Ncr Corporation

Ncr Voyix Corporation

Nir Veltman

Yehoshua Zvi Licht

Patrick Goode Watson

Brent Vance Zucker

Jason Patterson

Joseph Arnold White

Mikhail Romanovich Shapirov

Nilesh Sharma

Weston Lee Hecker

A user is assigned an initial risk score during a session with a messaging platform. During the session, the user attempts an operation with an external service. One or more additional authentication factors are requested from the user to dynamically lower the initial risk score. The lowered risk score is processed with the external service to perform the operation on behalf of the user during the session.

Multifactor authentication from messaging systems

A user provides retailer-specific consents for access and use to private/sensitive information of the user. The private/sensitive information is centrally stored in a privacy vault. Retail services (retailer) that the user subscribes to are provided a user-specific and consent-specific token representing the user and consents to usage of specific private/sensitive information of the user. When the retailer has a need for user-specific private/sensitive information, the retailer presents the user-specific and consent-specific token to the privacy vault. Assuming, the retailer was given access to the requested private/sensitive information defined in the token, the privacy results returns the requested information to the retailer; otherwise, an unauthorized message is returned from the privacy vault to the retailer. The user defines the consents to each retailer and a record of the consents is maintained in the privacy vault.

Consent-driven privacy disclosure control processing

A request for access to a user's account is made to an authenticator. The authenticator sends a request for access to the user associated with the user's account. In response to user authorization, the authenticator sends an access link to a service engineer. The service engineer access the link to access the user's account with limited and restricted access. When a remote service session associated with the activated access link is terminated, the authenticator sends a termination of session notice to the user.

Secure remote support authorization

A Virtual Reality (VR) system and method are provided that integrates transaction processing. A VR session customer transaction information is obtained and a transaction is concluded with the transaction information during the VR session.

Virtual reality transaction integration

Real-time facial recognition is augmented with an additional second biometric-based security gesture authentication. Facial biometric authentication is performed on a user for access to a resource. When facial authentication is successful, an image or a video of the user is captured performing a security gesture. Pixel values from the image or video are compared against expected pixel values for the security gesture and when the comparison is within a threshold, the user is provided access to the resource.

Security gesture authentication

Real-time facial recognition is augmented with a machine-learning process that samples pixels from images captured for the physical environmental background of a device, which captures an image of a user's face for facial authentication. The background pixel points that are present in a captured image of a user's face from a camera of the device are authenticated with the image of the user's face. The value of the background pixel points are compared against the expected values for the background pixel points provided by the on-going machine-learning process for the background.

Self-Service Terminal (SST) facial authentication processing

A user is initially registered during a session with a messaging platform through an out-of-band registration communication. When a user attempts to make a payment within the session or within subsequent sessions with the messaging platform or subsequent sessions with different messaging platforms, the user is presented token names representing registered forms of payment within the user's session. The selected token name is mapped outside the session to specific registered payment details and the payment processing is processed on behalf of the user during the session but through out-of-band session communications. Confirmation of payment is then sent back to the user in a session communication.

Secure payment processing within messaging systems

An Operating System (OS) command launcher or loader is newly obfuscated each time a command is successfully processed by the OS command launcher. Moreover, a binary for the OS command launcher is validated each time a command is attempted to be processed for execution by the OS command launcher.

Secure process impersonation

A user identifier to a user is received over a messaging platform. The user identifier is mapped to a user identity that includes an identity mapping to a plurality of other user identifiers for the user that are used over other messaging platforms by the user.

Cross-messaging identity mapping

A user is initially trained for voice authentication within a messaging platform session. After training and during the same session or a different session with the messaging platform session or with a different messaging platform, and when the user requests during such session a sensitive operation be performed on behalf of the user with an external service, a randomly generated voice challenge is delivered to the user during that session. If a returned voice recording from the user is authenticated in response to the issued voice challenge, then the sensitive operation is performed on behalf of the user during the session.

Growing community of inventors

Johns Creek, GA, United States of America

Nir Veltman