Capital One Services, LLC

Allison Fenichel

Varun Gupta

Amanda Sneider

Brice Elder

Fan Feng

Aditya Pai

Illiana Reed

Johanna Davis

Michael E Snyder

Philip John Spiegel

Noble Ozoka

Matthew Reedy

Niyati Shah

Julie Murakami

Zenobia Zoila Liendo

Nishant Garg

Mohak Chadha

Shivani Gupta

Michael Holden

Methods and systems are described herein for adapting legacy infrastructure to account for cybersecurity, privacy, and digital integrity issues plaguing electronic communications. In particular, the methods and systems overcome these issues by generate alternative content that is specific to specific destinations/recipients of electronic communications, as well as unique between each different destination/recipient. This unique alternative content may then be used for each access point (e.g., website, mobile application, etc.) linked to the same destination/recipient (e.g., website and/or mobile application provider).

Methods and systems for linking mobile applications to multi-access point providers to provide secure communication of encrypted user data

In some embodiments, an item-restricted access token may be bound to one or more items. In some embodiments, a first item that is accessible via a first website accessed by a user may be detected. Based on the detection and an authentication of a user, an item-restricted access token may be activated for accessing an item that corresponds to the first item. After the activation of the item-restricted token, a request may be obtained for an action related to a candidate item. The action related to the candidate item may be validated based on the item-restricted access token, where the validation indicates that the action related to the candidate item is valid based on a determination that the candidate item corresponds to the first item.

Item-access-based activation of an item set for an item-restricted token associated with a primary token

In some implementations, a device may receive, from one or more data sources, information indicating a plurality of data sets, where the plurality of data sets indicate information associated with respective physical locations or online locations. The device may identify a data set, from the plurality of data sets, that indicates information associated with an online location, where the information includes at least one of an entity name, an address, a phone number, a uniform resource locator, an entity identifier, or metadata. The device may parse the data set to identify information for a set of features. The device may analyze the information for the set of features to determine a brand associated with the online location. The device may pair the online location with the brand in the database such that the online location is linked with a first physical location of the brand in the database.

Linking physical locations and online channels in a database

Disclosed herein are systems and methods for a system for authorizing proxy number token requests. The system may comprise a memory storing instructions and at least one processor configured to execute instructions to perform operations. These operations may comprise receiving a first request to use a proxy number token to complete a first action associated with a first entity; authorizing the first request; receiving a second request to use the proxy number token to complete a second action associated with a second entity; determining a modifiable relationship data binding associated with the first and second entities, the modifiable relationship data binding comprising multiple parameters; determining that the second request satisfies the parameters; and authorizing the second request based on a determination that the second request satisfies the parameters.

Systems and methods for using proxy number tokens with configurable relationship data bindings

In some embodiments, validation of a network operation based on screenshot-derived uniform resource locator (URL) data may be facilitated. In some embodiments, in connection with use by a user of a first token associated with a first entity, user activity data associated with the user may be stored in a database in association with the first token. In some embodiments, the first user activity data may comprise first URL data and first timestamps associated with the first URL data. After the storage of the first user activity data, a first action request for a first action involving use of the first token may be obtained. A validation process may be performed on the first action by performing a first query of the database for user activity data based on the first action request.

Validation of a network operation related to use of a token via token-request-triggered storage of snapshot URL data

In some implementations, a credential system may create a virtual credential bound to a physical location associated with a transacting entity based on a request from a user device. The credential system may send information to a transaction terminal at the physical location bound to the virtual credential to register the virtual credential and identify a user that owns an account associated with the virtual credential. The credential system may provide, to the user device, tokenized information related to the virtual credential. The credential system may receive the tokenized information from a transaction terminal requesting authorization for the transaction. The credential system may send, to the transaction terminal requesting the authorization for the transaction, an authorization decision associated with the transaction based on whether the transaction terminal is present at the physical location bound to the virtual credential.

Remote creation of virtual credential bound to physical location

A system may receive, via a web browser plugin on a user device, a first timestamp associated with first click data at a website associated with a merchant, a referring uniform resource location (URL), a current URL, and first user identification data. The system may also receive transaction data including a second timestamp, second user identification data, and a first merchant name associated with a transaction with the merchant. The system may determine whether the first timestamp is within a predetermined period of the second timestamp and determine whether the first user identification data corresponds with the second user identification data. When the system determines that the first timestamp is within the predetermined period of the second timestamp and the first user identification data corresponds with the second user identification data, the system may store the referring URL and the current URL with the first merchant name in a database.

Systems and methods for enhancing transaction data

Methods, systems, and apparatuses are described herein for generating and managing virtual transaction cards based on mobile device location so as to provide transaction security during in-person transactions. A geographic location of a mobile device may be determined, a proximate merchant may be selected, and a virtual transaction card may be generated for that particular merchant. Data corresponding to that virtual transaction card may be deployed into a digital wallet device for use during transactions with point-of-sale devices. Use of the digital wallet device may be conditioned on geographic location, time, an unlock command from a mobile device, or the like. By providing such dynamically-generated and limited virtual transaction cards for in-person transactions, the threat of security vulnerabilities relating to point-of-sale systems may be mitigated.

Dynamic virtual transaction card management system

Methods and systems describe linking mobile applications to website providers using an intermediary database that is populated based on mobile application metadata in order to provide secure communication of user data encrypted specifically for given website providers. The methods and systems accomplish this by receiving, at an intermediary database, a first communication from a background application implemented on a mobile device, wherein the first communication comprises a first access point address and is generated based on a request, by a first access point, for first user information for use by a first provider, wherein the first provider provides the first access point. However, as opposed to simply generating a random alternative content for the first communication, the system performs an additional step to ensure that the alternative content is specific to the provider and may be used across all access points for the provider.

Methods and systems for linking mobile applications to multi-access point providers using an intermediary database

A system may receive a first timestamp associated with first click data at a first website associated with a first merchant, a first referring URL, and a first checkout URL, responsive to the user device navigating to the first checkout URL via the first referring URL, determine whether the first referring URL and the first checkout URL have first domains that respectively match previous domains of a previous referring URL and a previous checkout URL beyond a predetermined matching threshold, and based on the first referring URL and the first checkout URL having the first domains that respectively match the previous domains of the previous referring URL and the previous checkout URL beyond the predetermined matching threshold, cause the web browser plugin of the user device to display, in a dynamic GUI, a first virtual card number associated with the previous domains to complete a first transaction.

Systems and methods for generating and using virtual card numbers

Systems and methods for adaptive token verification are disclosed. For example, a system may include at least one memory storing instructions and one or more processors configured to execute the instructions to perform operations. The operations may include training a verification model to verify tokenized requests based on system identifiers. The operations may include receiving a tokenized request from an external system, the request comprising a system identifier of the external system. The operations may include generating output of the verification model based on the system identifier, and, based on the output, performing one of granting the request or blocking the request.

Adaptive artificial intelligence systems and methods for token verification

In some embodiments, Uniform Resource Locator (URL) parameters may be used to bind access tokens to authorize web-browser-initiated network operations. In some embodiments, a user input at a data exchange gateway associated with a first website to perform a first network operation (e.g., a request to access resources associated with the first website) may be detected. In response to the detected user input, an access token may be generated based on user specific information associated with the user, where the access token is associated with one or more network operation parameters. In response to a use of the access token for authorizing the first network operation and successful authorization of the first network operation, the access token may be configured to be bound to a first URL identifier parameter associated with the first website.

Systems and methods for access tokens configuration with uniform resource locator (URL) parameters

In certain embodiments, location-based activation of card identifiers may be facilitated. In some embodiments, an electrophoretic display card may store a set of location-specific card identifiers, where each card identifier of the set is associated with (i) an account of a user and (ii) creation location information indicating a device location of the user at a creation time of the card identifier. In response to being powered by a user device, the card may initiate wireless communication with the user device. The card may determine a device location of the user device, select a card identifier from the set of card identifiers that matches the device location, and switch a state of the card identifier to an active state to enable transaction processing for the card identifier. In some embodiments, the card may cause the active card identifier to be presented on an electrophoretic display of the card.

Transaction token that stores and presents location-specific token identifiers

The disclosed embodiments provide systems and methods for providing real-time warnings to merchants for data breaches. For example, the system may include one or more memory devices storing instructions and one or more processors configured to perform operations consistent with this disclosure. The operations may include collecting and storing transaction authorization requests from one or more merchants. The transaction authorization requests may include a virtual account number associated with an account, the virtual account number being previously bound to a merchant and reusable only for the bound merchant. The operations may further include detecting an event at the bound merchant based on, for example, a transaction authorization request having a mismatch between a transacting merchant and the bound merchant. The operations my further include communicating notification of the event through a communication interface with the bound merchant.

Growing community of inventors

Brooklyn, NY, United States of America

Allison Fenichel