Capital One Services, LLC

Sun Microsystems, Inc.

Oracle America, Inc.

Kevin Grant Osborn

Jeffrey Rule

Srinivasa Chigurupati

David Kelly Wurmfeld

Wayne David Lutz

James M Ashfield

Tyler Maiman

Colin Hart

Kaitlin J Newman

Daniel Herrington

William Duane

Joshua S Edwards

Paul Y Moreton

Bryant Alan Yee

Rajko Ilincic

Saleem Ahmed Sangi

Daniel John Marsch

Lara Mossler

Samuel Rapowitz

James Zarakas

Timur Sherif

Xiaoguang Zhu

Lin Ni Lisa Cheng

Melissa Yoemans Heng

Michael Bakr Mossoba

Latika Gulati

George Bergeron

David Gabriele

Kyle Rankin Johnson

Eric Loucks

Brian Lee

Sophie Bermudez

Sarah Jane Cunningham

William Carroll

Kevan Emmott

Charles Nathan Crank

Kimberly Haynes

Andrew Cogswell

Ian Prince

Jason Ji

Christopher Jay Wu

Kyle T Grucci

Ryan S O'Connell

Austin Erickson

Matthew Kloster

Anita Eradla

Francis Ogbennah

Tao Lin

Tyler Sylvain Locke

Kevin Patrick Kelly

Steve Blanchet

Samuel Edwards

Imren Johar

Jeff Pharr

Cara Weikel

Michael Wolf

Lance J Andersen

Matt J Oliver

Asher Smith-Rose

Andrea Montealegre

Dennis S Brennan

Vladimir Matena

Mark W Hapner

Kathryn Tikoian

Brian McClanahan

Mia Rodriguez

Jackson Macomber

Vincent Ngo

Andrew Marr

Elisa-Michelle Rodriguez

Bob Uni Koshy

Ryan K Lubke

Hans Hrasna

Wendy Wu

Shelton Smith

Jaikishan Prasad

Jose Catala Castellar

Mark C Dupuis

Methods and systems are described here for porting accounts to multiple computing platforms. Blockchain technology may be used and in particular cryptographic tokens (e.g., non-fungible tokens) may be used. A cryptographic token may represent a user account and may enable usage of the cryptographic token to provide portability of the user account. An access control system may be used to perform operations described herein. The access control system may receive a request for using, at a computing platform, an account of the user. The request may include an identifier of a cryptographic token. The access control system may determine, based on the cryptographic token, that access to the user account may be permitted and the request may be fulfilled.

Managing user data for different platforms

Methods and systems are described herein for an access control system that may receive, from a device associated with a cryptography-based storage application, a blockchain operation request. The blockchain operation request may include an identifier of a cryptographic token (e.g., non-fungible token) that may store encrypted verification data encrypted using a public key associated with the cryptography-based storage application. The access control system may use an address associated with the cryptography-based storage application to send the verification data so that the verification data is decrypted and a first encoding of the decrypted data is generated by the device associated with the cryptography-based storage application. The access control system may then compare that first encoding with a second encoding made from the original verification data, and, based on the first encoding matching the second encoding, generate an authentication confirmation.

Sharing and requesting private data using cryptography

Systems and methods, as described herein, relate to increasing the functionality and security of digital wallets. These methods, techniques, and infrastructure may use hardware security modules (HSMs) to manage a plurality of cryptocurrency wallets in a custodial capacity. The HSMs may have functionality incorporated therein improve the functionality and security of cryptocurrency wallets. The aspects discussed herein may also relate to methods, techniques, and infrastructure to securely manage signing keys and cryptocurrency addresses contained in cryptocurrency wallets for a plurality of accounts that may be associated with a user account or user account identifier without exposing the keys to being stolen or otherwise comprised.

Custodial digital wallet management systems

Aspects described herein relate to methods, systems, and apparatuses that infer which items were purchased in a transaction based on correlating a transaction record for the purchase, such as credit card receipt, with browsing records received from multiple users of vendor websites that identify individual costs of items.

Line item transaction inference using merchant data and website interaction

Systems and methods are directed to optimizing a security and recoverability trade-off generally associated with cryptocurrency master key storage. Exemplary embodiments provide a biometrically derived cryptographic seed using a measurement of one or more scale invariant biometric attributes associated with a user. The measured user biometric data is then processed into a repeatable biometric identifier and formatted into a (biometric) cryptographic seed, for derivation of a master extended private key, which may be stored in an HD wallet or used dynamically to conduct a blockchain transaction. The biometric seed and master key generation process may be facilitated by a mobile application responsive to a readout of biometric data from sensors integrated/associated with the mobile device. The captured biometric data may be cryptographically combined with a user-inputted password and/or an authentication data record wirelessly retrieved from an OTP card, to generate a cryptographic seed with greater security attributes.

Systems and methods for creating seed and master keys for blockchain wallets from user biometrics

A payment instrument comprising a bottom layer; one or more intermediate layers, wherein at least one of the one or more intermediate layers comprises: a chip comprising a processor and memory; an antenna coupled with the chip; an absorbent medium; and one or more reservoirs comprising beads, each of the beads comprising dyes of one or more colors, the beads configured to release the dyes onto the absorption medium. The dyes cure on the absorption medium at a rate based on a curing agent applied to the absorbent medium or included in beads of the reservoirs. The payment instrument may also comprise a top layer having at least a partially translucent portion above the absorption medium, wherein the absorption medium is at least partially visible through the at least one partially translucent portion.

Methods and arrangements for a payment instrument with a unique design

In some embodiments, the present disclosure provides an exemplary method that may include steps of determining an identity of at least one user of a plurality of users based on a multi-factor authentication; utilizing an identity tokenizer to generate at least one temporary identity token associated with the identity of the user; transmitting the at least one temporary identity token to an external computing device for authentication; receiving an authenticated digital token from the external computing device; automatically utilizing the authenticated digital token to retrieve a plurality of data items of an account information; utilizing a security module to link the authenticated digital token and the plurality of data items; generating a unique-universal identifier associated with the security module and the authenticated digital token; and utilizing the unique-universal identifier and the security module associated with the authenticated digital token.

Computer-based systems configured to dynamically generate authentication steps to perform at least one action and methods of use thereof

Disclosed herein are system, method, and computer program product embodiments for signing a document by generating a hash value using a smart card. The smart card can receive from a computing device a first hash value generated for the document based on a first hash function, determine a private key based on a private key information stored on the smart card, sign the first hash value by generating a second hash value based on the first hash value using a second hash function and the private key. The second hash value is to authenticate that the second hash value is generated by the smart card based on the first hash value and the private key. The smart card can further assemble a signature package including the second hash value, and transmit the signature package to the computing device.

Secure smart card signing digital documents and validation

Disclosed embodiments include aspects that relate to authentication of contactless interactions. Identifying information can be provided from multiple sources. A chip-embedded card can be registered to an individual and include identifying information associated with the information. During a contactless transaction, identifying information can be acquired. An individual's identity can be validated based on identifying information. A chip-embedded card can be read by a card reader at a particular location providing physical presence information. In one instance, identifying information from the chip-embedded card can be compared to other identifying information to determine whether there is a match or mismatch. A confidence score can be computed based on the amount and type of information provided. An individual's identity can be validated when the confidence score satisfies a threshold.

Authentication of contactless transactions

Logic may provide enforce a rate limit for product offers and generate a product token associated for product authentication. Logic may determine a rate limit associated with the product based on an identity of the consumer in a cryptogram for a transaction. Logic may compare the rate limit with a quantity of purchases of the product with a payment instrument provided for payment for the transaction, the rate limit to limit purchases of the product via the payment instrument or by the consumer associated with the payment instrument. Logic may approve the transaction based on comparison of the rate limit in response to the rate limit being greater than purchases of the product. Logic may create a product token via the cryptogram, the product token encoded via the cryptogram, the product token to uniquely identify the product and logic may cause transmission of the product token to the consumer.

Methods and arrangements for proof of purchase

Methods and systems are described herein for using cryptographic tokens that represent real-world items to enable those items to be used in different virtual worlds (e.g., game worlds). In particular, an object retrieval system may be used to retrieve a cryptographic token that encodes parameter data for an object to be used (e.g., displayed) within a plurality of computing platforms. The object retrieval system may determine (e.g., using a cryptographic signature) that the user is allowed to use the object and may then generate a set of parameters for representing the object with the particular computing platform requesting the object. The object retrieval system may then transmit the parameters to the requesting platform. The object retrieval system may perform the same operations for requests from other platforms, such that the object retrieval system may uniquely encode the parameters for the particular platforms.

Using virtual objects on different platforms

Example embodiments of systems and methods for data transmission in a contactless card are provided. The contactless card may include a processor, and a memory. The memory may contain a first applet, a second applet, and a plurality of keys. The first applet and the second applet may be stored within a shared security domain. The second applet may be configured to communicate with the first applet to perform one or more cryptographic services. The second applet may be configured to transmit one or more requests to the first applet to encode one or more payload strings based on the plurality of keys to perform the one or more cryptographic services. The first applet may be configured to perform the one or more cryptographic services on behalf of the second applet based on the one or more requests.

Systems and methods for cryptographic authentication of contactless cards

The proposed system and method is directed at a system for generating a GPU-based mobile device signature to enhance the strength of a OTP card authentication signal. The proposed implementation leverages the NFC read capability of contactless OTP cards and WebGL image rendering functionality of mobile browser. An image, or a URL pointing to one, is received, via NFC transmission from a contactless card, for processing by a mobile browser. The output of the mobile browser image processing buffer (WebGL can then be hashed and used as a device identifier for the specific mobile device performing electronic authentication of a transmission source (Read by verifying, with high degree of certainty, the identity of the reading mobile device.

Systems and methods for device binding authentication

Systems and methods for authentication may include an authentication server. The authentication server may include a processor and a memory. The processor may be configured to transmit an authentication request. The processor may be configured to receive a first response that is responsive to the authentication request, the first response comprising a first cryptogram. The processor may be configured to generate a first challenge based on the first response. The processor may be configured to encrypt the first challenge with a symmetric key. The processor may be configured to transmit the first challenge receive a second response that is responsive to the first challenge, the second response comprising a second cryptogram. The processor may be configured to authenticate the second response.

Systems and methods for scalable cryptographic authentication of contactless cards

Systems and methods for authentication may include a first device having an association with a first account, including a memory containing one or more applets, a counter value, and transmission data, a communication interface, and one or more processors in communication with the memory and communication interface. The first device may create a cryptogram based on the counter value, wherein the cryptogram includes the counter value and the transmission data. The first device may transmit, after entry of the communication interface into a communication field, the cryptogram, and update, after transmission of the cryptogram, the counter value. The first device may receive, via the communication interface, one or more encrypted keys and one or more parameters. The first device may decrypt the one or more encrypted keys and, after decryption of the one or more encrypted keys, switch an association from the first account to a second account.

Systems and methods for secure reprovisioning

Growing community of inventors

Newton Highlands, MA, United States of America

Kevin Grant Osborn