Mastercard International Incorporated

Multos Limited

Alan Johnson

Simon Phillips

Mehdi Collinge

Patrik Smets

Sandeep Malhotra

Cristian Radu

Michael John Cowen

Ian David Alan Maddocks

James John Anderson

Pablo Fourez

Mark Britten

Omar Laazimani

Simon Collins

Valerie Wouters

Amyn Mohamed Dhala

Andy Yardley

Communication of information relating to an event is described, where the information is contained in a data field. Methods of communicating and obtaining the information are described, together with suitable apparatus for performing these methods. One or more elements of information relating to the event are obtained and used to determine a cryptographic record of the event. A first set of places in the data field are filled by a combination of some or all of each of the elements together with time information associated with the event. The cryptographic record is used to fill a second set of places in the data record. On reception of a message including the data field, the data field can be resolved into the first set of places and the second set of places. The time information associated with the event can then be determined and used to establish the whole or partial elements of information that were combined with the time information to fill the first set of places. Whole elements of information are then established from any partial elements. When these elements are all established, they can be used to calculate cryptographic record data which can be matched against the cryptographic record from the second set of places in the data field to determine that the elements of information are correct.

Communication of sensitive data in restricted data channel

A network management system includes: a memory configured to store instructions; and a parallel processor configured to execute the instructions to: (a) receive a request for a transaction; (b) determine a first authorization decision for the request; (c) determine a second authorization decision for the request; and (d) perform a first procedure when the first authorization decision is different from the second authorization decision. The request corresponds to use of electronic payment for the transaction and wherein the first authorization decision is generated in parallel with generation of the second authorization decision.

Parallel processing in a network

Various implementation described herein are directed to a method for providing access control. User information is received at a device. A request to provide access control is generated by the device based on the received user information. The request is transmitted via a network to an access manager. A response to the request is received from the access manager. Access control via the device is provided based on the response to the request.

Devices, methods and computer readable mediums for providing access control

A method for application of account and transaction controls on a payment token includes: storing, in a first device of a system, a control profile including a token number and transaction controls; storing, in a second device of the system, a token profile including the token number and a corresponding account number; receiving, at the first device, a transaction message including a data element having the token number and additional transaction data; determining, by the first device, compliance with the transaction controls based on the additional transaction data; transmitting the transaction message from the first to the second device; replacing, by the second device, the token number with the account number in the transaction message; and transmitting, by the second device, the transaction message to a financial institution associated with the account number.

Method and system for universal control account activities

A method and system include providing a user interface associated with an issuer of an account; receiving, at the user interface, a request to generate a token associated with a user account; generating at least one token associated with the user account; authenticating one or more elements associated with the user account, wherein authentication may be one of prior to and subsequent to the generation of the at least one token; and receiving the at least one token. Numerous other aspects are provided.

Systems and methods for minimizing user interactions for cardholder authentication

A wearable computing device reads near-invisible one- or two-dimensional barcodes having a size of 100 microns to one millimeter. The device includes a magnifying lens, a digital camera, a processor, program memory and a wireless communication module, all supported on a wearable device body. The wearable device body may be an eyeglass frame, a watch body or wristband, a headband or sweatband or a cap or other headgear, among other possibilities. Applications of the wearable computing device include unattended shopping in a physical retail store.

Nano-code-based reporting and authentication systems

Pursuant to some embodiments, systems, methods and computer program code are provided for receiving a transaction request message, the transaction request message specifying transaction attributes for a proposed payment transaction involving a user of a mobile device and a merchant, comparing the transaction attributes with a permitted transaction rule, the permitted transaction rule having been stored in the mobile device prior to receiving the transaction request message, approving the proposed transaction upon determining that the transaction attributes satisfy the permitted transaction rule, the approving including generating a transaction cryptogram, and transmitting the transaction cryptogram to the merchant for use in completing the proposed payment transaction.

Device-based transaction authorization

A first communication channel is established between a contactless blank IC (integrated circuit) payment card and a mobile device. The mobile device is in proximity to the contactless blank IC payment card. A second communication channel is established, via the mobile device, between a remote personalization server computer and the contactless blank IC payment card. Payment card personalization data is received and stored in the contactless blank IC payment card. The data had been downloaded from the remote personalization server computer to the contactless blank IC payment card via the second communication channel.

Systems and methods for personalizing payment cards

A cryptographic method of performing a tokenised transaction between a payment offering party and a payment accepting party is described. The tokenised transaction is mediated by a transaction scheme. The payment accepting party is provided with a merchant identity and a merchant certificate associated with that identity by the transaction scheme provider. The payment accepting party provides the merchant identity and transaction seed data to the payment offering party. The payment offering party validates the merchant identity and uses the merchant identity and the transaction seed data to generate a cryptogram for the tokenised transaction. The payment offering party provides the cryptogram to the payment accepting party for transmission to the transaction scheme provider for authorisation of the tokenised transaction. A suitable user computing device and merchant computing device for acting as payment offering party and payment accepting party respectively are also described.

Cryptographic authentication and tokenized transactions

A method for distribution and transfer of entitlement certificates includes: storing account profiles, each account including an account identifier, primary account number, and account balance; receiving an entitlement request from a computing device including a specific account identifier, entitlement balance, and usage controls; identifying a specific account profile that includes the specific account identifier; generating an entitlement certificate that includes the entitlement balance and usage controls; generating an entitlement identifier for the entitlement certificate; placing a hold associated with the entitlement certificate on the account balance included in the specific account profile for the entitlement balance; and transmitting the entitlement certificate to the computing device.

Method and system for distribution, use and validation of electronic entitlement certificates

A wheel assembly for installation on a shopping cart to retro-fit the shopping cart for facilitating self-checkout. The wheel assembly may include a support structure and a wheel rotatably supported on the support structure. The wheel assembly may further include a rechargeable battery supported by the support structure and a charging module supported on the support structure. In addition, the wheel assembly may include a force-detection module configured to provide a signal related to an item event in which an item is deposited within the shopping cart. Still further, the wheel assembly may include a processing and communications unit configured to receive the signal from the force-detection module. The processing and communications unit may transmit the signal to a device that is separate from the wheel assembly.

Self-checkout in retail stores

A design element is displayed on a display screen. The design element is modulated over time to encode data in the design element. The design element is presented by a merchant. A camera component of a mobile device is used to capture images over time of the design element. A payment application in the mobile device analyzes the captured images to obtain the encoded data. The payment application uses the encoded data to establish a communication channel with a merchant device operated by the merchant. As a result of communication over the communication channel, a purchase transaction is implemented, including transmission of payment credentials to the merchant from the payment application.

Dynamic screen logo that transmits shopping basket connection information to mobile device

A mobile device includes a housing and an antenna. The mobile device further includes a power-receiving circuit, and power-transmitting circuit, and a short-range communications circuit. The antenna performs multiple functions in that it is shared by the power-receiving circuit, the power-transmitting circuit and the short-range communications circuit. Each of the three circuits is selectively connectable to the antenna. The mobile device is configured to participate in a mobile-to-mobile battery-charge-sharing operation via inductive coupling from mobile device to mobile device.

Inductive coupling for battery sharing and multi-function inductive antenna

Systems and methods are described that provide a new type of application load unit for use in the secure loading of applications and/or data onto integrated circuit cards or smart cards. Plaintext key transformation units can be created for each of a plurality of smart cards that are to be loaded with a desired or selected application. A plaintext key transformation unit may be individually encrypted using the public keys associated with target smart cards. An application provider can create one or more application load unit using known means and can then create one or more additional plaintext key transformation unit, one for each target smart card using corresponding public keys which can be obtained taken from a database of card public keys.

Growing community of inventors

Maldon, United Kingdom

Alan Johnson