专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11157905B2 Secure on device cardholder authentication using biometric data 有权
公开(公告)号：US11157905B2
公开(公告)日：2021-10-26
申请号：US14839234
申请日：2015-08-28
申请人： MasterCard International Incorporated
发明人： Ashfaq Kamal , Bob Reany , Gregory D. Williamson
IPC分类号： G06Q20/40 , G06Q20/32
摘要： A secure on-device cardholder authentication method and system. In an embodiment, a consumer's mobile device uses a mobile application to receive a user authentication request from an entity. A biometric data capture request is then transmitted to a biometric sensor of the mobile device, and a determination made that the mobile application is authorized to use an authenticator API. Next, the mobile device processor prompts the user to provide at least one form of biometric data in accordance with business rules, receives a user authentication response when the user provided biometric data matches locally stored biometric data, generates a positive user authentication response message, and transmits the positive user authentication response message to the entity.

2. 发明授权

US11100503B2 Systems and methods for use in managing digital identities 有权
公开(公告)号：US11100503B2
公开(公告)日：2021-08-24
申请号：US15891062
申请日：2018-02-07
申请人： MASTERCARD INTERNATIONAL INCORPORATED
发明人： Ranjita Shankar Iyer , Robert D. Reany , Ashfaq Kamal
IPC分类号： G06Q20/40 , G06Q20/38 , H04L9/32 , H04L9/08
摘要： Systems and methods are provided for managing digital identities associated with users. One exemplary method includes receiving, at a computing device, an encrypted message from a communication device associated with a user where the messaging includes a changed attribute for the user. The method also includes generating a hash of a digital identity for the user with the changed attribute, generating a hash of the digital identity of the user stored in a ledger data structure, and transmitting a request for the user to attest to the changed attribute when the generated hashes do not match. The method then further includes broadcasting a pending status of the digital identity of the user to a relying party for the digital identity, and storing a certification of the changed attribute, received from the relying party in response to the pending status, based on verification of the changed attribute by the relying party.

3. 发明申请

US20190320039A1 SYSTEMS AND METHODS FOR USE IN PROVIDING DIGITAL IDENTITIES 审中-公开
公开(公告)号：US20190320039A1
公开(公告)日：2019-10-17
申请号：US16382521
申请日：2019-04-12
申请人： MASTERCARD INTERNATIONAL INCORPORATED
发明人： Ashfaq Kamal
IPC分类号： H04L29/08 , H04L29/06
摘要： Systems, devices and methods are described herein for providing digital identities. One exemplary device includes a portable communication device having non-transitory computer executable native code, which configures the portable communication device to facilitate storing of a digital ID token for a user in memory of the portable communication device, as part of a setup procedure of the portable communication device associated with an initial startup of the portable communication device by the user or a startup of the device after a factory reset, whereby the digital ID token is provisioned to the portable communication device, either in dependence of or apart from any application downloaded to the communication device after the setup procedure.

4. 发明授权

US10404464B2 Method and system for secure FIDO development kit with embedded hardware 有权
公开(公告)号：US10404464B2
公开(公告)日：2019-09-03
申请号：US15242774
申请日：2016-08-22
申请人： MasterCard International Incorporated
发明人： Ashfaq Kamal
IPC分类号： H04L9/32
摘要： A method for registration of a biometric template in a computing device includes: storing, in a first memory of a computing device, a biometric module; receiving, by an input device of the computing device, biometric data of a user; generating, by the biometric module of the computing device, a template based on the biometric data; generating, by a generation module of the computing device, a cryptographic key pair comprised of a private key and a corresponding public key using an encryption algorithm; encrypting, by an encryption module of the computing device, the generated template using the private key; storing, in a second memory of the computing device, the private key, wherein the second memory is a trusted execution environment; and storing, in the computing device, the encrypted template.

5. 发明申请

US20190199714A1 Systems and Methods for Provisioning Biometric Image Templates to Devices for Use in User Authentication 审中-公开
公开(公告)号：US20190199714A1
公开(公告)日：2019-06-27
申请号：US15853648
申请日：2017-12-22
申请人： Mastercard International Incorporated
发明人： Ashfaq Kamal , Sumeet Bhatt , Robert D. Reany
IPC分类号： H04L29/06 , G06Q20/20
CPC分类号： H04L63/0861 , G06Q20/20 , H04L63/0823
摘要： Systems and methods are provided for use in provisioning a biometric image template of a user to a card device associated with the user. One exemplary method includes authenticating, by a card device, a portable communication device associated with the user based on a certificate associated with the portable communication device and receiving, at the card device, a biometric image of the user from the portable communication device after the portable communication device is authenticated. The method then includes storing, by the card device, the biometric image of the user in a memory of the card device as a biometric image template of the user, whereby the user may be authenticated, by the card device, based on a subsequent biometric image matching the biometric image template.

6. 发明申请

US20190089702A1 SYSTEMS AND METHODS FOR MANAGING DIGITAL IDENTITIES ASSOCIATED WITH MOBILE DEVICES 审中-公开
公开(公告)号：US20190089702A1
公开(公告)日：2019-03-21
申请号：US16134348
申请日：2018-09-18
申请人： MASTERCARD INTERNATIONAL INCORPORATED
发明人： Sumeet Bhatt , Ashfaq Kamal
IPC分类号： H04L29/06 , H04W12/06 , H04L9/08 , G06Q50/26
摘要： Systems and methods are provided for use in enabling, providing, and managing digital identities in association with mobile communication devices. One exemplary method includes capturing an image of a physical document comprising a biometric of a user associated with the physical document, and extracting the biometric from the image and converting it to a biometric template. The method also includes capturing a biometric of the user and comparing it to the biometric template. The method then includes, when the captured biometric matches the biometric template, transmitting a message to an identification provider comprising at least the image of the physical document and the biometric template, whereby the biometric template is verified against a repository, and binding data representative of the mobile communication device, a mobile application included therein, and the biometric template and/or the captured biometric of the user into a token.

7. 发明申请

US20160086172A1 TRUSTED EXECUTION ENVIRONMENT FOR TRANSPORT LAYER SECURITY KEY PAIR ASSOCIATED WITH ELECTRONIC COMMERCE AND CARD NOT PRESENT TRANSACTIONS 有权
标题翻译：运输层安全执行环境与电子商务相关的主要配对和不存在的交易
公开(公告)号：US20160086172A1
公开(公告)日：2016-03-24
申请号：US14492337
申请日：2014-09-22
申请人： MasterCard International Incorporated
发明人： Ashfaq Kamal , Gregory D. Williamson , Bob Reany
IPC分类号： G06Q20/38 , G06Q20/32 , G06Q20/26 , G06Q20/40 , G06Q20/24
CPC分类号： G06Q20/3829 , G06F21/62 , G06Q20/24 , G06Q20/26 , G06Q20/322 , G06Q20/3227 , G06Q20/40145
摘要： According to some embodiments, a requesting application executing on a mobile device may request a transport layer security key pair in connection with a payment transaction. Responsive to the request, a trusted execution environment client of the mobile device may route a request to a payment application executing in a secure trusted execution environment of the mobile device. It may then be arranged, within the secure trusted execution environment, to create the transport layer security key pair and provide key pair to the requesting application. Moreover, in some embodiments, the mobile device may transmit payment transaction information to an access control server and receive a request for biometric authentication. It may then be arranged for hardware within the mobile device to biometrically authenticate a user of the mobile device.
摘要翻译：根据一些实施例，在移动设备上执行的请求应用可以与支付交易相关联地请求传输层安全密钥对。响应于该请求，移动设备的可信赖执行环境客户端可以将请求路由到在移动设备的安全可信执行环境中执行的支付应用。然后，可以在安全的受信任的执行环境内设置创建传输层安全密钥对，并向请求应用提供密钥对。此外，在一些实施例中，移动设备可以向接入控制服务器发送支付交易信息，并且接收对生物认证的请求。然后可以将移动设备内的硬件设置为对移动设备的用户进行生物测量认证。

8. 发明申请

US20160005038A1 ENHANCED USER AUTHENTICATION PLATFORM 审中-公开
标题翻译：增强用户认证平台
公开(公告)号：US20160005038A1
公开(公告)日：2016-01-07
申请号：US14789361
申请日：2015-07-01
申请人： MasterCard International Incorporated
发明人： Ashfaq Kamal , Gregory D. Williamson
IPC分类号： G06Q20/40 , G06Q20/32
CPC分类号： G06Q20/405 , G06Q20/3223 , G06Q20/40 , G09C1/00
摘要： Systems and methods for multi-factor user authentication techniques usable in transactions. In some embodiments, an authentication platform receives a request to authenticate a user in conjunction with an online transaction and determines an authentication rule. The authentication platform then transmits an authentication request to the user's mobile device, receives authentication response data from the user mobile device, and authenticates the user in conjunction with the transaction when the authentication response data matches stored user authentication data. An authentication message is then transmitted to the user's mobile device. In some embodiments, the authentication response data is biometric data of the user obtained from at least one authenticator of the user's mobile device.
摘要翻译：用于交易的多因素用户认证技术的系统和方法。在一些实施例中，认证平台接收与在线事务一起认证用户的请求，并确定认证规则。然后，认证平台向用户的移动设备发送认证请求，从用户移动设备接收认证响应数据，并且当认证响应数据与存储的用户认证数据匹配时，结合事务认证用户。然后将认证消息发送到用户的移动设备。在一些实施例中，认证响应数据是从用户的移动设备的至少一个认证器获得的用户的生物测定数据。

9. 发明授权

US11405782B2 Methods and systems for securing and utilizing a personal data store on a mobile device 有权
公开(公告)号：US11405782B2
公开(公告)日：2022-08-02
申请号：US16925688
申请日：2020-07-10
申请人： Mastercard International Incorporated
发明人： Ashfaq Kamal
IPC分类号： H04W12/06 , G06K19/077 , G06Q20/32 , H04L9/08 , H04W8/20 , H04W12/30
摘要： Methods and apparatus for securing access to an encrypted personal data store on a mobile device. In some embodiments, a universal integrated circuit card (UICC) processor receives, from a mobile device processor of a mobile device having an encrypted Personal Data Store (PDS), a PDS access request associated with a mobile application, then determines that access control rules are stored in at least one access control rules database and transmits to the mobile device processor, the access control rules governing access to the data in the encrypted PDS. The process also includes the UICC processor receiving a request for a symmetric shared secret and transmitting the symmetric shared secret to the mobile device processor for use in accessing the PID of the user stored in the encrypted PDS in accordance with the access control rules.

10. 发明授权

US11238139B2 Methods for securely storing sensitive data on mobile device 有权
公开(公告)号：US11238139B2
公开(公告)日：2022-02-01
申请号：US16751534
申请日：2020-01-24
申请人： Mastercard International Incorporated
发明人： Ashfaq Kamal
IPC分类号： H04L29/06 , G06F21/14 , H04L9/32 , H04L9/06 , H04L9/08 , H04W12/06 , H04W12/069 , H04W4/80 , G06F8/61 , G06F8/71 , G06F21/53 , G06F21/56 , G06F21/62 , H04L9/30 , H04W88/02
摘要： Methods and systems for protecting sensitive data and applications on a mobile device. In an embodiment, a mobile device processor of a mobile device downloads, from a digital wallet server computer, a mobile wallet application including a white box software development kit (SDK) which includes code protection processes, then obfuscates, by running the code protection processes of the white box SDK, consumer financial data and consumer authentication data and stores the obfuscated consumer financial data and consumer authentication data in a regular memory of the mobile device. The process also includes protecting, by the mobile device processor running the white box SDK, sensitive applications stored in the regular memory which execute during a transaction from attack, and re-obfuscating, by the mobile device processor, at least one of the consumer financial data and the consumer authentication data according to a predetermined time interval.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式