Capital One Services, LLC

Jeffrey Rule

Kevin Grant Osborn

Rajko Ilincic

Colin Hart

Wayne David Lutz

Kaitlin J Newman

Srinivasa Chigurupati

Daniel Herrington

Paul Y Moreton

James M Ashfield

Lara Mossler

Melissa Yoemans Heng

Charles Nathan Crank

Michael Bakr Mossoba

Jason Ji

Sophie Bermudez

Sarah Jane Cunningham

Latika Gulati

Andrew Cogswell

Kimberly Haynes

Lukiih Cuan

Gaurang J Bhatt

Rocky Guo

Lawrence H Douglas

Abdelkader M'Hamed Benkreira

Jackson Macomber

Lea Cody

James Zarakas

Saleem Ahmed Sangi

William Carroll

Kevin Widener

William Duane

Kevan Emmott

Ian Prince

David Kelly Wurmfeld

Timur Sherif

Abdelkader Benkreira

Steve Blanchet

Walter Avery Miller

Stephane Lunati

Amy Apponyi

Marisa Thomas

Bryant Alan Yee

Cruz Vargas

Kaylyn S Gibilterra

Michelle S Olenoski

Ryan Cuppernull

Jinlian Wang

Thomas S Poole

Samuel Rapowitz

George Bergeron

Clayton Johnson

Bob Uni Koshy

Shelton Smith

Kaush Kumar

Lawrence Douglas

In a method for changing a user's bank account information in merchant account databases a server receives a login request including a user identification and first user authentication information. The server further receives a request to change bank account information from a first bank account to a second bank account for merchant accounts of the user and network login information for the first bank account. The server accesses an account information database for the first bank account and downloads transaction information for merchant transactions involving the first bank account. The server identifies a set of merchant user accounts involved in the merchant transactions and receives account login information for a data site associated with a selected account. The server accesses the data site and changes a bank account identification stored therein from the first bank account to the second bank account.

System and method for facilitating bank account information changes

Systems and methods for digital media-based user authentication are disclosed herein. In some aspects, the system may receive an authentication request. The system may transmit a user verification request based on the authentication request. The system may receive media recordings in response to the user verification request. The system may detect one or more features in the media recordings. The system may generate a plurality of risk metrics for the user based on generating risk metrics for the one or more features. The system may determine an authentication probability based on the plurality of risk metrics.

Systems and methods for digital media-based user authentication

Various embodiments are directed to overlaying relevant product information in augmented reality via the use of near-field communication (NFC) and a product selection system. A user may authenticate into an application or user profile. Information about the user in the user profile may be used to determine which products are relevant to the user. Information related to the relevant products may then be displayed to the user in augmented reality, which improves at least the overall shopping and in-store experience.

NFC enhanced augmented reality information overlays

An exemplary system, method, and computer-accessible medium can include, for example, storing on a first device a digital tag, the tag configured to be associated with at least one application on a second device, such that receipt of the tag on the second device launches the application on the second device; and emitting from the first device to a second device the digital tag; wherein the application on the second device is configured to launch in a special state when the second device is in at least one state from a pre-determined list of states.

Systems, methods, and computer-accessible mediums for repressing or turning off the read of a digital tag

Methods and systems for preventing unauthorized resource access. In some aspects, the system obtains, in real time, a first data stream between a user requesting access to resources in a user account and an agent. The system processes, using a first machine learning model, the first data stream to generate a confidence score. If the confidence score exceeds a threshold, the system generates a sandbox context configured to simulate output indicative of successful resource access. The system obtains a second data stream for the sandbox context and processes it using a second machine learning model to determine whether the communication between the agent and the user was malicious. If the communication was not malicious, the system removes the user account from the sandbox context and effects grant of resource access. Otherwise, the system reports the agent and the user account for further processing for attempts to obtain unauthorized user access.

Systems and methods for preventing unauthorized resource access

A method and related system may analyze metadata associated with a first set of transactions to determine whether to perform a second set of transactions. The method and related system may include determining a data category based on first device-provided data of a first database transaction indicating a first record associated with a second record, and may further include obtaining, based on whether the data category satisfies a first set of criteria, an identifier and an amount based on image data using a prediction model. The method may further include querying a database based on the identifier to obtain an indication that the identifier is mapped to an object category, validating the amount based on a result indicating whether the object category satisfies a second set of criteria, and causing a second transaction that changes fields of the first and second records.

Augmented data for security during record updates

In some embodiments, the present disclosure provides an exemplary method that may include steps of determining an identity of at least one user of a plurality of users based on a multi-factor authentication; utilizing an identity tokenizer to generate at least one temporary identity token associated with the identity of the user; transmitting the at least one temporary identity token to an external computing device for authentication; receiving an authenticated digital token from the external computing device; automatically utilizing the authenticated digital token to retrieve a plurality of data items of an account information; utilizing a security module to link the authenticated digital token and the plurality of data items; generating a unique-universal identifier associated with the security module and the authenticated digital token; and utilizing the unique-universal identifier and the security module associated with the authenticated digital token.

Computer-based systems configured to dynamically generate authentication steps to perform at least one action and methods of use thereof

Logic may provide enforce a rate limit for product offers and generate a product token associated for product authentication. Logic may determine a rate limit associated with the product based on an identity of the consumer in a cryptogram for a transaction. Logic may compare the rate limit with a quantity of purchases of the product with a payment instrument provided for payment for the transaction, the rate limit to limit purchases of the product via the payment instrument or by the consumer associated with the payment instrument. Logic may approve the transaction based on comparison of the rate limit in response to the rate limit being greater than purchases of the product. Logic may create a product token via the cryptogram, the product token encoded via the cryptogram, the product token to uniquely identify the product and logic may cause transmission of the product token to the consumer.

Methods and arrangements for proof of purchase

A merchant page in a browser may receive selection of a first financial institution. The merchant page may generate a uniform resource identifier (URI) directed to an application. At least a portion of the URI may be registered with the application and the first financial institution in a mobile operating system. Responsive to receiving selection of the URI, the mobile OS may launch the application, which may authenticate credentials for an account. The application may associate the user ID parameter and the session ID parameter with the account and receive a cryptogram from a contactless card. The application may receive, from a server, an indication specifying the server verified the cryptogram. The OS may launch the browser, which may refresh the page. The refreshed page may include a virtual card number (VCN) in a first form field. A transaction may be processed based on the VCN.

Mobile web browser authentication and checkout using a contactless card

Various embodiments for contextual tapping engines. For example, an application executing on a computing device may authenticate credentials associated with an account and detect a tap of a contactless card to the computing device. The application may receive, from a communications interface of the contactless card, action data used to determine an action associated with the tap of the contactless card to the computing device. The application may determine a context of the application based on a current output of the application. The application may determine, based on the action data, the determined context, and data associated with the account, a first action associated with the tap of the contactless card to the computing device, the first action associated with at least one of the application and an operating system (OS). The application may initiate performance of the first action based on the tap of the contactless card.

Contextual tapping engine

Example embodiments of systems and methods for data transmission in a contactless card are provided. The contactless card may include a processor, and a memory. The memory may contain a first applet, a second applet, and a plurality of keys. The first applet and the second applet may be stored within a shared security domain. The second applet may be configured to communicate with the first applet to perform one or more cryptographic services. The second applet may be configured to transmit one or more requests to the first applet to encode one or more payload strings based on the plurality of keys to perform the one or more cryptographic services. The first applet may be configured to perform the one or more cryptographic services on behalf of the second applet based on the one or more requests.

Systems and methods for cryptographic authentication of contactless cards

A server can receive a plurality of records at a databases such that each record is associated with a phone call and includes at least one request generated based on a transcript of the phone call. The server can generate a training dataset based on the plurality of records. The server can further train a binary classification model using the training dataset. Next, the server can receive a live transcript of a phone call in progress. The server can generate at least one live request based on the live transcript using a natural language processing module of the server. The server can provide the at least one live request to the binary classification model as input to generate a prediction. Lastly, the server can transmit the prediction to an entity receiving the phone call in progress. The prediction can cause a transfer of the call to a chatbot.

Machine learning dataset generation using a natural language processing technique

The proposed system and method is directed at a system for generating a GPU-based mobile device signature to enhance the strength of a OTP card authentication signal. The proposed implementation leverages the NFC read capability of contactless OTP cards and WebGL image rendering functionality of mobile browser. An image, or a URL pointing to one, is received, via NFC transmission from a contactless card, for processing by a mobile browser. The output of the mobile browser image processing buffer (WebGL can then be hashed and used as a device identifier for the specific mobile device performing electronic authentication of a transmission source (Read by verifying, with high degree of certainty, the identity of the reading mobile device.

Systems and methods for device binding authentication

Systems and methods for authentication may include a first device having an association with a first account, including a memory containing one or more applets, a counter value, and transmission data, a communication interface, and one or more processors in communication with the memory and communication interface. The first device may create a cryptogram based on the counter value, wherein the cryptogram includes the counter value and the transmission data. The first device may transmit, after entry of the communication interface into a communication field, the cryptogram, and update, after transmission of the cryptogram, the counter value. The first device may receive, via the communication interface, one or more encrypted keys and one or more parameters. The first device may decrypt the one or more encrypted keys and, after decryption of the one or more encrypted keys, switch an association from the first account to a second account.

Systems and methods for secure reprovisioning

Various embodiments are directed to applying, via contactless card authentication, one or more restrictions to a virtual card number and generating the card number for use by a recipient. The one or more restrictions may be specifically personalized to the recipient and may include, for example, a merchant restriction, an amount restriction, a time period restriction, or a location restriction. The generated virtual card number along with the applied one or more restrictions may be consumed in various ways, such as writing the number to a blank card, transmitting the number directly to the recipient's computing device, etc., all via near-field communication.

Card issuing with restricted virtual numbers

Growing community of inventors

Chevy Chase, MD, United States of America

Jeffrey Rule