Hewlett-packard Company

Verifone Gmbh

Bespoke Innovations Sarl

Shareholder Representative Services, LLC

Encirq Corporation

Glenn A Kramer

Jay C Weber

Daniel R Haller

Trong Nguyen

David A Berger

Kevin T B Rowney

Mark B Vogel

Kevin T Rowney

Thomas H Van Vleck

William P Koenig

An automated method is provided for generating investment criteria for an investment vehicle that includes a pool of escrow deposits from a plurality of merger and acquisition transactions. An escrow history database is maintained of data derived from historical behavior of escrows from a plurality of previous merger and acquisition transactions. An escrow pool database is maintained of current escrow deposit data from a plurality of current merger and acquisition transactions. The escrow pool database includes the current deposit amounts in the pool of escrow deposits, and stated terms governing the release of each deposit amount in the pool of the escrow deposits. A set of investment criteria for selecting an asset pool is generated using a processor operating on the escrow history database and the escrow pool database. The set of investment criteria includes maturity metrics selected from the group consisting of weighted average maturity, convexity, and maturity distribution profile.

System and method of generating investment criteria for an investment vehicle that includes a pool of escrow deposits from a plurality of merger and acquisition transactions

Systems and methods for assigning weights to a plurality of objects are defined. Metrics associated with the objects are defined. A cursor is displayed and movement of the cursor is constrained by a control weight shape. Movement of the cursor within the control weight shape defines the weights assigned to the metrics. A display weight shape including a plurality of display weight factors is displayed. Each of the display weight factors corresponds to one of the metrics and their display corresponds to the weights assigned to the metrics.

System and method for selecting weighting for searching and for presentation of search results

A system and method for indicating to a user that a networked site is authentic includes a verification application configured to send a request to verify the authenticity of the networked site together with identity information about the site to a verification server. The verification application has access to encrypted user-customized information that was previously selected by a user and is encrypted and stored focally on the end-user device. The verification server verifies whether the networked site is authentic and is further configured to enable decryption of the encrypted user-customized information when a networked site is verified as authentic, so that the user-customized information can be presented to the user.

System and method for verifying networked sites

A method for securing communications between a server and an application downloaded over a network onto a client of the server is disclosed. A first request is received from the client, and in response a session credential security token is generated and sent to the client. A second request is received from the client to download the application and includes the value of the session credential security token. The server verifies that the value of the session credential security token is valid and, if so, generates a second security token that is tied to the session credential security token. The second token is embedded in application code and then the application code is sent to the client. A subsequent request for data from the application running on the client includes the value of the session credential security token and the value of the embedded security token. Verification of validity of the values of the session credential security token and the second security token received with the data request then occurs at least in part by determining that the values are cryptographically tied to one another. Upon verification, the requested data is sent to the client.

Method for enhancing network application security

An architecture is disclosed allowing a server to communicate bidirectionally with a gateway over a first communication link, over which service requests are initiated by the server. In response to a transaction received from a host legacy system at the gateway, the gateway parses one or more transaction response values from the host message, maps the one or more transaction response values to a canonical response code, and stores the canonical response code in a transaction log. According to a broad aspect of a preferred embodiment of the invention, communication networks that employ transactions between applications must effectively manage transactions that flow over the network. In addition, networking systems must also detect counterfeit transactions, especially, when the networking systems are utilized for financial transactions. An active, on-line database is utilized as a transaction log to track original requests, valid retrys and detect fradulant transactions. The transaction log serves as a memory cache where the received host response is returned to a valid retry transaction should the original response fail to reach a server because of a communications problem.

System, method and article of manufacture for managing transactions in a high availability system

A system and method provide for the interpretation and augmenting of structured documents electronically delivered to an individual consumer's computer using consumer profiles developed from and maintained with information reflecting the consumer's online and offline transactions, by selecting the variable content alternatives encoded in the structured documents that most closely match the consumer's profile. The consumer profiles are logically controlled by the consumer's computer, thus providing for enhanced security over information that is personal and confidential to the consumer, yet still allowing third parties such as web sites and others electronically delivering structured documents to the consumer to have such documents customized based on the consumer's profile. The consumer profile includes hierarchical attribute vectors which encode attributes of a consumer at progressively higher levels of abstraction, and allowing for querying of any combination of abstracted data or abstracted attributes of a consumer. The consumer profiles are updated with a process that reflects the relevance of each transaction to the consumer's profile, and accommodates a decay in the influence of transactions over time. A selection process for selecting content allows for multiple items of content to be selected for sequenced display to the consumer, through a limited presentation space.

Hierarchical models of consumer attributes for targeting content in a privacy-preserving manner

In one embodiment, an architecture that consummates an electronic transaction between a first electronic device, such as an acquirer device, a second electronic device, such as an issuer device, and a plurality of electronic terminals, such as merchant terminals, by establishing a communication between the plurality of devices and terminals and accumulating transactions that are approved by the second electronic device. Then, periodically the plurality of transactions are settled using a transfer of monetary value between the first electronic device and the second electronic device. For example, the present invention uses electronic cash transfer to replace conventional settlement, which requires the use of a third-party settlement service.

Settlement of aggregated electronic transactions over a network

The present invention provides for determining point of interaction device security properties for secure transmission of a transaction between a plurality of electronic devices, such as point of interaction (POI) devices or computer systems (or both), over a public communication system, such as the Internet. In one embodiment, a communication is established between a first electronic device and a second electronic device using a public network. Digital certificates are then exchanged to validate the parties and to provide a secure channel for transmission of data. Device security properties of the first electronic device are determined based on information transmitted by the first electronic device to the second electronic device thereby allowing the second electronic device to accept or reject a transaction request from the first electronic device based (in part) on the device security properties of the first electronic device.

Determining point of interaction device security properties and ensuring secure transactions in an open networking environment

Secure transmission of data is provided between a plurality of computer systems over a public communication system, such as the Internet. Secure transmission of data is provided from a customer computer system to a merchant computer system, and for the further secure transmission of payment information regarding a payment instrument from the merchant computer system to a payment gateway computer system. The payment gateway system evaluates the payment information and returns a level of authorization of credit via a secure transmission to the merchant which is communicated to the customer by the merchant. The merchant can then determine whether to accept the payment instrument tendered or deny credit and require another payment instrument. An architecture that provides support for additional message types that are not SET compliant is provided by a preferred embodiment of the invention. A server communicating bidirectionally with a gateway is disclosed. The server communicates to the gateway over a first communication link, over which all service requests are initiated by the server. The gateway uses a second communication link to send service signals to the server. In response to the service signals, the server initiates transactions to the gateway or presents information on an a display device.

System, method and article of manufacture for exchanging software and configuration data over a multichannel, extensible, flexible architecture

Secure transmission of data is provided between a plurality of computer systems over a public communication system, such as the Internet. For example, secure transmission of data is provided between a merchant server and an acquirer gateway using Secure Electronic Transaction (SET) compliant messages. However, gateway-initiated messages are not SET compliant. Accordingly, secure transmission of data using additional messages that are not SET compliant is provided in accordance with one embodiment of the present invention. In one embodiment, a method for virtual point of sale processing using gateway-initiated messages, includes establishing a first communication link (e.g., operating under the Internet Protocol) between an acquirer gateway and a merchant server, the first communication link being initiated by the acquirer gateway, and transmitting a gateway-initiated message (e.g., a Multipurpose Internet Mail Extensions(MIME) -encapsulated PKCS-7 message that includes a request for management information base data of the merchant server) via the first communication link from the acquirer gateway to the merchant server. The method also includes establishing a second communication link (e.g., operating under the Internet Protocol) between the acquirer gateway and the merchant server, the second communication link being initiated by the merchant server, and transmitting a Secure Electronic Transaction (SET) message via the second communication link from the merchant server to the acquirer gateway.

Virtual point of sale processing using gateway-initiated messages

Secure transmission of data is provided between a plurality of computer systems over a public communication system, such as the Internet. Secure transmission of data is provided from a customer computer system to a merchant computer system, and for the further secure transmission of payment information from the merchant computer system to a payment gateway computer system. The payment gateway system formats transaction information appropriately and transmits the transaction to the particular host legacy system. The host legacy system evaluates the payment information and returns a level of authorization of credit to the gateway which packages the information to form a secure transaction which is transmitted to the merchant which is in turn communicated to the customer by the merchant. The merchant can then determine whether to accept the payment instrument tendered or deny credit and require another payment instrument. An architecture that provides support for additional message types that are value-added extensions to the basic SET protocol, is provided by a preferred embodiment of the invention.

System, method and article of manufacture for a gateway payment

System, method and article of manufacture for managing transactions in a

Secure transmission of data is provided between a plurality of computer systems over a public communication system, such as the Internet. Secure transmission of data is provided from a customer computer system to a merchant computer system, and for the further secure transmission of payment information regarding a payment instrument from the merchant computer system to a payment gateway computer system. The payment gateway system evaluates the payment information and returns a level of authorization of credit via a secure transmission to the merchant which is communicated to the customer by the merchant. The merchant can then determine whether to accept the payment instrument tendered or deny credit and require another payment instrument. An architecture that provides support for additional message types that are value-added extensions to the SET protocol is provided by a preferred embodiment of the invention. A server communicating bidirectionally with a gateway is disclosed. The server communicates to the gateway over a first communication link, over which all service requests are initiated by the server. The gateway uses a second communication link to send service signals to the server. In response to the service signals, the server initiates transactions to the gateway or presents information on an a display device.

System, method and article of manufacture for a modular gateway server

An architecture for processing a plurality of transactions from a single point of initiation is disclosed. The initiating computer selects a terminal identification token, and associates the token with a transaction request, thereby ensuring the association of the transaction with a unique terminal identification despite being originated by the same terminal. The tokens are obtained from a token table, which contains a row for each token defined to the system. The table includes a column for the token, a column that identifies a system with which the token may be used, and a column that identifies a date and time field indicating when a particular token was selected for use. A null value in the date-time field indicates that the token for that row is not in use. A query operation selects a token with a null date-time value, and a set operation sets the date-time value to the then-current time to mark it in use. At the conclusion of the transaction, a set operation sets the date-time value to null, enabling the token to be reused for another non-concurrent transaction.

Growing community of inventors

San Francisco, CA, United States of America

Glenn A Kramer