Jim Barney Et Al.

Fusionpipe Software Solutions Inc.

Peter Tuan Luong

Ildar Muslukhov

Hassan Khosravi

Andrew Csinger

A transaction authorization apparatus includes a processor in communication with a communications interface. The processor is configured to receive a request for a transaction requested by a user with whom a plurality of user devices are associated, to obtain respective transaction measurements from at least some available devices from among the plurality of user devices, and to confirm approval of the request for the transaction in response to confirmation that the transaction measurements satisfy a multi-device authorization policy associated with the transaction.

Enhanced security authentication methods, systems and media

A method for decoupling user authentication and data encryption on mobile devices includes generating an encryption key ('EK') for encrypting data and a key encryption key ('KEK') for encrypting the EK, obtaining an encrypted EK by encrypting the EK using the KEK, storing the encrypted EK on a data container device (&#x201c;DCD&#x201d;), and storing the KEK on a key vault device (&#x201c;KVD&#x201d;) that is distinct from the DCD. Neither the EK nor KEK are generated using a user authentication secret as a seed. The DCD may fetch the KEK from the KVD as desired to decrypt the EK and to encrypt and decrypt data stored on the DCD. Examples of the DCD include a memory stick, smartphone, or tablet computer, while examples of the KVD include a dongle, smartphone, or tablet computer.

Growing community of inventors

Vancouver, Canada

Peter Tuan Luong