Abstract: A blockchain of transactions may be referenced for various purposes and may be later accessed by interested parties for ledger verification and information retrieval. One example method of operation may include one or more of monitoring a computing service via various nodes operating on a blockchain, identifying a proposed change to the computing service, storing details of the proposed change in a smart contract, storing the smart contract as a transaction in the blockchain, and validating the proposed change of the smart contract.

Abstract: A method for processing a financial transaction includes: storing, in a database, a plurality of wallet data entries, wherein each wallet data entry includes at least a mobile device identifier and payment details associated with at least one payment account; receiving, by a receiving device, an authorization request for a financial transaction, wherein the authorization request includes at least a mobile device identifier and transaction data; transmitting, to a mobile computing device associated with the mobile device identifier, at least the transaction data; receiving, from the mobile computing device, an indication of a payment account for funding of the financial transaction; identifying, in the database, payment details associated with the indicated payment account in a wallet data entry including the mobile device identifier included in the authorization request; and transmitting, to an issuer associated with the indicated payment account, at least the payment details and the transaction data.

Abstract: A digital content distribution system uses a Digital Rights Management Controller that performs a set of arbitrary tests against the transfer request from one user to another such as user A to user B. Assuming these tests are successful, the DRM sends an encryption key to transferring user A. This encryption key E is taken from a table of encryption key/hash pairs which have been provided to the DRM Controller by an external authority such as the content rights holder. User A encrypts the content using they key provided by the DRM controller and then optionally calculates a hash over the encrypted form of the content E(X) and returns this value to the DRM Controller. On checking the returned hash against the hash from the table the DRM controller knows that user A does indeed have the digital content X in good condition. The DRM Controller then instructs both users A and B that the transfer may proceed. The encrypted form of the content E(X) is transferred from A to B.

Abstract: Provided is a method for digital currency transfers via a mobile and wearable device. The method may include receiving a transfer request with a transfer amount in digital currency and user identification data associated with the user, retrieving payment data of the user associated with the identification data, generating an optical code encoding the payment data and the transfer amount. The method may continue with providing the optical code on a screen of the mobile and wearable device. On scanning of the optical code, a transfer receiving request is created. The method may continue with receiving a transfer receiving request to perform a payment transaction associated with the user, accessing a user account maintained by a currency issuance unit, and transferring the transfer amount in the digital currency from the user account to a recipient account associated with the recipient identification data.

Abstract: Methods, systems, and apparatuses for blockchain-based property management are described herein. According to a first embodiment of the disclosure, a plurality of computing systems may be established at a plurality of points along a supply chain associated with the manufacture, shipment, and sale of a physical property item. At each of the plurality of points, the plurality of computing systems may identify data corresponding to the physical property item, which may be stored on a blockchain associated with a decentralized peer-to-peer (e.g., P2P) network. According to a second embodiment of the disclosure, content creator computing devices may transmit digital property item upload requests to a digital property management computing device, which may generate smart contracts corresponding to the requests. Through execution of the smart contracts, access may be granted to digital property items and fees may be provided to the content creator computing devices.

Abstract: Encryption of sensitive data on consumer devices is provided with format-preserving cryptography and feedback via the use of security identifiers. A request to access the sensitive data will specify user credentials for the access. The submitter is requested to confirm a security identifier for the requested access. An incorrect security identifier will be presented for incorrect credentials, which will be easy for a user to identify but not for an attacker or other unauthorized user. If the incorrect security identifier is confirmed, the device assumes the request was received from an unauthorized source. The sensitive data is stored under format-preserving cryptography, such that false data values can be generated that have the correct format. An unauthorized user receiving the false data will not be readily able to determine the data received is incorrect, and will be likely to discontinue the attack, particularly for an automated process.

Abstract: Embodiments disclosed herein include systems and methods for systematic crowdsourcing of geolocation data. Transaction data that includes an identification of a point of sale device and an identification of a payment vehicle used in the transaction can be received. A confidence in a location of the point-of-sale device can be calculated. When the confidence of the location of the point-of-sale device is lower than a threshold confidence, a location of a device associated with an owner of the payment vehicle can be determined. An updated confidence in the location of the point-of-sale device can be generated based at least in part on the location of the device.

Abstract: An apparatus comprises at least one processing device having a processor coupled to a memory. The processing device is configured to implement a first ledger node of a first cloud. The first ledger node of the first cloud is configured to communicate over one or more networks with a plurality of additional ledger nodes associated with respective additional clouds. The first ledger node is further configured to obtain a transaction associated with a cloud-related operational state. The first ledger node is further configured to broadcast the transaction to the additional ledger nodes. A cryptographic block characterizing at least the transaction is generated and entered into a blockchain distributed ledger collectively maintained by the first and additional ledger nodes. The first and additional ledger nodes collectively maintain the blockchain distributed ledger on a peer-to-peer basis without utilizing a centralized transaction authority.

Abstract: In one embodiment, a first signature template is received, the first signature template being one of a signature template of a first message or a null template, the first signature template comprising at least the following fields: an aggregation depth field, a message identifier, one of the first message or a result of applying a one way hash function to the first message, a bit vector, an aggregated square random integer mod N, a signature of the first message. A second signature template is created based on the first signature template, the second signature template created as follows: increment the aggregation depth of the first signature template, determine a unique message identifier for a second message, determine a second bit vector, determine an second aggregated square random integer mod N, and calculate a new signature for the second message. Related methods, apparatus, and systems are also disclosed.

Abstract: Systems, computer program products, and methods are described herein for processing a set of information associated with a check image using one or more disposition parameters to determine an automated disposition of the check associated with the check image. The present invention is configured to receive a set of information associated with a check image; receive one or more disposition parameters associated with a financial institution; apply the one or more disposition parameters to the set of information associated with the check image; determine automated disposition of the check based on at least applying the one or more disposition parameters to the set of information associated with the check image; and execute the automated disposition of the check.

Abstract: A method of tracking orders through a blockchain network including receiving an indication of order placement, receiving a plurality of global variable registration requests from a plurality of linked smart contracts recorded to a first blockchain network responsive to an order placement at a global variable name system (GVNS), defining a global variable responsive to each global variable registration request, receiving a first status update related to the order from a first smart contract of the plurality of smart contracts, defining a first received status update, and updating a first global variable of the GVNS responsive to the first received status update, defining a first GVNS variable update. The first and second smart contracts include the first global variable and the value of the first global variable on each of the first and second smart contracts is updated responsive to the first GVNS variable update.

Abstract: Systems and methods for pairing a mobile app with a point-of-sale system and recording an availability of units from a retail package are described.

Abstract: Embodiments of the invention include systems, methods, and computer-program products for archive validation and retention parameter determination for documents. The system may generate or receive image documents. Utilizing image quality and data storage metrics the system may trigger the purging and/or retention of documents in image and/or paper form. Furthermore, the system may identify a duration of storage, location of storage, and the like. Upon retention, the system may continually monitor the documents and store metadata associated with the use of the retained documents. This monitoring may identify a period for purging the document, efficiently allowing for physical or server space availability.

Abstract: The present invention relates to a method and system for activating a first mobile terminal and a second mobile terminal to operate with a server. The method performed by a processor of the mobile device, the method comprising: providing a first authentication data from said first terminal to the server; verifying said first authentication data; providing a first data set and a unique identity by said first terminal to the server; providing a recognition data to said first terminal; providing said recognition data to said second terminal; decoding said recognition data by said second terminal; providing to said server by said second terminal said decoded recognition data and a second identity, verifying by said server said decoded recognition data and providing a second data set to said second terminal; verifying the second data set by said second terminal; and executing an event with respect to result of said verification of the second data set.

Abstract: Authentication of electronic document is based on multiple digital signatures incorporated into a blockchain. Structured data, metadata, and instructions may be hashed to generate the multiple digital signatures for distribution via the blockchain. Any peer receiving the blockchain may then verify an authenticity of an electronic document based on any one or more of the multiple digital signatures incorporated into the blockchain.

Abstract: An electric power transmission facility planning support system for materializing facility planning including the facility expansion of an electric power transmission network is provided based on the system information of a power system. This support system includes an output control quantity calculation device for deriving the output control quantities of natural variation power supplies in consideration of the operation limit value of the network; and a facility expansion planning device for making the facility planning based on one of the type, location, and capacity of an electric power transmission facility considering the output control quantities.

Abstract: The disclosed embodiments include computerized systems and methods for generating secured blockchain-based ledger data structures that track occurrences of events across fragmented and geographically dispersed lines-of-business of an enterprise. In one instance, an apparatus associated with a rules authority of the secured blockchain-based ledger may detect an occurrence of a triggering event, and may access and decrypt a set of rules hashed into the secured blockchain-based ledger using a confidentially-held master cryptographic key. The apparatus may identify a rule associated with the detected event, and perform one or more operations consistent with the rule, including a disbursement of various rewards to employees in response to customer-specific interactions with the enterprise. The disclosed embodiments provide a rules process for aggregating mutually incompatible enterprise data that specifies the events, and for tracking the events in uniform data structures accessible across the enterprise.

Abstract: Techniques are described for cryptographic key generation based on biometric data associated with a user. Biometric data, such as fingerprint(s) and/or heartbeat data, may be collected using one or more sensors in proximity to the user. The biometric data may be analyzed to generate a cryptographic key. In some implementations, the key may be employed by the user to access data, access certain (e.g., secure) feature(s) of an application, authenticate the user, digitally sign document(s), and/or for other purpose(s). In some implementations, the key may be re-generated for each access request or authentication instance, based on the user's fingerprint or other biometric data.

Abstract: Embodiments of the present invention provide an online payment method, system, and an apparatus, which are applied to the field of information security, and can improve security of user information during online payment, and ensure capital security of a user. The online payment method is applied to a terminal device, and includes: generating a first binding request, where the first binding request includes first user information, an application identifier, and a terminal device identifier; sending the first binding request to a payment proxy server; receiving an associated identifier sent by the payment proxy server; generating a second binding request according to the associated identifier, where the second binding request includes second user information and the associated identifier, and the second user information and the first user information are used for forming complete user information; and sending the second binding request to the payment proxy server.

Abstract: An approach is disclosed for registering and authenticating Internet of things (IoT) devices. In one embodiment, an installation device receives, from an IoT device, an identifier (ID) and a hash of a public key, where the IoT device itself generates the ID, the public key, and a private key. To register the IoT device, a blockchain wallet in the installation devices generates a blockchain transaction which adds the received ID and hash of the public key as a name and value pair in a name/value storage (NVS). The hash of the public key may then be retrieved from the NVS and used in authentication of the IoT device to other IoT devices or servers, among other things.

Abstract: A network computer system can associate an operator with a mobile device. Additionally, the network computer system can determine a current location of a freight vehicle operated by the operator, using location information transmitted by the mobile device associated with the operator. At a given instance, the network computer system can determine a time of arrival for the freight vehicle to arrive at a given destination location based on various parameters. For example, the time of arrival can be based at least in part, on (i) a distance between the current location of the freight vehicle to the given destination location, (ii) a time for the freight vehicle to travel the distance, and (iii) a duration of one or more required downtime intervals during which one or more restrictions are placed on the operator operating the freight vehicle.

Abstract: A system for decrypts encrypted Secure Sockets Layer (SSL) data from packet traces without using private keys or a proxy. Decryption of encrypted SSL data is accomplished by intercepting a session key associated with a communication session transmitted from a user device to a server during handshaking between the user device and the server. The session key is then used to decrypt packet level traces of the communication session. The decrypted packet level traces are then used to measure traffic.

Abstract: Systems, methods, and computer-readable media for using an online resource to manage credentials on an electronic device are provided. In one example embodiment, a method, at an electronic device, includes, inter alia, receiving account data via an online resource, accessing commerce credential status data from a secure element of the electronic device, providing initial credential management option data via the online resource based on the received account data and based on the accessed commerce credential status data, in response to the providing, receiving a selection of an initial credential management option via the online resource, and changing the status of a credential on the secure element based on the received selection. Additional embodiments are also provided.

Abstract: Apparatuses, methods, systems, and program products are disclosed for identifying and individual based on an electronic signature. A method includes detecting an individual based on input from one or more sensors. The method also includes determining an electronic signature associated with the detected individual. The method further includes reporting the determined electronic signature in response to determining that the detected individual is an unknown individual.

Abstract: System and method for implementing mobile payment. A payee such as a merchant sends transaction center a message containing a payment amount and payee info. A payer such as a user sends transaction center a message containing a code and payer info. The payee is represented by the code. Multiple options may be arranged for the user to acquire the code. Transaction center uses the code to identify the payee, relates the payer to the payment amount, and then starts processing the payment request.

Abstract: Embodiments of a secure file transaction system employ a host to receive a file manipulation request for a secure file from a requester, determine whether the requester is authorized for the file manipulation request, issue an authentication challenge to the requester, issue an approval request to the file owner and process the file manipulation request based upon obtained authentication and approval.

Abstract: A data transaction processing system including multiple transaction processors also includes an active transaction receiver that sequences all incoming messages from various sources to facilitate transactional determinism, as well as a results arbiter to efficiently decide which transaction processor result to choose as the correct output. The data transaction processing system minimizes overall latency by optimizing which transaction processors and results arbiters are responsive to specific client computer input requests or messages.

Abstract: Systems and arrangements for providing secure event processing by modifying a magnetic strip, chip, or the like, on a device are provided. In some examples, a device may include a magnetic strip that may be encoded with a first identifier. The first identifier may be a string of characters and may include a key. Upon using the device, the data from the magnetic strip may be read and the first identifier may be retrieved. The system may process the retrieved first identifier to extract the key which may be used to retrieve user and/or account information. In some arrangements, the account information may be used to process the event and a second identifier, may be generated. The device may be modified to include the second identifier, which may be used in processing a subsequent event. In some examples, the first identifier may be deleted from the device.

Abstract: A wearable electronic device comprising an electroencephalography (EEG) sensor for enabling access to a transit system. The device may also include a device transmitter configured to wirelessly transmit request signals to a transit gate. The device may further include a device processor configured to receive a first EEG signal from the EEG sensor and analyze the first EEG signal to determine that the transit user is attempting to enter the transit system through a particular transit gate. The device processor may also receive a second EEG signal and analyze the second EEG signal to determine that the transit user is currently passing through the particular gate. The first EEG signal may be based on the transit user viewing a visual stimulus displayed by the transit gate, and the second EEG signal may be based on the transit user hearing an auditory stimulus outputted by the transit gate.

Abstract: A network computer system can associate an operator with a mobile device. Additionally, the network computer system can monitor the operator using the mobile device over a time interval that a freight vehicle is operated between a start location and a destination location. During the time interval, the network computer system can control the mobile device in transmitting interval data. Additionally, based on the interval data, the network computer system can evaluate the operator over the time interval using the interval data. The evaluation of the operator can include using the mobile device information to evaluate the operator over the one or more sub-intervals.

Abstract: Systems and methods are described that facilitate capturing promotional information details such as the number of promotional material items printed for a given vendor supported by a marketing agency, item size, placement details, price, and authentication information to prove that a print log or summary is genuine. The authentication information can include a timestamp, printer identity, job identity and run-length. This information is summarized in a message digest and is signed by the printing system using digital signatures, which are then verified by the marketing agency through a public key counterpart of a private key used to generate the signatures.

Abstract: Active content is deterministically rendered in a stable format that is independent of any particular targeted environment, which the active content may subsequently be rendered to. Environmental and dynamic dependencies are removed from a specification associated with the active content for purposes of producing a stable and consistent specification for the active content. The stable and static specification is used to subsequently render the active content into the stable format for any targeted or desired environment.

Abstract: A payment processing system receives one or more indications of a user's location at a time that the user initiates a transaction with a merchant system at a physical location of the merchant system, processes the transaction, and receives a merchant point of sale identifier from the issuer system associated with the financial account information selected by the user. The payment processing system creates a combined list of candidate merchant identities based on the received merchant POS identifier and the user computing device location. The payment processing system calculates a probability for each of the merchant identities in the list based on similarity to the merchant POS identifier and user location data. The payment processing system associates the merchant POS identifier with the merchant identity having the highest probability and creates an annotated transaction record to display to the user.

Abstract: Aspects of the disclosure relate to securely orchestrating events initiated at remote servers using a certificate server. A computing platform may receive, from a first server computer system, a first event request comprising first entity information and first event details information, and the computing platform may identify a first entity associated with the first event request. The, the computing platform may generate and send a first entity verification request to a certificate server, and the computing platform may receive, from the certificate server, first certificate information associated with the first entity. Based on validating the first certificate information associated with the first entity, the computing platform may generate and send, to a second server computer system, one or more event orchestration commands directing the second server computer system to execute one or more actions associated with the first event request.

Abstract: Embodiments of the disclosure enable one or more transactions to be processed with secured authentication. A system server receives a request for authentication for an article associated with a first user that is associated with a user account, identifies one or more client devices associated with one or more secondary users that are associated with the user account, communicates with the one or more client devices to obtain biometric data associated with the one or more secondary users, determines whether to approve the request for authentication based on the biometric data associated with the one or more secondary users, and, on condition that the request for authentication is approved, generates an authentication token. Aspects of the disclosure leverage authentication technology to authenticate one or more identities of one or more users to allow the users to confirm that an article is associated with another user.

Abstract: A method begins by a processing module applying a share encoding function on data to produce a plurality of encoded shares and generating a plurality of random numbers. The method continues with the processing module obtaining a set of personalized authenticating values regarding user access to the data and generating a plurality of hidden passwords based on the set of personalized authenticating values. The method continues with the processing module generating an encryption key based on a corresponding one of the plurality of hidden passwords and a corresponding one of the plurality of random numbers and encrypting the encoded share utilizing the encryption key to produce an encrypted share for each encoded share of the plurality of encoded shares. The method continues with the processing module facilitating storage of the plurality of random numbers and each of the encrypted shares.

Abstract: A recognition system is employed in conjunction with a subscriber's cellular phone and the network serving the subscriber. According to an embodiment, a subscriber can use a cellular phone to receive and capture data signals, from, for example, an audio output. The captured data signals can be transmitted to a remote network element that receives and translates the captured data and performs a plurality of functions. A promotion can be selectively tailored to a user based in part on the user location.

Abstract: Embodiments of the present invention provide a method, computer program product, and computer system for verifying transactions over a network. The method includes initiating a proposed transaction with a transaction server. The transaction server provides encoded details of the proposed transaction, in the form of a QR code, to the user. The QR code is scanned using a computing device, and is decoded using an application on the computing device. A set of transaction details associated with the decoded QR code is compared with the details of the proposed transaction. The proposed transaction is then confirmed or aborted using a separate communication channel.

Abstract: Embodiments disclosed herein describe systems and methods for deploying a new code block on a blockchain. In an embodiment, an application server may provide a user with a graphical user interface (GUI) with contract components and document components. The application server may generate an assembled contract text based on the user selecting the contract and document components. The application server may determine the blockchain addresses or local addresses of smart contract components corresponding to the contract components and the documents components. The application server may generate a code block including references to the addresses of the smart contracts and the document components or containing the executable code itself and may deploy the code block to the latest valid blockchain. The application server may execute the smart contract in the code block based in response to a digital event trigger.

Abstract: A self-adaptive communication method for an encryption dongle, comprising: an upper-layer software platform sets communication mode information of self, when connection of an encryption dongle to a host is detected, acquires communication mode information of the encryption dongle, determines whether or not the communication mode information of self matches the communication mode information of the encryption dongle, if yes, then communicates with the encryption dongle via an interrupt transmit pipeline, and if not, then transmits a communication instruction to the encryption dongle via a control transmit pipeline; the encryption dongle sets a communication mode identifier on the basis of the communication mode information of the upper-layer software platform in the communication instruction, and, the encryption dongle resets and resets communication mode information of self on the basis of the communication mode identifier.

Abstract: A closed-loop system is operatively connected with a block chain distributed network for using the block chain distributed network for facilitating operation of a transaction record sharing system between member institutions comprising a host system and a source system. Host and source institutions function to share the transaction records from member institutions such that a host institution that is a member of the block chain may obtain the transaction records of all source institutions of the block chain. The transaction records are validated on the block chain such that the transaction records are secure represent a source of truth.

Abstract: Methods and systems for conducting a secure online transaction with a payment card are described. In an embodiment, a user selects a secure payment option during an online transaction which is transmitted to a merchant computer. A notification is received from the merchant computer of initiation of a secure transaction process, and then the user computer enters a secure transaction mode of operation and establishes a communication session with a payment provider device. The user computer prompts the user to present a payment card to a card reader device, reads payment card data, creates a request message, transmits the request message to a payment provider computer causing the payment provider computer to provide substitute payment card details to the merchant computer to complete the online payment transaction, and then exits the secure transaction mode.

Abstract: Systems, methods and apparatus for conducting payment transactions are provided. Pursuant to some embodiments, the payment transactions may be conducted between a consumer operating a mobile device and a merchant.

Abstract: A system and method for facilitating transactions utilizing phrase tokens are provided. Individual entities can be associated with unambiguous transaction phrase tokens, such as multiple word phrases. The transaction phrase tokens are associated with transaction accounts by a service provider such that the entities can complete a transaction without having to exchange transaction account information. In a transaction, a transaction phrase token is offered to an accepting party, which tenders the offered transaction phrase token to the service provider. The service provider processes the offered transaction phrase token according to configuration information specified for the transaction phrase token. The service provider can automatically process the transaction request or request additional information.

Abstract: A malware warning system, including a client sending requests to and receiving replies from a server, and a server, including a first warning generator sending to the client a warning including a threat level of content located at a web site, in response to receiving from the client a URL for accessing content at the web site, a second warning generator sending to the client a warning including information about at least one of the nature of the threat of the content located at the web site and a location of the web site, in response to receiving from the client a request for more information about the nature of the threat, and a third warning generator, sending to the client a warning including an instruction to perform a swipe gesture to confirm a request to access the URL, in response to receiving that request from the client.

Abstract: This disclosure describes, generally, methods and systems for exchanging alternative currencies. The method includes creating, at an alternative currency platform, a plurality of user accounts and receiving, from a first user in the plurality of user accounts, an alternative currency exchange offer. The alternative currency exchange offer includes one or more offer terms and associated assets. Furthermore, the method includes extending the alternative currency exchange offer from the first user to the second user, in response to receiving acceptance of the offer from the second user, verifying the associated assets of the first user and the second user, and in response to verification of the assets of the first user and second user, providing settlement of the alternative currency exchange offer.

Abstract: A secure payment system between a customer and a merchant, where the sales terminal wirelessly transmits a partial payment authorization transaction record including, at least a merchant terminal identification and a payment amount, but not a customer bankcard data, for a specific sales transaction, to a wireless device of the customer. Alternatively, the sales terminal displays a partial payment authorization transaction record including, at least a merchant terminal identification and a payment amount, but not a customer bankcard data, for a specific sales transaction, for the displayed record to be captured by a wireless device of the customer.

Abstract: Systems and methods for mirroring and transcoding media content are provided. In some embodiments, media content stored on a user equipment device is mirrored on a remote server, and the mirrored copy is transcoded and provided to other user devices in a media content format that is appropriate for the user devices. By so doing, the present invention not only provides a convenient and easy way for users to backup media content and access the media content from virtually any device, but also reduces the complexity and costs associated with maintaining reliable and consistent access to media content across various user devices.

Abstract: A method for automatically changing information originating from at least either of a first user and a second user by using a mobile device includes steps of: (a) a first device searching second devices as a target to perform interaction and then selecting a specific second device among the searched second device to change the user-originating information; (b) the first device transmitting to, or receiving from, the specific second device data related to the interaction, if a touch gesture is detected in the first device; and (c) at least either of the first and the second devices allowing a server to update the information originating from at least either of the first user and the second user by referring to the transmitted data related to the specific interaction.

Abstract: Methods, apparatus, systems are provided for use in detecting unauthorized changes to websites of web operators. Authorized content policy sets for each of a multiplicity of websites from web operators are collected and stored. In addition, content information obtained in respect web content downloaded from said websites by a multiplicity of client devices, client proxy devices, and/or client gateway devices is used to identify websites that do not conform to respective policy sets. Alerts are sent to the web operator of any non-conforming website. Optionally, alerts may be sent to client devices, client gateway devices, and/or client proxy devices for use in scanning or blocking the web content from non-conforming websites.