Paypal, Inc.

Darshan Desai

Kishore Jaladi

Abhishek Chhibber

Sundar Amalan Vincent

Jeffrey Alan Edelen

Oliver J Reyes

Lakshmikanth Raghavan

Santhosh Jagadeesan

Hari Hara Balan Shanmugasundaram

As disclosed herein, a token and/or a public/private key can be stored in a secure enclave that can be later used when a user logs into the payment provider's website. At that time, the user can simply swipe a fingerprint to complete a transaction. Thus, biometric authentication may be applied to complete the transaction. Moreover, the transaction can be completed across different browsers. In an implementation, a long-term token is not utilized. Instead, when a user opts into the disclosed implementation, a private and public key pair is generated on the client side device. The private key may be stored in the secure enclave and the public key may be sent to the payment provider. Thus, there may be no token involved to complete the transaction.

Unified login biometric authentication support

Methods and systems for providing merchant in-context checkout are described. A user is authenticated based on credentials received from a first application running on a computing device. An authentication code is provided to the first application. A signed verifier and the authentication code is then received from a second application running on the computing device. The authentication code and the signed verifier received from the second application are then validated, and a device token is provided to the second application upon validation. The device token is exchangeable by the second application for an access token that is usable for making payment calls from the second application.

System and method for providing merchant in-context checkout

Systems and methods are presented for implementing hacker traffic barriers for mitigating unauthorized account usage. A security system securely associates a primary trusted device with a user using encrypted tokens stored in an enclave within the primary trusted device, authorizes web browser authentication, and provides both intrinsic and explicit checks for unauthorized access to an account.

System and method for implementing hacker traffic barriers

Systems and methods for redirecting control of a process performed on a first application on a user device to another second application on the user device include receiving, through a controlling a process, a request to perform an action (e.g., user authentication). A determination may be made whether the second application is able to facilitate completion of the action (e.g. performing the authentication). Control of the process may then be redirected from the first application to the second application in order to complete the action.

Mobile device transaction authentication application redirection system

A self-updating system for defending against a cyberattack requests connected devices to solve a problem that is created in a random manner. The problems are created in a manner such that the system can determine whether the client device is being used as part of a cyberattack based on how the client device responds to the problems.

Cyberattack prevention system

Systems and methods for redirecting control of a process performed on a browser application on a user device accessing a web application to a native application on the user device include receiving, through a web application controlling a process, a request to perform an action (e.g., user authentication). A determination is made whether the request identifies a native application feature for completing the action that is preferable over a web application feature for completing the same action. In response to the action being determined to be completed by a native application feature, a determination is then made as to whether the native application feature is enabled by the native application. In response to determining the native application feature is enabled, control of the process is redirected from the web application to the native application such that the native application completes the action using the native application feature.

Aspects of the present disclosure involve a system and method for implementing hacker traffic barriers. The current disclosure presents a system and method that provides securely associates a primary trusted device with a user, authorizes web browser authentication, and provides both intrinsic and explicit checks for authorizing access to an account.

System and method for providing merchant in context checkout

Application redirection system

A system is configured to perform operations that include determining a first set of modular features corresponding to a first version of a service provider application and a second set of modular features corresponding to a second version of the service provider application. An original version of the service provider application may have been downloaded from an application store. The operations further include identifying, based on a comparison between the first set of modular features and the second set of modular features, a new set of modular features. The operations also include applying the new set of modular features to the first version of the service provider application. The applying may be based on determining that the new set of modular features supports predefined interface templates and corresponding interpreters. As such, the operations may be performed without communicating with the application store.

Growing community of inventors

Fremont, CA, United States of America

Darshan Desai