Mastercard International Patente

There is provided a payment network biometric authentication service for challenge-response authentication of a cardholder during a payment transaction. The service comprises: one or more processors; a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to: receive notification of a challenge-response authentication request; send an authentication enabler to a challenge-response authentication server of a merchant; receive a challenge request for challenge-response authentication of the cardholder using the authentication enabler; perform biometric authentication of the cardholder to generate an authentication result; send the authentication result to an issuer access control server to decide whether to proceed with the payment transaction based on the authentication result; and send the authentication result to the merchant to approve or decline the payment transaction based on the authentication result. There is further provided a computer-implemented method, wherein the method is performed at a payment network biometric authentication service, for challenge-response authentication of a cardholder during a payment transaction. There is further provided a computer-implemented method, wherein the method is performed at a payment network biometric authentication service, for registration of a passkey for biometric authentication of a cardholder during a payment transaction. Further provided are corresponding computer program products.

A computer-implemented method of providing a transaction proof for a transaction is described. This is performed in a payment device. A payor credential for the transaction is established. This payor credential is provided as ciphertext input to a format preserving encryption mechanism having a cryptographic key and a tweak. Transaction details for the transaction are provided as the tweak. The output of the format preserving encryption mechanism is obtained as the transaction proof. A computing device adapted to perform such a method is also described.

A computer-implemented method of establishing a secure token in a computing device of a cardholder having a secure computing environment and a general computing environment is described. A wallet service provider for the cardholder receives a request to tokenise a transaction credential for the cardholder for the cardholder computing device. The wallet service provider generates the secure token from the transaction credential according to a processing mechanism using an initialisation element. The wallet service provider then provisions the secure token to the secure computing environment of the computing device of the cardholder. A computing device adapted to perform such a method is also described.

Systems and methods are disclosed for bulk payment processing and for execution by a service provider system. One or more transaction files may be received from one or more financial institution systems, and the transaction file may be processed to determine a first set of instructions. This first set of instructions may then be sent to a settlement agent system, and a rejection message may be received in return that at least one instruction cannot be executed. In embodiments of the invention, this at least one instruction may be removed to give a second set of instructions which is automatically resent to the settlement agent system.

A computer-implemented method is disclosed for handling sensitive data in a network comprising multiple security zones. The method includes sharing a data cleansing ruleset among a plurality of servers that are each within a respective security zone and using a multi-party cryptographic protocol that each of the plurality of servers participates in, to obtain a shared secret. Each server individually cleanses a respective dataset containing sensitive data using the data cleansing ruleset and then hashes the resulting cleansed dataset with a hash function using the shared secret as a salt. This produces a resultant dataset containing hashed representations of the original sensitive data, meaning that the dataset produced by each server can be collated to form a composite dataset without breaching data security requirements. A data operation can then be performed on the composite dataset.

A method 400 of storing a trained model using a quantum system comprises receiving 404 at least one parameter set representative of the trained model, wherein the at least one parameter set comprises one or more parameters, generating 406 at least one entangled state based on the at least one parameter set and storing 408 the at least one entangled state in a quantum system. Measurement of the entangled state enables at least one parameter of the at least one parameter set to be determined.

Computer-implemented methods and systems are provided for securing digital signatures on a computational network to protect against unauthorised access, for example, by a quantum computer or similar system.

A method of payment for charging of a battery of a vehicle is described. A charging connection between the vehicle and a charging station is established. A communication channel between a vehicle payment module of the vehicle and a terminal module of the charging station is established over the charging connection. The method then comprises selecting, at the vehicle, a fleet card for payment and preparing a charging payment transaction, using the fleet card, for authentication. The charging payment transaction is then provided by the vehicle payment module, for authorisation to the terminal module of the charging station. The terminal module then provides the charging payment transaction to a transaction system for authorisation. The method further comprises providing at the vehicle a fleet card data structure for the selected fleet card. The fleet card data structure comprises a set of required data elements and is adapted to hold metadata for each of the required data elements and values for each of the required data elements. The fleet card data structure with the charging payment transaction is then provided by the vehicle to the transaction system for authorisation of the charging payment transaction, where the fleet card data structure is populated at a plurality of transaction stages from a plurality of data sources.

A method of providing a shared service in a managed computing environment (30) is described. A connection to the shared service is provided in the managed computing environment (30), and a binding operation is also provided that allows a client application to bind to the connection to the shared service. On a client request to connect to the shared service, access is provided to the connection to the shared service in a discrete computing environment (38). This discrete computing environment comprises a first container (381) containing the connection to the shared service and a second container (382) configured for connection to the client application for accessing the instance of the shared service.

A system for extracting structured data comprises a processor and a memory, wherein the processor processes documents from a provider, using a domain specific grammar structure for the provider and uses rules data based on the grammar structure for the processing and decomposition of a target data provided by the provider. The processing and decomposition of the target data extracts selected information from the target data on the basis of the rules, generates a results data for further processing and/or analysis. A corresponding method of structured data extraction is also disclosed.

The present disclosure relates to a computer-implemented method (300), comprising: retrieving (302) data from a first dataset, wherein the first dataset comprises cross-border transaction data identifying transactions carried out using one or more payment cards, wherein the first dataset comprises data at a first level of time granularity; retrieving (304) data from a second dataset, wherein the second dataset comprises data identifying a total value of tourism-related transactions within a particular region, wherein the second dataset comprises data at a second level of time granularity that is lower than the first level of time granularity; and generating (306) a third dataset comprising data at the first level of time granularity by adjusting the data from the first dataset using the data from the second dataset.

The present disclosure relates to a method for linking consumer payment credentials. The method includes storing, in a database, a first account identifier and a second account identifier, wherein the first account identifier is linked to the second account identifier in the database; receiving a first presentment request, wherein the first presentment request includes a first merchant identifier and the first account identifier; receiving a subsequent first presentment request, wherein the subsequent first presentment request includes a second merchant identifier and the second account identifier; determining, via the database, the first account identifier and the second account identifier are linked; generating a transaction link identifier, wherein the transaction link identifier identifies a link between the first presentment request and the subsequent first presentment request; and sending the transaction link identifier to an acquirer

Aspects of the present disclosure relate to a method for processing requests in a distributed computing system. The method comprises receiving from a requestor and at a first computing node of the distributed computing system, a processing request, where the processing request requires the use of a credential. The method further comprises determining, at the first computing node of the distributed computing system, that the processing request is to be performed at a second computing node of the distributed computing system, and establishing, at the first computing node of the distributed computing system, first and second routing information associated with performing the processing the request. The method then comprises routing the processing request and the second routing information to the second computing node of the distributed computing system, using the first routing information, and performing, at the second computing node of the distributed computing system, the processing request using the credential and the second routing information

A method of processing credentials in a distributed system comprising a plurality of credential processing nodes is described. Each of the plurality of credential processing nodes is adapted to perform credential processing in response to credential processing requests. Individual nodes may use at least a first credential processing type or a second credential processing type. The method has the following elements. It is established that a credential processing request is to be directed to a new credential processing node for the associated credential. It is determined whether stakeholders for the credential support the second credential processing type. It is also determined whether the new credential processing node supports the second credential processing type. If both the stakeholders for the credential and the new credential processing node support the second credential processing type, the new credential processing node processes the credential using the second credential processing type. Otherwise, the new credential processing node processes the credential using the first credential processing type. A corresponding distributed processing system adapted for the processing of credentials is also described.

There is provided a mobile computing device for enabling a user to withdraw cash at a cash withdrawal device, the mobile computing device comprising: user input means for enabling the user to provide user input to the mobile computing device; a digital wallet comprising a tokenised payment application and an additional data extension; wherein the digital wallet is configured to generate a cash withdrawal request comprising cash withdrawal data based on the user input; wherein the tokenised payment application is configured to communicate with the cash withdrawal device to authenticate the cash withdrawal request; and wherein the additional data extension is configured to send the cash withdrawal data to the cash withdrawal device; wherein an issuer authorisation request can be generated for approval by an issuer associated with the user based on the cash withdrawal request, and wherein the cash withdrawal device is instructed to dispense cash based on approval of the issuer authorisation request. According to a second aspect of the present disclosure, there is provided a cash withdrawal device for enabling a user to withdraw cash using a mobile computing device.

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …