Merunetworks, Inc.

Fortinet, Inc.

Ondot Systems Inc.

Ondot System, Inc.

Bytemobile, Inc.

Menu Networks

Vaduvur Bharghavan

Sung-Wook Han

Berend Dunsbergen

Joseph Alan Epstein

Mohan Ram

Saravanan Balasubramanian

Jari Malinen

Rajendran Venugopalachary

Senthil Palanisamy

Rachna Ahlawat

Zhiqiang Zhang

Rajinder Singh

Kannan Konath

Shishir Varma

Sandeep Gilotra

Jason Fieldman

Anil Kaushik

Saravanan Balasubramaniyan

Srinivas Sivaprakasam

Rahul Paul

Srinath Sarang

Hao Yang

Songwu Lu

Martin Ostrowski

Ramachandran Minakshi Sundaram

Aurovinda Gangam

Upamanyu Madhow

Kannan Ramchandran

Qi Chen

Srivatsan Sankaranarayanan

Sungwon Ha

Sung-wook Han

Sirivatsan Sankaranarayanan

Tae-eun Kim

Starsky Wong

Sharanya Srinivasan

Vinay Sagar

Dhaval Deshmukh

Mohan Ram Bhadravati

Mohamad Thaga

Ho Yin Starsky Wong

Rajesh Gurumurthy

Sungwook Han

Govardan Prasad

Bharanidharan Gunasekaran

Pawan Kumar Maram

Zhiling Liu

Kun Qian

Brett Schavey

Ajay Kunnath

Rishikesh Basu

Rajendran Chary

Vijaykarthik Rajanarayanan

Updates to a payment card of the specific card user that will affect subsequent payments to the COF merchants has occurred are detected based on receiving a notification from an issuer processor. In response, payment credentials can be automatically updated with the COF merchants for the specific card user.

Injecting user control for card-on-file merchant data and implicitly-identified recurring payment transaction parameters between acquirer processors and issuer processors over data communication networks

Logo candidates for a specific ISO data can be identified from external resources based on the enriched merchant data. Low quality images of the logo candidates are filtered out with image analysis including entropy ratio evaluations of the logo candidates. Also, the logo candidates are processed with high quality filtering including classification of the logo candidates with a deep learning classifier for distinguishing logos from non-logos. A logo from the logo candidates is selected to associate with the ISO data packets. A display having the selected logo associated with a transaction of the ISO data packets can be generated for display to users.

Merchant logo detection artificial intelligence (AI) for injecting user control to ISO back-end transaction approvals between acquirer processors and issuer processors over data communication networks

A method and system for processing a payment authorization request associated with a payment card is provided. The method comprises: receiving by a server location, updates from a user device based on at least one criterion for location updates from the user device; determining by the server, a cardholder's location based on the location updates; determining by the server, a transaction location based on analysis of a payment authorization request associated with a transaction; generating by the server, at least one of a transaction authorization approval and a transaction authorization denial in connection with the payment authorization request based on selectively matching the transaction location with the cardholder's location at the time of the transaction.

System and method for authorizing a transaction based on dynamic location updates from a user device

While mobile device location remains, private, user transaction controls are applied to a specific authorization request. The user transaction controls are pre-configured by the user of the mobile account holder device and identified by the enriched merchant data. Location algorithms predict transaction locations used to obtain enriched merchant data responsive to location privacy mode. Responsive to the user transaction controls, a fraud recommendation response is sent to the approval system, in real time with the transaction. The fraud recommendation response prevents a false negative by using an enriched merchant location rather than the raw merchant location.

Enriching transaction request data for maintaining location privacy while improving fraud prevention systems on a data communication network with user controls injected to back-end transaction approval requests in real-time with transactions

A method for managing a payment card is disclosed. The method comprises allowing a first party with access rights to a payment card managed by a card management system to designate at least one second party to whom access rights to said payment card is to be granted; and allowing said at least on second party to have access rights to said payment card by said card management system; wherein a card issuer associated with the payment card is not aware of the existence of the at least one second party and hence cannot exert any control over the access rights of said at least one second party.

Delegate cards

Enforcing payment card policies using a financial institution agent coupled to a payment processing network. The advisory device intercepts messages directed to an authorization element at an authorizing bank, modifies the intercepted messages in response to a set of financial policy rules, and forwards the intercepted messages to the authorization element. The authorization element responds to any modifications made by the financial institution agent, and issues a grant or a denial of of authorization in response. The financial policy rules include a set of policy limits for use of the payment card, responsive to card usage type, merchant type and location, amount per transaction (or for a selected duration), number of transactions, and combinations thereof Financial policy rules can include side effects, including notifications or two-step authorization (with the cardholder or a monitoring party), transaction records, and combinations thereof.

Payment card policy enforcement

Embodiments of the present invention provide a system and method for an access point providing client to point-of-sale communication over a network, comprising: receiving credentials from the point-of-sale; sending at least one beacon message; receiving a probe request from a client; sending a probe response to the client; authenticating a connection with the client; exchanging capabilities with the client; performing a security handshake with the client; assigning at least one dynamic IP address to the client; and establishing an https session between the client and the point-of-sale over the network.

System and method for secure communication for cashless transactions

Data distribution between mobile stations and external data paths is assigned to a new set of devices, distribution points. Each distribution point is independently coupled to mobile stations, also assigned to access points. Control elements operate to control the distribution points separately from the access points. Each access point maintains a substantially stateless link with each distribution point for which the two share a mobile station. Access points might exchange data with any one or more distribution points concurrently. Access points thus obtain greater bandwidth connectivity to external data paths. Mobile stations transfer between access points and transfer between distribution points independently. This has the effect that bandwidth connectivity between distribution points and external data paths have no particular requirement for VLAN separation. Mobile stations may roam among multiple Internet protocol subnets.

Multitier wireless data distribution

A technique for providing per station control of multiple stations in a wireless network across multiple access points. A look-up table that assigns a station connected to the access point and at least one communication parameter to each of a plurality of persistent, uniquely-assigned BSSIDs (Basic Service Set Identifiers) is stored. An access point responds to messages addressed one of the plurality of persistent, uniquely-assigned BSSIDs and ignores messages addressed to other BSSIDs. Persistence of the BSSID allows the controller to maintain individual control over each station after moving to a second access point of the plurality of access points. A frame comprising the plurality of BSSIDs corresponding to each connected station aggregated into the frame is generated. The frame is transmitted to the plurality of stations. Responsive to a station of the plurality of stations being handed-off to a different access point, a uniquely-assigned BSSID corresponding to the station is deleted from the look-up table.

Aggregated beacons for per station control of multiple stations across multiple access points in a wireless communication network

AP's associated with a communication network and any wireless devices desiring contact, operated according to a protocol in which each wireless device selects AP's with which to communicate. A system coordinator causes the AP's to operate so as to guide each wireless device to an AP selected by the system coordinator. This has the effect that, notwithstanding that the protocol involves having the wireless device make the selection of AP, functionally, the AP's make the selection for it. In a 1st technique, multiple AP's share an identifier, with the system coordinator directing one particular AP to respond to the wireless device, thus appearing to wireless devices as a 'personal cell'. In a 2nd technique, AP's each maintain identifiers substantially unique to each wireless device, with the system coordinator directing only one particular AP to maintain any particular wireless device's identifier, thus appearing to wireless devices as a 'personal AP'.

Seamless mobility in wireless networks

Uplink medium access control on per-wireless device level for a specific user. An access point sends a beacon frame to a wireless device. The beacon frame includes a BSSID that is unique to the wireless device. The beacon frame also includes embedded uplink configurations specifying uplink medium access for the wireless device. In one embodiment, a controller recognizes a device or user associated with the device, and sends corresponding uplink configurations for embedding in a subsequent beacon frame.

Per user uplink medium access control on a Wi-Fi communication network

A method for a server performing a wireless payment transaction is disclosed. The method comprises providing a server web page or native application including options for a user selecting a role as payer or payee; requesting information from the payee including a transaction ID provided by the server; requesting information from the payer including the transaction ID; initiating an authorization of the transaction on a credit or debit account of the payer; initiating a transaction to credit the payee's account; and completing the transaction with the payer by initiating the offline clearing of the transaction.

System and method for cashless peer-to-peer payment

Embodiments of the present invention provide systems and methods for generating policy-based transaction alerts. In accordance with the systems and methods, an alert generation engine transparently detects ongoing transactions without participating in the transaction path, and generates policy-based alerts.

Transparently reconstructing sniffed network traffic over a back-end data communications network to reconstruct payment card transactions for generating user notifications during transactions

A method and system for processing a payment authorization request associated with a payment card is provided. The method comprises determining a cardholder's context based on transmissions received from a user device associated with a cardholder using the payment card; determining a transaction context based on analysis of the payment authorization request; determining at least one transaction authorization preference associated with the payment card; performing a transaction authorization process to generate a transaction authorization response based on the at least one transaction authorization preference wherein information in the transaction context is used as a hint to selectively guide application of the transaction authorization preference.

System and method for using cardholder context and preferences in transaction authorization

A system and method for providing a seamless transition between access points for mobile devices. The method comprises associating a unique identifier for a plurality of mobile stations with a unique identifier for a first network in an acknowledgment table, then, upon receiving a frame from a mobile station, acknowledging the reception of the frame if the frame includes the unique identifier for the mobile station and the unique identifier for the network. The transfer of operation between access points is effectuated through the use of control circuitry which transfers portions of the contents of the acknowledgement table between various access points. This has the effect that the mobile stations does not sense a change in access points and thus the roaming from a first access point to a second access point is seamless.

Seamless roaming in wireless networks

Growing community of inventors

Morgan Hill, CA, United States of America

Vaduvur Bharghavan