Abstract: A method for synchronizing management of a plurality of domain names in a Domain Name System (DNS).

Abstract: This specification describes techniques for managing assets in a blockchain. One example method includes receiving, from a target user recorded in a distributed database of the blockchain network, a user input including a request to generate an asset object in the blockchain network, the blockchain network including an account object and a contract object, determining, based on the user input, an asset type of the asset object, initiating, in the blockchain network, the contract object corresponding to generate the asset object based on the asset type, the asset object including a digital asset corresponding to a physical asset associated with the target user, assigning the asset object to a target object of the target user, and adding address information of the asset object to the target object.

Abstract: An online host method to verify hosted information associated with a user includes establishing, by the online host serving as a relying party system (RPS), a secure connection between the RPS and a user mobile-identification-credential device (UMD). The RPS sends a mobile identification credential (MIC) user information request to the UMD, via the secure connection, seeking release of MIC user information (official information). The RPS obtains from authorizing party system (APS) verification of the MIC user information received in response to the MIC user information request. The RPS stores the MIC user information as hosted information pertaining to the user. The RPS designates the hosted information as base truth information representing the user.

Abstract: Methods, systems, and apparatuses for facilitating multi-tiered digital wallet security are described herein. In some arrangements, a computing platform configured to operate within one or more decentralized peer-to-peer (P2P) networks may provide a digital wallet interface to a user computing device. Through the digital wallet interface, a user of the user computing device may be able to partition digital currency holdings into one or more differentiated storage compartments or tiers. Each of the one or more compartments may be password secured and may only permit access to the amount of digital currency holdings specified by the user. The user of the user computing device may enter a password corresponding to a compartment and the computing platform may provide access to the compartment based on the provided password. E.g., successive tiers may provide successively more limited (or enhanced) access to available funds, permissions, and the like.

Abstract: An authentication device that is configured to receive an authentication request that includes a device identifier from a user device. The authentication device is further configured to identify a first device that is associated with the device identifier and to send a device fingerprint request to the first device. The authentication device is further configured to receive a first device fingerprint for the first device. The first device fingerprint is uniquely associated with the first device and includes a unique bit string that is generated based on a configuration of the first device. The authentication device is further configured to identify a second device fingerprint that is associated with the first device from among a plurality of device fingerprints stored in a memory, to compare the first device fingerprint to the second device fingerprint, and to send an authentication response to the user device based on the comparison.

Abstract: An authentication application may receive, from a merchant application of a client device, a merchant identifier, a transaction identifier of a transaction, encrypted data, and a location of the client device. The authentication application may decrypt the encrypted data based at least in part on a private key. The authentication application may determine that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with a contactless card. A virtual account number generator may generate a virtual account number and transmit the merchant identifier, the transaction identifier, the virtual account number, an expiration date, and a card verification value (CVV) to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.

Abstract: A system and method for distributed general-purpose computing with cryptotoken payment system provides a full system that integrates a slow Blockchain Cryptotoken with a fast Directed Acyclic Graph Blockchain Cryptotoken. The instant invention provides: (1) a hybrid Cryptocurrency/Cryptotoken system that allows for very fast transactions to happen decoupled from the slow transactions of normal Cryptocurrencies (2) a mechanism to verify the processing of data and payments to the End User's wallet for the processing of that data that can in turn be used for In App purchases or in game purchases of items and (3) mechanisms for the transfer of unprocessed and processed data to the client or customer.

Abstract: A system is provided that allows users to execute a secure transaction that is authenticated by their user device. Personally identifiable information (PII), such as, but not limited to, biometric authentication data, is locally stored on the user's device so as to protect the PII. A user device private key is associated with the particular user device and the user, and the corresponding public key is registered with a User Device Authentication Alliance server (UDAAS) system. In an online transaction, a LoginID server or an Access Control server interact with the UDAAS to confirm the user is authentic and has confirmed the transaction.

Abstract: Method and system for securely communicating data, the method comprising the steps of: initiating a secure communication between a mobile device and a requester using a cryptographic key to verify the user of the mobile device. Receiving, using the secure communication, at a mobile device a request from the requester, the request including an indication of one or more requested data attributes associated with a user of the mobile device. At the mobile device, querying a data store for the requested one or more data attributes and a verification attribute.

Abstract: A service processing method comprises: receiving, by a first server possessing a first service function, a first service request sent by a client; generating a first service result based on the first service request; and sending the first service result to the client and a second server possessing a second service function, for the second server to directly generate a second service result based on the first service result, and after the second server receives a second service request generated by the client based on the first service result, to send the generated second service result to the client.

Abstract: A merchant registers a geolocation for a virtual point of sale. A consumer points a consumer device at the geolocation, and an icon representing the virtual point of sale is displayed on the consumer device in augmented reality. The consumer selects the icon to initiate a transaction with a digital wallet on the consumer device.

Abstract: A system and method for using a mobile device to capture the proper execution of a series of one or more tasks with pre-assigned constraints that are associated with a specific set of assets, where those assets have certain known physical attributes and characteristics and are configured in a known manner is disclosed herein. The assets are preferably vehicles such as trucks.

Abstract: Systems, methods, and devices for integrating a first party service into a second party computer application are disclosed. In one embodiment, in a financial institution comprising at least one computer processor, a method for integrating a financial services payment service into a merchant computer application may include (1) receiving customer electronic device information from a customer electronic device using a first communication channel; (2) transmitting a passcode to the customer electronic device using a second communication channel; (3) receiving the passcode from the customer electronic device over the first communication channel; (4) sending a session identifier to electronic device over first communication channel; (5) receiving the session identifier from a merchant host; and (6) sending an authentication value to a merchant host. The merchant host may provide the authentication value to the customer electronic device.

Abstract: A system, method, and computer-readable medium are provided to protect passwords for computer applications by providing a user-triggered password scrambling mechanism. Scrambling is enabled with a user configurable character within the password to be a trigger. Once triggered, a user can enter several incorrect password strings without fear of being locked out of the system. Ultimately, a user can enter a correct password string or a modified version of the correct password string to gain access to the system. Through password scrambling, an observer will have a more difficult time determining the correct version of the password. This improves system security, thereby protecting valuable information, resources, and reputation of an enterprise provider.

Abstract: Methods and systems for facilitating a transaction are provided. A transaction involving an integrated circuit user device in contact with an access device is processed in less time, such that the user device can be removed at an earlier time. In embodiments, an access device provides an estimated value to a user device such that a cryptogram can be generated without waiting for a final value. Additionally, the access device can store user device data and then complete the transaction with the user device before authorizing the transaction, such that the user device can be removed without waiting for an authorization response.

Abstract: A system, method, and computer-readable storage medium configured to facilitate cash transactions at an Automated Teller Machine when an ATM card is not present. The system allows a customer of a first bank to use an ATM of a different bank and still facilitate the ATM transaction without an ATM card present.

Abstract: A game controller downloads a chip database at a predetermined timing from a server and stores the chip database as offline data in a storage unit, determines whether communication with the server is possible, when a chip communication unit accesses a game chip, and authenticates the game chip with reference to a offline data table when the communication is impossible.

Abstract: A method including receiving, at a processor, credential requests for accessing the VPN environment from a first user device using a first interface and from a second user device using a second interface; transmitting, to the first user device, a first credential based at least in part on the first user device using the first interface; and transmitting, to the second user device, a second credential based at least in part on the second user device using the second interface, the first credential being different from the second credential. Various other aspects are contemplated.

Abstract: Exemplary embodiments include a system having a first wireless audio output device configured to connect to a source device via a first piconet and a second wireless audio output device configured to connect to the first wireless audio output device via a second piconet. A schedule of the first piconet includes a plurality of slots associated with an audio packet, a first subset of the slots used by the source device to transmit the audio packet, the first and second wireless audio output devices tuning to the first piconet to listen for the transmissions of the audio packet, and when, after a last one of the first subset of slots, the first or second wireless audio output devices did not receive the audio packet, the first and second wireless audio output devices exchange information via the second piconet such that the both wireless audio output device receive the audio packet.

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing presence-based secure communications in a controlled environment. In an embodiment, a presence management system monitors communication status information related to communication devices within a controlled facility as well as communication devices external to the controlled facility. Communication statuses indicate the availability of users to receive certain types of communications, such as, for example, video conferencing, audio calls, and/or textual messages. In embodiments, secure communications are provided between inmates and approved individuals, such as medical or legal professionals, based on the communication statuses. Such secure communications are encrypted and not monitored for content.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, to provide digital identification. One of these methods includes receiving a request for a digital document from a digital wallet executing on a mobile device. The method includes identifying a digital document provider capable of providing the requested document. The method includes sending the request for the digital document to the identified digital document provider. The method includes receiving, from the digital document provider, information that enables the mobile device to view the digital document and does not enable the computer system to view the digital document.

Abstract: A transaction signature method performed in a system for storing and managing keys, which is implemented as a computer, may include the steps of configuring a cluster based on a node and generating a private key according to a BIP-32 protocol from an internal key of the cluster among a plurality of managed keys in a trusted execution environment (TEE) of the node within the configured cluster and signing transactions.

Abstract: A method for processing breast tissue image data includes processing the image data to generate a set of image slices collectively depicting the patient's breast; for each image slice, applying one or more filters associated with a plurality of multi-level feature modules, each configured to represent and recognize an assigned characteristic or feature of a high-dimensional object; generating at each multi-level feature module a feature map depicting regions of the image slice having the assigned feature; combining the feature maps generated from the plurality of multi-level feature modules into a combined image object map indicating a probability that the high-dimensional object is present at a particular location of the image slice; and creating a 2D synthesized image identifying one or more high-dimensional objects based at least in part on object maps generated for a plurality of image slices.

Abstract: The present disclosure provides for systems and methods for pre-authenticating a user over a network, the system including an authentication computing device configured to receive, over a first computer network, a pre-authentication signal from a client device, determine an account number associated with a payment card of the user, verify i) that the user has satisfied at least one security measure, and ii) that the account number is associated with the client device, store the account number in association with a timer, initiate the timer, monitor, until the timer expires, a second computer network to detect an authorization request message for a transaction having the account number, and embed a digital authentication flag in the authorization request message when the authorization request message is detected before the timer expires, the digital authentication flag indicating that the transaction has been pre-authenticated.

Abstract: The disclosure relates to a method for sending digital information from a computer server SMa to a first connected device EAU1. The method including initial steps for registering a server SMA.

Abstract: Systems and methods are disclosed that provide a holistic view across a logistics ecosystem that conventionally would include processes involving discrete steps that are handled or managed by a Transportation Management System, a Warehouse Management System, an Order Management System, among others. Tasks and processes can be performed within a single platform and are applied based on the nature and status of the product/part, orders, and other data, demographics, and desires associated with them.

Abstract: Disclosed is a system for notifying hacking to a user thereby ensuring verified connection of a client machine with a server intended to be connected is disclosed. The system acquires a server certificate comprising data structure. The data structure may be acquired upon receipt of a response to a request initiated by the client machine. In one aspect, the data structure may be referred to as a tree site to verifier pertaining to the request. The system further receives a validation acknowledgement indicating validity of the server certificate. The system further performs a reverse certificate look up verification process upon receipt of the acknowledgment.

Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for enabling gift interactions via social media. For example, a user can post to a social networking site in a particular way to establish a gift transfer to a recipient based on a policy, such that when the recipient makes a purchase using their pre-existing payment account, the gift (an amount of money) is transferred or applied to the recipient payment account. A particular structure or feature of a social network post can trigger the creation of the policy, with metadata or information parsed from the social network post providing additional details of the policy. In this way, a user can set up a gift transfer without interacting with a gift portal, application, or website. The recipient does not need to use any special code, separate physical gift cards, or printable coupons to redeem or use the gift.

Abstract: A method of enabling a payment between a payor using a mobile device and one of a plurality of payees using respective payee devices, comprising: monitoring a first communication channel for receipt of a broadcast of a first identifier corresponding to one of the plurality of payee devices; upon receipt of the first identifier, generating an identifier notification comprising the first identifier and a second identifier corresponding to the mobile device, and transmitting the identifier notification from the mobile device to a payment processor over a second communication channel; in response to receipt of the identifier notification transmitted from the mobile device at the payment processor, associating the second identifier of the identifier notification with the first identifier of the identifier notification in a payment processor memory of the payment processor; generating a payment request comprising the second identifier, and transmitting the payment request from the mobile device to the payment proce

Abstract: Custom communication alert techniques are described. A triggering condition is detected by one or more computing devices that is found by searching data using one or more extraction rules of a late-binding schema. Responsive to the detection of the triggering condition of the alert, a communication is formed by the one or more computing devices that corresponds to the alert and that includes one or more tokens based on one or more values of the data taken from fields defined by the one or more extraction rules. The communication is caused to be transmitted by the one or more computing device via a network for receipt by at least one computing device of an intended recipient of the communication.

Abstract: Disclosed herein are systems and methods for anonymous sending of data from a source device to a recipient device. In one aspect, an exemplary method comprises, by the source device: receiving a request to send data to the recipient device, processing the data such that an identifier of the user and identification data are not linked to the data to be sent to the recipient, and determining whether the identifier of the user is absent in the source device, when the identifier of the user is absent, generating the identifier of the user, sending the identifier of the user to a token generator, wherein the sent identifier comprises either the generated identifier or an existing identifier found during the determination of whether the identifier is absent in the source device, and sending, to the recipient device, a combination of a random token received from the token generator and the data.

Abstract: A method being implemented via execution of computing instructions configured to run at one or more processors and stored at one or more non-transitory computer-readable media. The method can include receiving, at a transaction system being situated along a proxy communication channel extending from a point-of-sale terminal of a first entity to a mobile wallet provider, an encrypted transaction code. The encrypted transaction code can be generated and sent to the point-of-sale terminal by a mobile device that runs a mobile application associated with the mobile wallet provider. The mobile device receives from a point-of-sale terminal an identifier of the first entity, a transaction amount of a transaction, and a transaction identifier for the transaction, receives an authorization from a user of the mobile device for the transaction while the user is at the point-of-sale terminal, and determines that the mobile device is unable to communicate with the mobile wallet provider.

Abstract: The disclosed computer-implemented method for detecting malicious in-application transactions may include identifying an application running on a computing device, wherein the application is granted access to a payment system, monitoring data between the application and the payment system, determining at least one characteristic associated with the application, determining the at least one characteristic is associated with a malicious transaction on the payment system, and performing at least one action to prevent the malicious transaction. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Systems and methods of restricting storage of data received in content requests include a data processing system obtaining a public encryption key for a resource provider. The data processing system can receive a content request from an information resource of the resource provider running on a client device. The request can include one or more key values corresponding to one or more data keys. The data processing system can identify a data key using an encryption policy specific to the resource provider, and encrypt the key value using the public encryption key. The data processing system can store the key value in encrypted form. The data processing system can generate, using the key value in encrypted form, a data report, and provide access to the data report.

Abstract: Disclosed are methods and systems for quantifying degrees of association between blockchain addresses in a weighted-linked database. The method may include: obtaining a node data set comprising one or more nodes and edges; associating a first node of the node data set with a first weight factor; identifying a first edge of the node data set, wherein the first edge comprises data indicating a source node address corresponding to the first node, a target node address corresponding to a second node of the one or more nodes in the node data set, and a first edge weight; determining a source value for the second node based on the first weight factor and the first edge weight; generating, a risk value for the second node based on the source value; and presenting, on a GUI, graphical depictions of the first node, the second node, and the first edge.

Abstract: Systems and methods are provided for processing objects. For example, a call request message is received, the call request message carrying an identification (ID) of order data associated with one or more objects, the order data including at least a total value of the objects and an ID of a second subject; a first account related to a first subject and a user password related to the first subject are acquired; the first account and the user password and the ID of the order data are sent; the first account and the user password and the ID of the order data are forwarded; and based on at least information associated with the first account and the user password and the ID of the order data, the total value is deducted from a first value included in the first account related to the first subject.

Abstract: An authorization method for releasing or blocking resources includes, in case there is no connection between a provider and a resource owner: wirelessly transmitting a resource request from a client to the provider via an agent; wirelessly transmitting an authorization request from the provider to the client via the agent; wirelessly transmitting the authorization request from the client to the resource owner; wirelessly transmitting a receipt comprising an authorization response from the resource owner to the client; wirelessly transmitting the receipt from the client to the provider; and releasing or blocking a first resource in accordance with the authorization response comprised in the receipt.

Abstract: Methods and systems of managing payment cards are disclosed. A financial institution computing system includes a token database storing a plurality of tokens and token information, a network interface circuit enabling the financial institution computing system to exchange information over a network; and a token management circuit. The token management circuit enables a graphical user interface on a customer device over the network that can be used to generate new token requests, re-provision token requests, and management requests. The management requests enable and disable tokens, such that transactions against a payment card account using an enabled token are completed, and transactions against the payment card account using a disabled token are denied.

Abstract: Disclosed herein are methods, systems, and media for backtracking a user's operation of services. One method comprises: receiving an authorization request from a service device, the authorization request based on a service processing request from a client device, and comprises: data corresponding to a user's operation related to a service, authorization information for accessing the data granted to the service device; a first digital identity of the user; and a second digital identity of the service device; in response to determining that the authorization information satisfies a condition, generating a claim based on the data, the authorization information, the first digital identity, and the second digital identity; recording the claim to a blockchain; and in response to determining that a supervising user has permission to access the claim, granting permission to the supervising user to backtrack the user's operation corresponding to the service based on the claim in the blockchain.

Abstract: A consent receipt management system may include one or more consent validity scoring systems. In various embodiments, a consent validity scoring system may be configured to detect a likelihood that a user is correctly consenting via a web form. The system may be configured to determine such a likelihood based at least in part on one or more data subject behaviors while the data subject is completing the web form in order to provide consent. In various embodiments, the system is configured to monitor the data subject behavior based on, for example: mouse speed; mouse hovering; mouse position; keyboard inputs; an amount of time spent completing the web form; etc. The system may be further configured to calculate a consent validity score for each generated consent receipt based at least in part on an analysis of the data subject's behavior.

Abstract: Various methods and systems for communication between a fuel dispenser and a mobile device are provided. In one embodiment, a method of operating a fuel dispenser to communicate with a mobile device is provided that includes detecting the mobile device in proximity to the fuel dispenser, and communicating with the mobile device to receive input from and/or send information to the mobile device. The communication can use Bluetooth® Low Energy (BLE).

Abstract: Disclosed are computer-implemented methods, non-transitory computer-readable media, and systems for managing transactions in multiple blockchain networks. One computer-implemented method includes identifying a first transaction in a first blockchain network that is a first Hash Time Locked Contract (HTLC) transaction in the first blockchain network, identifying a second transaction in a second blockchain network that is a second HTLC transaction in the second blockchain network different from the first blockchain network, determining that a first transaction commit time of the first HTLC transaction is earlier than a second transaction commit time of the second HTLC transaction and a first secret hash of the first HTLC transaction has a same value as a second secret hash of the second HTLC transaction, and in response, determining that the first HTLC transaction and the second HTLC transaction are associated with each other and related to a cross-chain transaction.

Abstract: A blockchain-based cross-currency settlement method performed by a blockchain network is disclosed, including: adding a first blockchain asset corresponding to a first off-chain funds of a first currency to a blockchain account of a transit node in the blockchain network, wherein the first settlement node is inside a territory; adding a second blockchain asset corresponding to a second off-chain funds of a second currency to the blockchain account of the transit node in the blockchain network, wherein the second settlement node is outside the territory; in response to receiving the fund exchange transaction, transferring the first blockchain asset from a blockchain account corresponding to the transit node to a blockchain account corresponding to the second settlement node, and transferring the second blockchain asset from the blockchain account corresponding to the transit node to a blockchain account corresponding to the first settlement node to perform cross-currency fund settlement.

Abstract: Systems and methods in accordance with arrangements described herein can include identifying a variety of accounts associated with a user and determining a set of actions that can be taken with respect to the accounts. For instance, upon death of a user, a predetermined set of actions can be executed to transfer one or more assets as defined in a digital will. The accounts can be identified by scanning one or more accounts associated with the user. The accounts associated with the user and/or the account actions for the accounts can be automatically maintained over time. On an account transfer event, each of the accounts can be automatically transferred and/or closed in accordance with the determined account actions. In many embodiments, a password manager is maintained to facilitate the review of accounts and the performance of the appropriate actions on the occurrence of a transfer event.

Abstract: A computer-implemented information protection method comprises: obtaining a plurality of encrypted transaction amounts associated with transactions among a plurality of accounts, wherein each of the encrypted transaction amounts is associated with one of the accounts that sends or receives one of the transaction amounts, and the encryption of each of the transaction amounts at least conceals whether the one account sends or receives the one of the transaction amounts; generating a sum proof based on the obtained encrypted transaction amounts, the sum proof at least indicating that the transaction amounts are balanced; and transmitting the encrypted transaction amounts and the sum proof to one or more nodes on a blockchain network for the nodes to verify the transactions.

Abstract: Embodiments of the disclosure generally relate to systems and methods for processing electronic payments for retail services and goods delivered by a retail establishment. In embodiments, a mobile wallet application is installed in the automobile. The automobile wallet application can receive and/or send transaction and payment information over a near field communication system to a retailer and on to an authorizing authority. The authorizing authority receives the payment and transaction information, authorizes or declines the payment of the transaction, and forwards the authorization or declination to the automobile wallet application. If authorized, the retailer provides the retail good or service.

Abstract: The invention provides an identity authentication system and a method thereof. Embodiments of the invention provide application, installation, and verification processes of a mobile identification card, and enable a mobile apparatus of a user to be a carrier of the mobile identification card. The mobile identification card can be applied to services related to internal identification of enterprises, groups, or government agencies, and achieve smart and mobile identification. The mobile identification card is provided via an over-the-air mechanism. A mobile enterprise identification card service is provided to one or more enterprises by using a gateway. In addition, in combination with advantages of a dynamic graphics coding technology, a geographic location, data encryption with a key, transaction time recording, and other technologies, a graphic code can be generated for identity authentication. Therefore, highly secure identity authentication can be provided by using a dynamic graphic code.

Abstract: A system and method in which the Bluetooth technology is used in conjunction with a user application on a mobile device to facilitate hands-free fare validation at a transit station. The user app communicates with a controller driver in a controller unit that interfaces with a compliant fare gate. Bluetooth beacons are used to determine a passenger's proximity to the gate and camera-like devices determine whether a passenger has entered a fare validation zone. A user with a valid and active electronic ticket on their mobile device may simply walk through the fare gate “hands free” without the need to search for a physical ticket or a smartcard or a mobile phone. This hassle-free approach significantly improves the user experience and passenger throughput through fare gates. The Bluetooth-based automated fare validation system also detects passengers with valid electronic tickets and those without a valid permit for travel.

Abstract: A method of controlling a printing system includes requesting, by an information processing apparatus included in the printing system, using electronic payment identification information regarding an electronic payment service, an electronic payment server included in the printing system to perform an authentication, requesting, by the information processing apparatus, using information associated with the electronic payment identification information as print identification information regarding cloud printing, a cloud print server included in the printing system to perform an authentication, and after the authentication, and registering, in the cloud print server, print data that is associated with the electronic payment service and acquiring, by the information processing apparatus, the registration information regarding the electronic payment service and the cloud printing.

Abstract: An information processing apparatus includes a processor. The processor is configured to, in response to acquisition of a read image of a second document whose type is identical to a type of a first document, extract a character string included in, in the read image of the second document, a region where information about surroundings that matches first-document surroundings information is acquired, the information about surroundings satisfying a matching condition for determining matching with the first-document surroundings information that is acquired from an image around an item value acquisition region including an item value to be extracted in a read image of the first document, the character string being extracted as an item value to be extracted in the read image of the second document.