The Toronto-dominion Bank

Paul Mon-Wah Chan

John Jong Suk Lee

Jonathan K Barnett

Orin Del Vecchio

Perry Aaron Jones Haldenby

Rakesh Thomas Jethwa

John Jong-Suk Lee

John Jong Lee

Lauren Van Heerden

Matthew Hamilton

Arthur Carroll Chow

Jakub Danielak

Dino Paul D'Agostino

Gunalan Nadarajah

Christianne Moretti

Hisham I Salama

Edward Lounsbury

John Barbon

Perry Aaron Haldenby

Stephen John McCann

Garima Aggarwal

Ashraf Metwalli

Roisin Lara Fritz

Eddie Cheuk Long Law

Dean C N Tseretopoulos

Michael D Cummins

Joe Moghaizel

Kevin Ricardo Mari

Robert Kyle Miller

Prabaharan Sivashanmugam

Rajan Mahadevan

Ian James McDonald

Orin DelVecchio

Evan Zachary Cohen

Haituyen Anthony Nguyen

Adam Douglas McPhee

Sarabjit Singh Walia

Gregory Richard Harper

Helene Nicole Esposito

Rajeev Kumar Gandhi

Nigel Lall

Linda Tao

Hisham Ibrahim Salama

Michael Grouios

Tae Gyun Moon

Roy D'Souza

Michael Loughry

Daniel M Siegel

Sultan Mehrabi

Nikolas Sawtschuk

Jenny Lin

Roy D'souza

James Zachary Pryor

Tricia Elizabeth Allen

Salim Jivraj

Mike Stephenson

Bruno Sandre

Mok Choe

Ali Hosseinian

Edwin Van Damme

Amber Rose Cossitt

Lori Bristow

Koko Mihan

Paul Milkman

Roisin F Fritz

Yaniv Nathan

Gerald Jeschke

Andrew Chak

Perry Haldenby

Dino Paul D'agostino

Ian James Mcdonald

Dean Cn Tseretopoulos

Avinash Malliah

Sophia Dhrolia

Kevin Grant

Matthew Randolph Molnar

Prabaharan Sivashanmugan

Adam Douglas Mcphee

Ling Tao

Satwinder Singh Brar

Steve Brar

Parabaharan Sivashanmugam

Stephen John Mccann

Dean C Tseretopoulos

Eddie Cheuk Law

John Anthony Tarnowski

Dino D'agostino

Mahnaz Meshkati

Johnathan K Barnett

Orin Delvecchio

A system has a storage medium encoded with program instructions, and a processor coupled to access the program instructions. The instructions configure the processor for: receiving a first request at a POS terminal to surrender a previously purchased first asset in exchange for at least a portion of a second asset that was used to purchase the first asset, receiving the private key from the first asset; accessing a set of rules stored in a distributed electronic ledger, the set of rules specifying conditions associated with the first request; transmitting an authorization to return the at least a portion of the second asset in exchange for surrender of the first asset, in the case where the conditions are satisfied; and invalidating the first request in the case where one or more of the conditions are not satisfied.

Distributed electronic ledger with metadata

The disclosed embodiments include computer-implemented systems and processes that facilitate an initiation and a performance of one or more trustless transactions between counterparty devices operating within a trusted, secure computer-networking environment. For example, an apparatus may receive, through a touchscreen display unit, first data that identifies a session identifier associated with a transaction session, and may determine a validity of the session identifier based on the received first data. The apparatus may establish the transaction session in response to the determined validity of the session identifier. The transaction session may be associated with first and second operations characterized by values of corresponding parameters. The apparatus may receive, through the touchscreen display unit, second data confirming a completion of the first operation, and in response to the confirmation of the completed first operation, the apparatus may perform the second operation in accordance with at least a portion of the parameter values.

Automated performance of parameter-based operations in trusted network environments

The disclosed embodiments include methods and systems for providing tokenized transaction accounts. In one embodiment, a computer-implemented method is provided that may include generating, by one or more processors, a first tokenized transaction account from a first transaction account associated with a first user. The method may also include providing the first tokenized transaction account to a client device associated with the first user for storage in the client device and use in transactions. The method may also include updating the first tokenized transaction account based on one or more conditions and providing the updated first tokenized transaction account to the client device for storage and use in a subsequent transaction.

Systems and methods for providing tokenized transactions accounts

Methods and devices for provisioning a secure application on an electronic device with first issuer data for a first issuer are described. In an embodiment, the provisioning system receives and stores first issuer records. The example provisioning system receives a provisioning request to provision the secure application with the first issuer data. The provisioning request includes identifying information. The example provisioning system evaluates the provisioning request based on at least one of the first issuer evaluation criteria, the first issuer records and the identifying information in the provisioning request. When the provisioning request satisfies the first issuer evaluation criteria, the example provisioning system generates a signal using the communication module to provide the first issuer data to the electronic device to provision the secure application on the electronic device.

Provisioning of secure application

The disclosed embodiments include computerized systems and methods for generating secured blockchain-based ledger data structures that track occurrences of events across fragmented and geographically dispersed lines-of-business of an enterprise. In one instance, an apparatus associated with a rules authority of the secured blockchain-based ledger may detect an occurrence of a triggering event, and may access and decrypt a set of rules hashed into the secured blockchain-based ledger using a confidentially-held master cryptographic key. The apparatus may identify a rule associated with the detected event, and perform one or more operations consistent with the rule, including a disbursement of various rewards to employees in response to customer-specific interactions with the enterprise. The disclosed embodiments provide a rules process for aggregating mutually incompatible enterprise data that specifies the events, and for tracking the events in uniform data structures accessible across the enterprise.

Systems and method for tracking enterprise events using hybrid public-private blockchain ledgers

The disclosed embodiments include computerized systems and methods for generating secured block-chain-based ledger data structures that track subdivide ownership and usage of one or more assets, such as Internet-connected devices. In one instance, an apparatus associated with a rules authority of the secured block-chain-based ledger may detect an occurrence of a triggering event related to at least one of partial ownership interests in the assets, and may access and decrypt a set of rules hashed into the secured block-chain-based ledger using a confidentially-held master cryptographic key. The apparatus may identify a rule associated with the detected event, and perform one or more operations consistent with the rule, including a generation of additional data blocks reflecting a change in at least one of the partial ownership interests, and additionally or alternatively, processes that adaptively monitor a compliance of one or more partial owners with an imposed usage restriction.

Systems and methods for tracking subdivided ownership of connected devices using block-chain ledgers

A processor receives a signal representing data including event information detailing an event involving an entity having a registered ownership interest in a product and loads a portion of a distributed electronic ledger for tracking ownership information associated with the product. The distributed electronic ledger includes, within a block thereof and associated with the product, an event trigger list including entity data associated with each entity having a registered ownership interest in the product and a rules engine including rules associated with event triggers in the event trigger list. The processor determines whether a triggering event corresponding to the event is stored in the event trigger list and, when the event has a corresponding triggering event, determines the associated rule within the rules engine. The processor updates and saves the distributed electronic ledger by performing an action specified by the determined associated rule.

Secure real-time product ownership tracking using distributed electronic ledgers

Mobile communications devices, systems and methods are provided for identifying a risk of fraudulent activity associated with a merchant before a user executes a transaction with the merchant. In an embodiment, a mobile communications device obtains first information identifying prior instances of fraudulent activity associated with a merchant. The mobile communications device may determine a level of risk of fraudulent activity associated with the merchant based on the obtained first information, and may identify, based on the determined risk level, one or more payment instruments and associated incentives appropriate for financial services transactions involving the merchant. The mobile communications device may present, to a user, a notification including the identified payment instruments and associated incentives prior to execution of a transaction between the user and the merchant.

Systems and methods for providing merchant fraud alerts

A payment processing server generates an asymmetric cryptographic key pair, over one secure communications channel providing a mobile device with one cryptographic key of the cryptographic key pair, and saves another cryptographic key of the cryptographic key pair in a pending transaction database in unique association with a single-use payment number and a financial account. The server encrypts the payment number, which does not identify the financial account, with the another cryptographic key and provides the mobile device with the encrypted payment number over another secure communications channel distinct from the one secure communications channel. The server receives from a payment terminal a payment completion request that includes the encrypted payment number decrypted with the one cryptographic key. The payment processing server queries the pending transaction database with the decrypted payment number to identify the associated financial account, and effects completion of the transaction using the identified financial account.

Cloud-based electronic payment processing

A message processing server includes a message processor and a database of multi-layer tokens. Each token in the database includes a plurality of encrypted data layers. The first layer includes the second layer and a first pointer. The second layer includes a second pointer. The message processor is configured to receive a first authorization message including a first cryptographic key and a second value; decrypt the first layer of one of the tokens with the first key; validate the first pointer by receiving confirmation of the first pointer pointing to a database entry comprising the second value; receive a second authorization message including a second cryptographic key and a third value; decrypt the second layer of the token with the second key; and validate the second pointer by receiving confirmation of the second pointer pointing to a database entry comprising a maximum data value not less than the third value.

Token-based system for securing and recovering data

An apparatus for use in a digital messaging system includes a storage device and a processor coupled to the storage device. The storage device storing software instructions for controlling the processor that when executed by the processor configured the processor to: generate a first message comprising a payload portion; encrypt the payload portion of the message; derive a first session key from a domain-specific key; and sign the message using the first session key.

Information masking using certificate authority

A message processing server includes a message processor and a database of multi-layer tokens. Each token in the database includes a plurality of encrypted data layers. The first layer includes a first data pointer. A primary layer includes the first layer and identifies a reference data value. The message processor receives from a communications device an authentication request identifying a first data value, validates the authentication request from the first data value and the reference data value configured in one of the multi-layer tokens, receives a first authorization message including a first cryptographic key, derives a first decrypted data layer from the first cryptographic key and the first encrypted data layer of the one multi-layer token, and validates the first data pointer by receiving confirmation of the first data pointer pointing to a database entry comprising a second data value less than the reference data value.

Validating encrypted data from a multi-layer token

The disclosed embodiments include methods and point-of-sale terminals for authenticating a user. The disclosed embodiments include, for example, a method for receiving, by one or more processors, authentication data from an authentication network, the authentication data including an authentication code identifying an authentication transaction associated with an authenticating partner system. The method may also include validating, by the one or more processors, the authentication data, the validating comprising comparing the authentication data with validation data corresponding to a prior authentication event associated with the user. The method may also include generating, by the one or more processors, validation information based on the validating, the validation information comprising a determination whether to validate the user for the authentication transaction. The method may also include providing, by the one or more processors, the validation information to the authentication network.

Systems and methods for authenticating user identities in networked computer systems

Growing community of inventors

Markham, Canada

Paul Mon-Wah Chan