Visa International Service Association

James Donaldson

Bartlomiej Piotr Prokop

Thomas Looney

Bartlomiej Prokop

Ryan Gillan

Matthew Neill

Rhidian John

Bryan Carroll

Peter Lennon

Rajiv Dutta

Shobhit Agrawal

Andre Walter Machicao

Nathan Morgan

Rhidian Desmond Thomas John

Timothy Hodkinson

Brian McManus

Clinton Lopaka Florez

Niall McGurk

Thomas Joseph Looney

Provided is a computer-implemented method for securely receiving data via a third-party webpage, including: generating configuration data in response to a request from a first system, the configuration data including a public key of a first key pair; digitally signing the configuration data based on a private key of a second key pair; transmitting the configuration data to the first system, the configuration data including code configured to facilitate the first system to embed a plurality of frames in a webpage, wherein the plurality of frames loads content from a domain that is independent from a domain that hosts the webpage; and verifying the configuration data based on a public key of the second key pair. The computer-implemented method may also include receiving, from a master frame of the plurality of frames, encrypted data. Systems and computer program products are also provided.

System, method, and apparatus for securely transmitting data via a third-party webpage

A system for providing updatable secure content resource. A content server may pay a content resource on the content author for an access by a requester. The content server receives a session request call from the requester prior to accessing the content resource. In response to the session request, the content server generates a session for the requester. The content server generates a payload that includes a location identifying the content resource on the content author and embeds the embedded cryptographic content. The content server transmits the generated payload to the requester. A resource server may receive an authentication access request in response to the embedded cryptographic content. In response to authenticating the authentication access request, the resource server provides the access to the requester.

Cryptographically secure dynamic third party resources

A system, method, and apparatus is provided for integrating multiple payment options on a merchant webpage. The method includes receiving, from a merchant system associated with a merchant webpage, a payment data capture request, generating, with at least one processor, web payment capture data based on the payment data capture request, the web payment capture data configured to adapt the merchant webpage to receive payment information input by a user, communicating, to the merchant system, the web payment capture data, receiving, directly from a client computer via at least one client-side script executed by the client computer based on the web payment capture data, the payment information input by the user, generating, with at least one processor, a transient payment token based on the payment information, and directly communicating the transient payment token to the client computer.

System, method, and apparatus for integrating multiple payment options on a merchant webpage

Techniques for reducing compromise of sensitive data in a virtual machine are described. During initiation of a secure string instance of a program module in memory allocated to the virtual machine, the program module can receive sensitive data in plaintext and retrieves parameters sourced from outside the allocated memory. During the execution of the program module, the sensitive data can be encrypted using a key based on the parameters to obtain encrypted data. The program module can overwrite the sensitive data with the encrypted data. The program module can receive a trigger to send a message that is generated using the sensitive data. The encrypted data can be decrypted using the key based on the parameters to obtain the sensitive data. After encryption and decryption, the program module can generate the message using the sensitive data and overwrite the sensitive data and the parameters used to encrypt the sensitive data.

Reducing compromise of sensitive data in virtual machine

A secure iframe and a combination of security elements are used in rendering a web page of a content provider. The security elements may be both pre-provisioned and executed in real time to allow a third party to securely collect sensitive information while allowing the content provider to retain total control of the look and feel of the web page. A microform within the secure iframe uses a combination of Content Security Policies (CSP), HSTS, and HPKP to generate a secure connection between the iframe and the third party while still allowing the content provider control the look and feel of the iframe. The content provider never handles the sensitive data, reducing the content provider's financial exposure in the event of a data breach. The secure service collects sensitive data and returns a tokenized identifier for use by the content provider when interacting with the customer.

Secure microform

Growing community of inventors

Moira, United Kingdom

James Donaldson