The Toronto-dominion Bank

Arthur Carroll Chow

Milos Dunjic

David Samuel Tax

Anthony Haituyen Nguyen

Arun Victor Jagga

Perry Aaron Jones Haldenby

John Jong-Suk Lee

Martin Albert Lozon

Yubing Liu

Casey Lyn Doyle

Gregory Albert Kliewer

Het Anand Patel

Armon Rouhani

Paul Mon-Wah Chan

John Jong Suk Lee

Keith Sanjay Ajmani

Stephen John McCann

Rakesh Thomas Jethwa

Ashkan Alavi-Harati

Kareem El-Onsi

Edward James Hood

Peter Glen Nairn

Eddie Cheuk Long Law

Masashi Kobayashi

Aaron Ashish Hudali

Yusbel Garcia Diaz

Gareth Daly

Randall John Bast

Mengfei Wang

Richard John Frederick Thake

Haituyen Anthony Nguyen

Asad Joheb

Sara Hatherly

Lionel Johnson

Linda Tao

Darius Braziunas

Sangeeta Mathew

Perry Aaron Haldenby

Dino Paul D'Agostino

Jeffrey Aaron Ecker

Kushank Rastogi

Robert Hayhow

Bryan Michael Gleeson

Robert Kyle Miller

Tae Gyun Moon

Rajeev Kumar Gandhi

Maryam Karbasi

Giovanna Borsella

Kamana Tripathi

John Jong Lee

Richard John Thake

Stephen John Mccann

Alexey Shpurov

Ling Tao

Timothy Willem Ubbens

James Thomas Hensley

Sidharth Kumar Varma

Alexander Kiriakou

Ajmani Keith Sanjay,

Computer-implemented systems, apparatuses, and processes that dynamically implement and manage hash-based consent and permissioning protocols. By way of example, an apparatus may obtain consent data that identifies one or more elements of data accessible to an application program executed by a device. The apparatus may generate a consent document for the application program based on at least a portion of the consent data, and may compute a consent hash value representative of the consent document. The apparatus may also generate and transmit permissioning data that includes at least the consent hash value to the device. The permissioning data may, for example, include information that instructs the executed application program to store the consent hash value within a local memory of the device and to associate the consent hash value with an access token of the executed application program.

Dynamic implementation and management of hash-based consent and permissioning protocols

The disclosed exemplary embodiments include computer-implemented systems, devices, apparatuses, and processes that dynamically implement and manage consent and permissioning protocols using container-based applications. By way of example, a device may receive, through a programmatic interface, a first request for an element of data generated by an executed application program. When the first request is consistent with consent data associated the executed application program, the device may obtain the requested data element and a digital signature applied to the requested data element by a computing system. Based on a verification of the applied digital signature, the device may generate and present a representation of the requested data element within a digital interface, along with an interface element that confirms the verification of the digital signature.

Dynamic management and implementation of consent and permissioning protocols using container-based applications

A computer-implemented method is disclosed. The method includes: detecting a trigger condition associated with a data record based on monitoring data record operations in connection with the data record; in response to detecting the trigger condition, generating a first message object for the data record, the first message object being associated with at least one compatible access channel; storing the first message object in a memory, the first message object being stored in association with a set of one or more message objects for the data record, wherein the first set defines an order for the one or more message objects; detecting a data record operation via a first access channel; retrieving, from the memory, at least one message object of the set that is associated with the first access channel; and causing the at least one message object to be delivered via the first access channel.

Multi-channel messaging system

The disclosure generally describes computer-implemented methods, software, and systems, including a method for placing a card into an alert state. An alert detection indication is received during an attempted data exchange using a permanent account number (PAN) associated with a card. The alert detection indication is received by an electronic controller embedded in the card and is received through an interface. The alert detection indication indicates that the PAN has an alert state identified for the PAN by an entity that issued the card. An operational mode of the card is modified into the alert state by the electronic controller and is based on receipt of the alert detection indication. An electronic display indicating that the card is in the alert state is displayed by the electronic controller.

Smart chip card with fraud alert and biometric reset

The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that dynamically manage consent, permissioning, and trust between computing systems and unrelated, third-party applications operating within a computing environment. By way of example, the apparatus may receive a request for an element of data that includes an access token and first credential data associated with an application program. When the first credential data corresponds to second credential data associated with the application program, may determine that the requested data element is accessible to the application program and perform operations that validate the access token. Further, and based on the validation of the access token, that apparatus may obtain and encrypt the requested data element, and may transmit the encrypted data element to a device via the communications interface.

Managing third-party access to confidential data using dynamically generated application-specific credentials

The disclosed embodiments include computer-implemented systems and processes that facilitate an initiation and a performance of one or more trustless transactions between counterparty devices operating within a trusted, secure computer-networking environment. For example, an apparatus may receive, through a touchscreen display unit, first data that identifies a session identifier associated with a transaction session, and may determine a validity of the session identifier based on the received first data. The apparatus may establish the transaction session in response to the determined validity of the session identifier. The transaction session may be associated with first and second operations characterized by values of corresponding parameters. The apparatus may receive, through the touchscreen display unit, second data confirming a completion of the first operation, and in response to the confirmation of the completed first operation, the apparatus may perform the second operation in accordance with at least a portion of the parameter values.

Automated performance of parameter-based operations in trusted network environments

A method for evaluating security of third-party application is disclosed. The method includes: in an automated test environment: launching a test instance of a first application; and obtaining a data access signature of the first application based on identifying at least one application state of the first application and account data retrieved by the first application from a user account at a protected data resource in the at least one application state; receiving, from a client device associated with the user account, an indication of access permissions for the first application to access the user account for retrieving account data; detecting a change in the data access signature of the first application; and in response to detecting the change in the data access signature of the first application, notifying the user of the detected change.

Systems and methods for detecting changes in data access pattern of third-party applications

The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that, among other things, generate and provision digital tokens based on dynamically obtained contextual data. For example, an apparatus may receive first information that characterizes an exchange of data initiated by a first application program executed by the apparatus, and may generate and transmit a signal to a computing system through a programmatic interface associated with a second application program executed by the apparatus. In some instances, the first signal may include the first information and data that instructs the computing system to obtain a digital token representative of a data type available for use in the data exchange. The apparatus may also receive a second signal that includes the digital token and based on the digital token, perform operations that present second information characterizing the available data type on an interface.

Generation and provisioning of digital tokens based on dynamically obtained contextual data

The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that dynamically manage consent, permissioning, and trust between computing systems that maintain confidential data and unrelated third-party applications. By way of example, an apparatus may obtain interaction data that identifies an interaction between an application program executed at a first computing system and a programmatic interface of a second computing system. Based on the interaction data, the apparatus may generate outcome data characterizing a probability that the requested access to the data element is inconsistent with an access permission granted to the executed application program, and may modify the access permission in accordance with the outcome data. The apparatus may also perform that generate permissioning data indicative of the modified access permission and that store the permissioning data within a locally accessible or cloud-based repository.

Dynamic management of consent and permissioning between executed applications and programmatic interfaces

A method for evaluating security of third-party applications includes: launching, in an automated test environment, a test instance of a first application; determining a data access pattern for the first application of accessing a protected remote server based on detecting data retrieval operations of retrieving data from the protected remote server by the test instance and determining application states of the first application associated with the detected data retrieval operations; and providing the data access pattern for the first application on a client device.

Systems and methods for evaluating data access signature of third-party applications

The disclosed embodiments include computer-implemented systems, apparatuses, and processes that perform a real-time delegated approval of initiated data exchanges by network-connected devices. For example, an apparatus determines determine a value of a parameter that characterizes an exchange of data and a first data type involved in the data exchange, and generates and transmits a first signal to a communications device associated with a second data type available for use in the data exchange and associated with the first data type. The apparatus receives, from the communications device, a second signal that includes information indicative of an approval of the second data type for use in the data exchange, and in response to the received approval, the apparatus performs the data exchange using the second data type and in accordance with the parameter value.

Real-time delegated approval of initiated data exchanges by network-connected devices

Systems and methods are provided that use a trained process to reply to a request comprising query data defining a query and context data defining contextual factors for the query from a device. The query is answered by one or more selected APIs of a plurality of APIs that invoke respective services to prepare a response. The trained process determines an execution plan responsive to the query data and the context data and is configured using training to define execution plans comprising selected APIs where a particular API is selected for the plan if it answers at least a portion of the query and the selected APIs together prepare the response optimized for the device according to the context data. The plan is provided to an execution component to execute the plan using the selected APIs and send the response to the requesting device.

Systems and methods for intelligent responses to queries based on trained processes

The disclosed embodiments include computer-implemented systems and processes that dynamically and selectively modify portions of a displayed interface to include interface elements that, when selected by a user through a single provided input, initiate a performance of a data exchange in accordance with parameter values consistent with prior initiated data exchanges. For example, a communications device may display, on a display unit, a first interface element representative of a first data exchange and may receive expected values of parameters that characterize the second data exchange. When a determined parameter value is consistent with the expected parameter values, the communications device may modify the first interface element and present, on the display unit, the modified first interface element and a second interface element within the interface. Upon selection of the second interface element, the communications device may initiate the second data exchange in accordance with the expected parameter values.

Dynamic modification of displayed interface elements based on contextual data

A computer-implemented method is disclosed. The method includes: receiving, from a web server associated with a protected resource, a first signal including a request to validate a bearer token submitted by a client device to the web server, the bearer token including a digital signature; validating the bearer token, the validating including verifying the digital signature using a public key associated with an end user of the client device; and in response to validating the bearer token, sending to the web server a second signal including a notification that the bearer token is valid.

Methods and systems for controlling access to a protected resource

The disclosed embodiments include computer-implemented processes that, using a distributed notarized ledger, constrain an ability of multiple parties to simultaneously, or near simultaneously, update or modify elements of reference data maintained within a centralized data store. For example, an apparatus may receive, from a first computing system, a request to modify reference data maintained at a second computing system. The apparatus may approve the first requested modification to the reference data based on a notarization criterion maintained within an element of a notarized distributed ledger, and perform operations that record notarization data characterizing the approved modification within an additional element of the notarized distributed ledger. The apparatus may also transmit the notarization data to the first computing system, and the notarization data causing an application program executed by the first computing system to modify local reference data in accordance with the notarization data.

Multidirectional synchronization of confidential data using distributed ledgers

Growing community of inventors

Markham, Canada

Arthur Carroll Chow