Jpmorgan Chase Bank, N.a.

Reetu Raj Bok

Jasbir Banga

Howard Spector

Mizan Miah

Suresh Madhavan

Sandeep Reddy Banala

Ryan S Yoder

William H Johnston

Bipin More

Dipti Ahuja

Scott R Moser

Neill Clayton-smith

Neeraj Tati

Valanka Fernandes

Muralidhar Somapalli

A method for generating keys in a multi-cloud environment that minimizes the impact of a breach may include: generating and storing a first key encryption key (KEK) in a first environment key management service (KMS); generating a first data encryption key (DEK) using the first KMS; generating a second DEK for a second environment using the first KMS; encrypting the first DEK with the first KEK and the second DEK with the first KEK; storing the encrypted first DEK and the encrypted second DEK in a database; generating a second KEK and storing the second KEK in a second environment KMS; encrypting the first DEK with the second KEK and the second DEK with the second KEK; and storing the encrypted first DEK and the encrypted second DEK in the database.

Systems and methods for minimizing impact of breach of encryption and signing keys in multi-cloud environments

A method for verifying origin of request for payments may include a financial institution computer program: receiving a request for a payment URL from a merchant, the payment URL provided for a transaction with a customer; generating the payment URL, wherein the payment URL comprises a pointer to a network location for the financial institution; providing the payment URL to a customer electronic device; receiving, from the customer electronic device and at a browsed URL, a stored or pinned certificate of domain for the payment URL; (5) comparing the stored or pinned certificate of domain for the payment URL to a certificate of domain for the browsed URL; presenting a payment page in response to a match; and returning an error in response to a mismatch.

Systems and methods of verifying origin of request for payment

A method for extended authentication sessions on an electronic device may include an authentication service computer program executed by an authentication service electronic device: receiving a customer identifier for a customer and a unique identifier for a mobile electronic device; authenticating the customer based on the customer identifier and the unique identifier for the mobile electronic device; setting a device cookie that is specific to the mobile electronic device on the mobile electronic device; and providing the device cookie and a client secret to an OAuth services backend, wherein the OAuth services backend validates the customer identifier and client secret and generates a first token and a second token, the first token having an expiration that is shorter than that of the second token. The mobile electronic device is configured to receive and store the first token and the second token.

Systems and methods for providing extended authentication sessions on point of sale devices

An embodiment of the present invention is directed to providing third party certificate management for native mobile apps or IoT apps. An embodiment of the present invention is directed to performing vendor certificate pinning for trusted communications in native mobile apps without having to control vendor certificate lifecycle management. With an embodiment of the present invention, downloaded certificates may be protected by encryption, anti-tampering protection, etc.

Third party certificate management for native mobile apps and internet of things apps

Growing community of inventors

Philadelphia, PA, United States of America

Reetu Raj Bok