Mastercard International

A computer-implemented method of establishing a secure token in a computing device of a cardholder having a secure computing environment and a general computing environment is described. A wallet service provider for the cardholder receives a request to tokenise a transaction credential for the cardholder for the cardholder computing device. The wallet service provider generates the secure token from the transaction credential according to a processing mechanism using an initialisation element. The wallet service provider then provisions the secure token to the secure computing environment of the computing device of the cardholder. A computing device adapted to perform such a method is also described.

There is provided a payment network biometric authentication service for challenge-response authentication of a cardholder during a payment transaction. The service comprises: one or more processors; a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to: receive notification of a challenge-response authentication request; send an authentication enabler to a challenge-response authentication server of a merchant; receive a challenge request for challenge-response authentication of the cardholder using the authentication enabler; perform biometric authentication of the cardholder to generate an authentication result; send the authentication result to an issuer access control server to decide whether to proceed with the payment transaction based on the authentication result; and send the authentication result to the merchant to approve or decline the payment transaction based on the authentication result. There is further provided a computer-implemented method, wherein the method is performed at a payment network biometric authentication service, for challenge-response authentication of a cardholder during a payment transaction. There is further provided a computer-implemented method, wherein the method is performed at a payment network biometric authentication service, for registration of a passkey for biometric authentication of a cardholder during a payment transaction. Further provided are corresponding computer program products.

A computer-implemented method of providing a transaction proof for a transaction is described. This is performed in a payment device. A payor credential for the transaction is established. This payor credential is provided as ciphertext input to a format preserving encryption mechanism having a cryptographic key and a tweak. Transaction details for the transaction are provided as the tweak. The output of the format preserving encryption mechanism is obtained as the transaction proof. A computing device adapted to perform such a method is also described.

Systems and methods are disclosed for bulk payment processing and for execution by a service provider system. One or more transaction files may be received from one or more financial institution systems, and the transaction file may be processed to determine a first set of instructions. This first set of instructions may then be sent to a settlement agent system, and a rejection message may be received in return that at least one instruction cannot be executed. In embodiments of the invention, this at least one instruction may be removed to give a second set of instructions which is automatically resent to the settlement agent system.

A computer-implemented method is disclosed for handling sensitive data in a network comprising multiple security zones. The method includes sharing a data cleansing ruleset among a plurality of servers that are each within a respective security zone and using a multi-party cryptographic protocol that each of the plurality of servers participates in, to obtain a shared secret. Each server individually cleanses a respective dataset containing sensitive data using the data cleansing ruleset and then hashes the resulting cleansed dataset with a hash function using the shared secret as a salt. This produces a resultant dataset containing hashed representations of the original sensitive data, meaning that the dataset produced by each server can be collated to form a composite dataset without breaching data security requirements. A data operation can then be performed on the composite dataset.

A method 400 of storing a trained model using a quantum system comprises receiving 404 at least one parameter set representative of the trained model, wherein the at least one parameter set comprises one or more parameters, generating 406 at least one entangled state based on the at least one parameter set and storing 408 the at least one entangled state in a quantum system. Measurement of the entangled state enables at least one parameter of the at least one parameter set to be determined.

Computer-implemented methods and systems are provided for securing digital signatures on a computational network to protect against unauthorised access, for example, by a quantum computer or similar system.

A method of payment for charging of a battery of a vehicle is described. A charging connection between the vehicle and a charging station is established. A communication channel between a vehicle payment module of the vehicle and a terminal module of the charging station is established over the charging connection. The method then comprises selecting, at the vehicle, a fleet card for payment and preparing a charging payment transaction, using the fleet card, for authentication. The charging payment transaction is then provided by the vehicle payment module, for authorisation to the terminal module of the charging station. The terminal module then provides the charging payment transaction to a transaction system for authorisation. The method further comprises providing at the vehicle a fleet card data structure for the selected fleet card. The fleet card data structure comprises a set of required data elements and is adapted to hold metadata for each of the required data elements and values for each of the required data elements. The fleet card data structure with the charging payment transaction is then provided by the vehicle to the transaction system for authorisation of the charging payment transaction, where the fleet card data structure is populated at a plurality of transaction stages from a plurality of data sources.

A method of providing a shared service in a managed computing environment (30) is described. A connection to the shared service is provided in the managed computing environment (30), and a binding operation is also provided that allows a client application to bind to the connection to the shared service. On a client request to connect to the shared service, access is provided to the connection to the shared service in a discrete computing environment (38). This discrete computing environment comprises a first container (381) containing the connection to the shared service and a second container (382) configured for connection to the client application for accessing the instance of the shared service.

The present disclosure relates to a computer-implemented method (300), comprising: retrieving (302) data from a first dataset, wherein the first dataset comprises cross-border transaction data identifying transactions carried out using one or more payment cards, wherein the first dataset comprises data at a first level of time granularity; retrieving (304) data from a second dataset, wherein the second dataset comprises data identifying a total value of tourism-related transactions within a particular region, wherein the second dataset comprises data at a second level of time granularity that is lower than the first level of time granularity; and generating (306) a third dataset comprising data at the first level of time granularity by adjusting the data from the first dataset using the data from the second dataset.