Square, Inc.

Block, Inc.

Oliver S C Quigley

Nathan P McCauley

Bob Lee

Michael Ross Lewis

Eric Monti

Max Joseph Guise

Jason Douglas Waddle

Benjamin Michael Adida

Robert H Lee

William Henderson

Daniel Jeffrey Post

Dan Boneh

Collin Mulliner

Nathan Mccauley

Identity verification using payment instrument(s) is described. In an example, an identifier associated with a user can be associated with a secure storage component of a payment instrument associated with the user. A verifying entity—which can be a computing resource and/or a service provider—can receive a request to access a computing resource availed via a computing device operable by the user. The verifying entity can determine whether to grant the user access to the computing resource based at least in part on an interaction between the payment instrument and a reader device associated with the computing device.

Identity verification using payment instrument(s)

In some examples, a wireless card reader detects insertion of a chip card at a chip card reader interface that includes electrical contacts positioned in the wireless card reader to contact contacts of the chip card when inserted into the wireless card reader. The wireless card reader may send, to a mobile computing device, a wireless communication request to send a PIN to the card reader. The card reader may receive, from the mobile computing device, a wireless communication including the PIN entered by a user on the mobile computing device. The card reader may send the PIN for authentication of the PIN. The card reader may receive a confirmation that the PIN has been authenticated. The card reader may send, to the mobile computing device, via the communication component, an indication of the confirmation that the PIN has been authenticated.

Secure wireless card reader

A method for processing a cardless payment includes receiving, by a first mobile device, a signal from a second mobile device using a short-range wireless transmission protocol. A value for the received signal strength indication of the signal between the first mobile device and the second mobile device can be determined. The process can include determining that the first mobile device and the second mobile device are in proximity based on the received signal strength indication. Consent to enter into a payment transaction can be established upon a determination that the devices are in proximity to one another.

Establishing consent for cardless transactions using short-range transmission

A method of encrypting a passcode is disclosed. In one embodiment, the method includes: receiving an indication of a portion of the passcode; calculating a plaintext value based at least in part on the indication, wherein the plaintext value represents an encoded portion of the passcode; encrypting the plaintext value into ciphertext using a homomorphic encryption system; and updating a cumulative encryption string by executing a cumulative operation to aggregate the ciphertext corresponding to the encoded portion into the cumulative encryption string computed for a previous portion of the passcode, wherein the cumulative operation is dictated by a homomorphic property of the homomorphic encryption system.

Homomorphic passcode encryption

A card reader configured to read a smart card can be detachably connected to a mobile computing device. When the card reader is attached to the mobile device, an application installed on the mobile computing device permits the mobile device to communicate with the card reader in order to process transactions. Security measures can be used on the mobile device to prevent theft of a PIN during software PIN entry of a payment transaction. The mobile device can prevent the keypad or other input interface from displaying feedback. The mobile device can also prevent passcodes from being stolen by displaying media encoded with digital rights management (DRM) and by managing the media and user inputs at a secure server. A mobile device can securely communicate with a card reader for a payment transaction using asymmetric or symmetric encryption.

Software PIN entry

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for storing a plurality of stored fingerprints, wherein each of the stored fingerprints is associated with a respective software environment and a respective mobile device; receiving from a first mobile device a first fingerprint of a first software environment in the first mobile device; determining whether the stored fingerprints include less than a threshold amount of fingerprints identical to the first fingerprint; based on a determination that the stored fingerprints include less than the threshold amount of fingerprints identical to the first fingerprint, determining that the first software environment is a compromised software environment; and performing a corrective measure.

Hierarchical data security measures for a mobile device

Some examples include determining a plurality of motion pattern readings detected by an electronic device in conjunction with entry of a passcode on the electronic device, such as for authentication of a transaction. The passcode may be entered as a sequence of tactile presses on the electronic device, and the detected motion pattern readings may be indicative of movements of the electronic device when the tactile presses occur. Based at least in part on the motion pattern readings, a plurality of locations corresponding to the tactile presses may be determined. Further, based at least in part on the determined plurality of locations, symbols for the passcode may be determined. In some cases, a process for authenticating the transaction may be initiated using the determined passcode.

Passcode entry through motion sensing

Software pin entry

Several embodiments include a mobile device that uses a media file to render a passcode entry interface. The passcode entry interface can have an assigned location of an input element that corresponds to an inputtable value in the passcode entry interface. The media file can include a visual depiction having the input element at the assigned location. In several embodiments, the media file does not store the association between the assigned location and the inputtable value. The assigned location corresponding to the inputtable value can be separately stored. The mobile device can receive a coordinate of a touch event on the passcode entry interface. To determine a passcode entry based on the touch event, the coordinate can be compared against the separately stored assigned location to determine a corresponding input value to the coordinate.

In some examples, methods and systems may process one or more payment transactions between a merchant and a buyer by registering a communication device as an authorization instrument to the payment transaction. To this end, the method includes detecting at least one transaction activity associated with a payment system, establishing a communication channel between the POS terminal an RF communication device in proximity to the POS terminal. Then obtaining at least one device characteristic of the communication device, wherein the device characteristic is related to the operational or physical features of the communication device; generating a digital fingerprint based in part on the obtained device characteristic and the information related to received payment object; determining whether the digital fingerprint substantially compares to an existing fingerprint in a database and if the existing fingerprint is substantially similar to the digital fingerprint, authorizing the payment transaction through presence of the communication device.

Device fingerprinting at a merchant location

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for determining, at a remote computing device, whether a first security measure has been compromised, wherein the first security measure is executed on a mobile device; and based on a determination that the first security measure has been compromised, performing a corrective measure, wherein the corrective measure is performed after a delay.

A method for encrypting a passcode is disclosed. In one embodiment, the method includes: receiving an indication of a portion of the passcode from a user; encoding the portion of the passcode; encrypting the encoded portion into ciphertext using a homomorphic encryption system; updating a cumulative encryption string by executing a cumulative operation to aggregate the ciphertext corresponding to the encoded portion into the cumulative encryption string computed for a previous portion of the passcode, wherein the cumulative operation is dictated by a homomorphic property of the homomorphic encryption system; and generating a passcode message based at least in part on the cumulative encryption string, wherein the passcode message includes a message authentication code.

Splicing resistant homomorphic passcode encryption

A method of entering a passcode is disclosed. In one embodiment, the method includes: calculating locations of tactile inputs on the input component to interact with the passcode entry interface based at least partially on the recorded motion readings; and determining the passcode based at least in part on the tactile inputs by mapping the tactile inputs to a geometric layout of interactive elements of the passcode entry interface.

Growing community of inventors

San Francisco, CA, United States of America

Oliver S C Quigley