International Business Machines Corporation

Visa International Service Association

Robert Bryant Chumbley

Thomas Alexander Bellwood

Jacob Daniel Eisinger

Matthew Francis Rutkowski

Travis M Grigsby

Jennifer M Strachan

Alexander Tarpinian

Merle Douglas Sterling

Matt Francis Rutkowski

Richard Barnett Allen

Rohan U Mandrekar

Robert Glenn Deen

Christopher M Laffoon

Julian A Cerruti

Jennifer L McNabb

Embodiments of the invention are directed to systems and methods for securely and efficiently updating account information across resource providers. Embodiments of the invention provide a method for managing account data that is an improvement in both speed and security over prior methods used by account data management systems. According to embodiments of the invention, account data is linked to resource provider specific tokens stored and managed by a digital wallet provider. Resource provider specific tokens may be stored by resource providers to conduct future transactions, also including recurring or automatic transactions. To manage the resource provider specific tokens, a user may simply send requests to the digital wallet provider using a single interface displayed on a user device rather than by logging into accounts for numerous resource providers and continuously entering updated account data.

Digital wallet merchant-specific virtual payment accounts

Embodiments of the invention provide improved account authentication using public-private key cryptography instead of passwords. Instead of registering a password and using that password to login to an account, an authentication server of an account provider registers a public key received from a user device. To authenticate the user device for logging into an account, the authentication server generates a challenge and encrypts using the registered public key. The encrypted challenge is sent to the user device, which can decrypt the challenge using the private key corresponding to the registered public key. The decrypted challenge is used for authentication instead of using a password. The private key corresponding to the public key is securely stored and not revealed to the authentication server.

Public-private key pair account login and key manager

An indication initiated by a user within a first local user application that specifies user-selected data sharable by the first local user application is received at an operating system of a first computing device used by the user. A determination is made as to whether any other user applications share data compatibility with at least one portion of the specified user-selected data. In response to determining that at least one other user application shares the data compatibility with the at least one portion of the specified user-selected data, a data share indication to the at least one other user application is configured.

User-specified user application data sharing

Embodiments of the invention provide methods and systems for password management using public-private key cryptography. A user device generates a public-private key pair including a public key and a private key and registers the public key with a remote password management server. Account names and passwords can be stored at the password management server in association with the public key. To retrieve the passwords, the user device sends a request to the password management server including the public key. The password management server determines the password from the stored passwords and encrypts it using the public key. The encrypted password is sent to the user device, which can decrypt the encrypted password using the private key corresponding to the public key. The user device can then use the account name and password can to obtain account information from an account provider.

Public-private key pair protected password manager

Provided are techniques for the distribution and control of digital content such that Quality of Experience (QoE) is maintained. Content is protected from when the content is encrypted to when it is used. To ensure the QoE of particular content, a content owner embeds a list of required or preferred components that must be employed to render the content. The content owner's list of required or preferred components specifies specific components 'trusted' to correctly process the content. The specified chain of preferred components is compared to possible devices in the system that processes the content. If there are multiple acceptable devices for a specific link, a preference system is employed to determine the device that executed the particular part of the chain. The preference system is based upon a number of factors, such as, but not limited to, performance characteristics, user preferences, expected stability, power requirements and system preferences.

Content protection continuity through authorized chains of components

Methods and systems may provide for identifying a web application having a primary resource that references a secondary resource, wherein the primary resource contains a version identifier of the primary resource and a version identifier of the secondary resource. Additionally, a cached version of the primary resource and a cached version of the secondary resource may be created on a mobile device, and the version identifier of the primary resource may be used to determine whether the secondary resource is stale. In one example, it may be determined that staleness checking has been disabled in the secondary resource. Moreover, if the primary resource does not contain the version identifiers, cloud caching may be used.

Fast mobile web applications using cloud caching

Systems, methods, and articles of manufacture for facilitating workflow control for a document. In one embodiment, a portion of computer program source code is associated with a workflow. The computer program is monitored for reference to or by the portion of the computer program source code. In response to a reference to or by the computer program source code, the workflow is fired off.

Associating workflows with code sections in a document control system

Provided is techniques for the distribution and control of digital content such that Quality of Experience (QoE) is maintained. Content is protected from when the content is encrypted to when it is used. To ensure the QoE of particular content, a content owner embeds a list of required or preferred components that must be employed to render the content. The content owner's list of required or preferred components specifies specific components 'trusted' to correctly process the content. The specified chain of preferred components is compared to possible devices in the system that processes the content. If there are multiple acceptable devices for a specific link, a preference system is employed to determine the device that executed the particular part of the chain. The preference system is based upon a number of factors, such as, but not limited to, performance characteristics, user preferences, expected stability, power requirements and system preferences.

Provided are techniques for providing a home or business security system that relies upon data encryption for both communication and the storage of content. The disclosed technology incorporates all the devices necessary for a comprehensive security system, including, but not limited to, controllers, monitors, alarms and communication media. The system may include an unlimited number of devices and, further, individual devices may be added and removed as needed. Users may define and change the boundaries of a security system or, in other words, decide what devices to include or not include in such a system. A defined boundary does not need to be confined to a single location. In one embodiment, the claimed subject matter incorporates xCP based broadcast encryption technology.

Broadcast encryption based security system

Provided is a method for rendering media content wherein a request to render a first media content stored in a first partition is received, wherein the first partition stores the first and a second media content; the media content is correlated to a first management key block (MKB), binding ID (IDb) and authorization table (AT); the first MKB, IDb and AT are compared to a current MKB, IDb and AT; and if any of the first MKB, IDb or AT do not correspond to the current MKB, IDb or AT, respectively, generating a second partition by rebinding the first media content with respect to the current MKB, IDb and AT to generate a title key; and associating the first media content, the current MKB, IDb, AT and title key with the second partition, wherein the second media content remains associated with the first MKB, IDb, AT and partition.

Efficient rebinding of partitioned content encrypted using broadcast encryption

Provided is a method for the distribution and control of digital content such that Quality of Experience (QoE) is maintained. Content is protected from when the content is encrypted to when it is used. To ensure the QoE of particular content, a content owner embeds a list of required or preferred components that must be employed to render the content. The content owner's list of required or preferred components specifies specific components 'trusted' to correctly process the content. The specified chain of preferred components is compared to possible devices in the system that processes the content. If there are multiple acceptable devices for a specific link, a preference system is employed to determine the device that executed the particular part of the chain. The preference system is based upon a number of factors, such as, but not limited to, performance characteristics, user preferences, expected stability, power requirements and system preferences.

Growing community of inventors

Austin, TX, United States of America

Robert Bryant Chumbley