American Express Travel Related Services Company, Inc.

Iii Holdings 1, LLC

John G McDonald

Manish K Deliwala

Ajay Babu Maddukuri

Jonathan Ward Lupton

Keshav A Narsipur

Curtis Watson

Naresh Bhandari

Joseph Lesko

Richard A Evans

Glen E Graf

Christina L Richards

Peter D Saunders

Blayn W Beenau

Seth W Fields

Frank Comerford

Myles Comerford

Lee J Peart

Joseph T Driscoll

Cynthia L McDonald

Jon Steven Imada

John Rojewski

Disclosed are various embodiments for securely conducting online in-application purchases. In one example, among others, a system comprises a computing device that is configured to identify a purchase request from a merchant application executed on the computing device and authenticate an account with a wallet provider based at least in part on a selection of the account. The computing device is configured to receive an instruction from the wallet provider to execute a security library and determine that the computing device is secure by executing a security library. The execution of the security library generates a device response for the wallet provider. A security code is determined data received from the wallet provider. A token is transmitted for the purchase request to the wallet provider based at least in part on the security code.

Systems and methods for in-application and in-browser purchases

A packaging device can include a resilient member formed of one or more layers of different materials and a frame member. The resilient member can be heat sealed to the frame member or to a coating on the surface of the frame member. The layers can be made from different materials or the same materials having different thicknesses, modules of elasticity, melting index, or other different characteristics.

Heat sealed packaging assemblies and methods of producing and using the same

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising receiving a selection of a transaction account to be used as payment for a transaction; and transmitting a wireless signal carrying emulated track data for payment of the transaction, wherein the emulated track data emulates data in tracks of a magnetic card and includes alias transaction account data in place of actual transaction account data.

Magnetic card swipe emulation systems and methods

Various embodiments for sending a cryptogram to a point of sale terminal while disconnected from a network. In some embodiments, for example, a computing device that is configured to display a prompt for a selection of a transaction account. An encrypted session key is retrieved through a network in response to determining a number of session keys associated with the transaction account is below a threshold. The computing device is also configured to generate a session key based at least in part on decrypting the encrypted session key using an encryption key and establish a wireless connection with a point of sale terminal for a purchase. A cryptogram is generated from the session key based at least in part on the user device being disconnected from the network. The cryptogram is sent to the point of sale terminal.

Sending a cryptogram to a POS while disconnected from a network

The present specification discloses headwear configured to permit the user to easily don an item of eyewear, such as prescription glasses, reading glasses, sun glasses, safety glasses, and the like. The present headwear provides a unique pocket design on each side with an eyewear temple aperture located within the pockets. The pockets are created by forming a z-folded configuration out of a fabric panel for each pocket and tacking the three layers of material together, above and below the eyewear temple aperture. Each of the pockets are positioned forward of at least part of the ears, and open towards the user's anterior. The outermost panel of each of the pockets protrudes from the sides of the headwear to provide sufficient clearance for the temples of the eyewear to easily slip into the pockets and through the eyewear temple apertures.

Headwear with improved temple openings

An electrical and receptacle and fixture system that provides a simple, safe and quick mechanical electrical connection for mounting electrical fixtures to a receptacle box and connecting electrical equipment. The connection system has dedicated fixture and receptacle as well as conversion adapters for existing electrical connections. An LED integral light and switch assembly is adaptable to connect system providing self-contained point of use switchable LED lighting as required.

Easy mount lighting fixture and electrical receptacle system

A system may identify a purchase transaction request from a merchant application and generate an in-app payment cryptogram for the purchase transaction request based on a limited use payment credential (LUPC). The in-app payment cryptogram may be provided to the merchant application. The merchant application may transmit the in-app payment cryptogram to a merchant computing device. A request may be received from a payment network to update the LUPC. A security library may be executed to determine that the client device is secure. The execution of the security library may generate a device attestation response, and the device attestation response is transmitted to the payment network. An updated LUPC may be received from the payment network.

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising receiving a wireless signal from a transaction device, wherein the wireless signal carries emulated track data for payment of a transaction; reading the emulated track data from the wireless signal; generating a transaction payload, wherein the transaction payload contains transaction account data and a dynamically generated digital signature value from the emulated track data of the wireless signal; transmitting the transaction payload to an authorization network server; receiving an authorization instruction from the authorization network server for handling payment of the transaction; and processing the payment of the transaction in accordance with the authorization instruction.

Transaction device use of a dynamically generated value based on a next expected session key

A system is configured for detecting a point of sale, receiving a personal identification number (PIN), generating a PIN based key using a message digest of the PIN, decrypting a data encryption key (DEK) using the PIN based key, and generating a DEK based dynamic key using the PIN based key. The system may also decrypt a session key using the DEK based dynamic key, generate a cryptogram from the session key, and send the cryptogram to the point of sale.

A system may receive a transaction request from a user device, and request an in-app cryptogram from a network software development kit (SDK) on the user device. The in-app cryptogram may include an unpredictable number, an application transaction counter (ATC), and a card verification result (CVR), and the ATC may be extracted from a limited use payment credential (LUPC). The system may transmit a token, a token expiry, and a token data block for an assessment by a payment network, with the token data block including the token, the token expiry, the ATC, and/or the in-app cryptogram. The system may further receive a request from the payment network to update the LUPC on the user device, and attest that the user device is secure in response to the request from the payment network to refresh the LUPC on the user device.

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising storing, by a processor, a session key on a mobile device, wherein the session key is encrypted. The system receiving a transaction request, decrypting the session key, and broadcasting a signal configured for being received by a magnetic stripe reader. Trackdata and/or trackdata may be encoded in the signal. The trackdata and/or the trackdata may also comprise a dynamically generated value that is generated based on the session key.

Host card emulation systems and methods

Systems and methods for rapidly provisioning functionality to one or more mobile communication devices are disclosed. The method may comprise generating, prior to a request for the functionality, a globally unique identifier ('GUID') encryption key, wherein the GUID comprises a unique identifier that may be associated with a transaction account customer, generating a value associated with the GUID, deriving, based on the value, a plurality of base encryption keys associated with the value, creating, a perso-script, wherein the perso-script comprises a file associated with data associated with a customer, and/or creating a proto-script, wherein the proto-script comprises the perso-script prepended by a script to rotate the plurality of base encryption keys.

Methods for rapidly provisioning application functionality to a mobile communication device

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising storing, by a processor, a session key on a mobile device, wherein the session key is encrypted. The system receiving a transaction request, decrypting the session key, and broadcasting a signal configured for being received by a magnetic stripe reader. Track 1 data and/or track 2 data may be encoded in the signal. The track 1 data and/or the track 2 data may also comprise a dynamically generated value that is generated based on the session key.

Growing community of inventors

Eugene, OR, United States of America

John G McDonald