Capital One Services, LLC

Paypal, Inc.

Ebay, Incorporated

Attaullah Baig

Vishal Parikh

Upendra S Mardikar

Computer implemented systems and methods are provided for securing data. In some embodiments, a system for securing data may comprise one or more processors configured to receive a request for data over a network. The one or more processors may be configured to identify one or more confidential portions of data within the requested data. The one or more processors may be further configured to transmit the confidential portions of data to a hardware device configured to secure the confidential portions of data, and receive the secured data from the hardware device.

Methods and systems for securing data in the public cloud

Field level security system for securing sensitive data

A user who is authorizing a delegate to make a purchase using funds from an account of the user sends information to a payment provider. The information includes a picture of the delegate, along with information such as a merchant name, a maximum amount, a type of purchase, item information, and/or any other transaction limitations/restrictions. The payment provider then transmits this information to the merchant. A one-time code or number may be communicated to the delegate. When the delegate is ready to make a payment with the user account, the delegate gives the delegate's name and/or other identifying information to the merchant, along with the payment code. The merchant enters the information and is shown a picture of the delegate. If there is a match, the payment may be submitted for processing. In one embodiment, a photo of the delegate may be taken by the merchant and the image transmitted to the user. The user may then be requested to confirm the delegate as an authorized delegate.

Delegation payment with picture

A key is securely injected into a POS PIN pad processor in its usual operating environment. In response to entry of a personal identification number (PIN) into a PIN pad, the processor puts the PIN into a PIN block; puts additional random data into the PIN block; and encrypts the entire PIN block using asymmetric cryptography with a public key derived from the injected key residing in the PIN pad processor. The corresponding private key may be held securely and secretly by an acquirer processor for decrypting the PIN block to retrieve the PIN. The encrypted random data defends the PIN against dictionary attacks. Time stamp data and constant data encrypted with the PIN block enables a defense of the PIN against replay attacks and tampering. The method may also include accepting the PIN from a mobile phone in communication with the processor.

Point of sale (POS) personal identification number (PIN) security

When a consumer makes a purchase at a POS using a payment provider, the payment provider provides, to the merchant, a consumer identification (ID) and an authorization number, along with the payment approval. After receiving the information from the payment provider, the POS device sends a generated digital or electronic receipt to an email address of the payment provider. The email contains information about the payer and the authorization. Upon receipt, the payment provider may upload the electronic receipt into the consumer's mobile wallet or account using the payer ID and authorization number. As a result, the consumer can easily locate and access a receipt on the consumer's mobile device, such as by accessing the user's mobile wallet or the user's payment provider account on the mobile device, e.g., through a mobile app.

Growing community of inventors

Round Rock, TX, United States of America

Attaullah Baig