using a key of the other device and transmit, over a secure channel, the encrypted sharing object to the other device for subsequent retrieval and verification of the signed data object from the server.

Abstract: A method disclosed herein may include receiving, at a first computing system, encrypted identifiers and encrypted values, performing, by the first computing system, a concealing operation on the encrypted identifiers to produce concealed encrypted identifiers, wherein the concealing operation conceals the encrypted identifiers from the first computing system and a second computing system but enables matching between the concealed encrypted identifiers, decrypting, by the second computing system, the concealed encrypted identifiers to produce concealed identifiers, and performing, by the second computing system, an aggregation operation using the concealed identifiers and the encrypted values to produce an encrypted aggregate value without accessing personally identifiable information associated with the encrypted values.

Abstract: Disclosed herein are systems and methods that allow for secure access to websites and web-based applications and other resources available through the browser. Also described are systems and methods for invocation of a secure web container which may display data representative of a requesting party's application at a user's machine. The secure web container is invoked upon receipt of an API call from the requesting party. Thus, described in the present specification are systems and methods for constructing and destroying private, secure, browsing environments (a secure disposable web container), insulating the user and requesting parties from the threats associated with being online for the purposes of providing secure, policy-based interaction with a requesting party's online services.

Abstract: A blockchain consensus method includes: an accounting node generating a block and broadcasting verification information of the accounting node to other accounting nodes among N accounting nodes; receiving and verifying acknowledgement information broadcast by the other accounting nodes; and adding the block to a blockchain when the received acknowledgement information satisfies a second set condition. The N accounting nodes are determined according to coin age information carried in election requests broadcast by M election nodes.

Abstract: A system, method, and computer-readable storage medium configured to facilitate cash transactions at an Automated Teller Machine when an ATM card is not present. The system allows a customer of a first bank to use an ATM of a different bank and still facilitate the ATM transaction without an ATM card present.

Abstract: Systems, methods and computer-readable storage media utilized to track a plurality of assets on a distributed ledger network. One method includes receiving, by an asset issuer computing device, a request to track a specific asset on the distributed ledger network. The method further includes determining, by the asset issuer computing device, an asset type associated with the specific asset. The method further includes generating, by the asset issuer computing device, a unique identifier identifying the specific asset. The method further includes generating, by the asset issuer computing device, a unique tracking identifier, the unique tracking identifier including a subset of identifiers, the subset of identifiers including an asset issuer identifier, an asset type identifier, and the unique identifier.

Abstract: A request to train a neural-network model is received, as are a first offer to supply encrypted training data and a second offer to train the model. After determining that the offers satisfy the request, a model provider told to train the model. If they model performs in accordance with a quality metric, it is sent to a model user.

Abstract: Disclosed systems and methods provide an augmented environment that facilitates a donation to a charity. A system may receive organization data including data associated with a plurality of charitable organizations. The system may also receive (i) environmental data including an image of an object, and (ii) location data indicating the image location. Further, the system may identify the object and determine one or more qualifying charities associated with the object. The system may augment the environmental data by adding enhanced content such as an identification of the qualifying charity, transmit the enhanced content to a mobile device for display, and initiate a transfer of funds from a user account to a charity financial account associated with the qualifying charity.

Abstract: Described herein is a platform and method for determining a confidence level associated with a transaction that utilizes dynamic data. In some embodiments, the confidence level is determined based on location data received in relation to the transaction. For example, some embodiments are directed to storing first location information collected from a mobile device provided in a request for the dynamic data, receiving second location information related to a transaction conducted using the dynamic data, and comparing the two with respect to the amount of time that has elapsed between collection of each to determine a confidence level associated with a likelihood that the transaction is authentic.

Abstract: A secure method of real time money transferring between account holders utilizes Near Field Communication (NFC) technologies, dynamic transaction cards, and a mobile application to facilitate a seamless mobile transfer of funds. The dynamic transaction card of the customer requesting to make the transfer of funds may be placed in contact with the second recipient dynamic transaction card of the customer receiving the funds transfer to establish an NFC connection. The dynamic transaction card requesting the transfer may receive, via the NFC antenna on the card, the recipient customer account information stored on a passive NFC tag. The dynamic transaction card requesting the transfer may transmit the recipient account information to a mobile application, which may transmit the recipient account information to an account provider system for facilitating the funds transfer.

Abstract: A method includes receiving a request for enrollment from a user at a wallet service provider (WSP) computer, and enrolling the user in the WSP computer. A message is transmitted to the user to query the user about accepting payment card account system transactions. A response to the message, from the user, is received in the WSP computer. The WSP computer downloads, to a device operated by the user, a list of acquirer financial institutions. The WSP computer receives, from the device operated by the user, an indication that the user has selected one of the acquirer financial institutions from the list. An application program supplied by the selected acquirer financial institution is downloaded to the device operated by the user.

Abstract: Aspects of the disclosure relate to identity management and recommendation. A computing platform may receive a request to access information associated with one or more user accounts. The computing platform may send a biometric authentication prompt for identifying a user. The computing platform may receive biometric input of the user. The computing platform may retrieve one or more biometric enrollment templates from a database. The computing platform may compare the biometric input to the one or more biometric enrollment templates to determine if a match exists between the biometric input and one of the one or more biometric enrollment templates. Responsive to the user being authenticated based upon a match, the computing platform may retrieve and send information associated with the one or more user accounts. The computing platform may generate and send one or more recommendations associated with usage of the one or more user accounts.

Abstract: Application management services for simulated contactless cards support applying payment when a provisioned card (cardholder profile) is stored in volatile memory of a computing device by maintaining a first channel open between a payment application and a provisioning service while communicating payment information to a point of sale terminal over a second channel.

Abstract: There are provided systems and methods for shared cryptogram generation during multi-party digital token processing. A service provider, such as an electronic transaction processor for digital transactions, may require tokenized data in order to protect sensitive or secure data, such as payment card data during electronic transaction processing. In this regard, the service provider may tokenize the data, which may require a cryptogram for validation of a corresponding digital token. The cryptogram may be generated based on input from multiple participants to the transaction, where a length of the cryptogram may be determined based on a risk score for the transaction. Each transaction participant may be assigned one or more slots or values in the cryptogram to provide based on the risk score and other rules for cryptogram generation. Each participant may provide corresponding portions, where the service provider may generate and backwards update the participants of the cryptogram.