Systems and methods for EMV terminal device testing using EMV card emulation

    公开(公告)号:US11017380B1

    公开(公告)日:2021-05-25

    申请号:US16523460

    申请日:2019-07-26

    Applicant: Stripe, Inc.

    Abstract: A method and apparatus for EMV terminal device testing using a simulation of a plurality of EMV cards when interacting with an EMV terminal device emulator are described. The method may include establishing, by an EMV card emulator, an interface with the EMV terminal device emulator for the exchange of EMV card present transaction communications between the EMV card emulator and the EMV terminal device emulator. Furthermore, for each of a plurality of simulated EMV cards, the method may include exchanging one or more communications with the EMV terminal device emulator via the interface, wherein each communication simulates a communication generated by a simulated integrated circuit of an EMV card in response to a communication generated by the EMV terminal device emulator, and then causing at least one transaction to be run by the EMV terminal device emulator using the exchange of the one or more communications between the EMV card emulator and the EMV terminal device emulator.

    Systems and methods for authenticating a user commerce account associated with a merchant of a commerce platform

    公开(公告)号:US10395254B1

    公开(公告)日:2019-08-27

    申请号:US15711921

    申请日:2017-09-21

    Applicant: Stripe

    Abstract: A method and apparatus for authenticating a user commerce account associated with a merchant of a commerce platform are described. The method may include initiating authentication of the user commerce account associated with the merchant of the commerce platform from a commerce platform user interface of a user device, the user commerce account established for a user of the merchant. The method may also include sending an electronic message to a mobile device associated with the user account at the commerce platform, wherein the electronic message comprises an authentication code, and receiving the authentication code from the commerce platform user interface. Furthermore, the method may include generating an authentication key for the mobile device in response to matching the received authentication code with the sent authentication code and receiving a cookie provided from the commerce platform to the mobile device.

    Systems and methods for providing authentication to a plurality of devices

    公开(公告)号:US10193697B1

    公开(公告)日:2019-01-29

    申请号:US15979021

    申请日:2018-05-14

    Applicant: Stripe, Inc.

    Abstract: A method and apparatus for a certificate authority system providing authentication to a plurality of devices associated with an organization are described. The method may include receiving, at the certificate authority system, a request from a device to sign authentication information of the device, wherein the device is associated with the organization. The method may also include sending a challenge to the device to perform an action with a system other than the certificate authority system, and receiving the response to the challenge from the device. Furthermore, the method may include verifying that the response was generated correctly based on the challenge, and signing the authentication information of the device with one or more keys of the certificate authority system as an authentication of an identity of the device.

    Managed Integrated Payment Environment
    224.
    发明申请

    公开(公告)号:US20190005499A1

    公开(公告)日:2019-01-03

    申请号:US15997416

    申请日:2018-06-04

    Applicant: Stripe, Inc.

    Abstract: Embodiments of the invention include a method of performing a payment transaction comprising receiving transaction data by a PIN pad terminal from a point-of-sale terminal, and receiving tender from a customer, by the PIN pad terminal. Tender data and the transaction data are sent to a service gateway, by the PIN pad terminal. The service gateway collects metadata from the tender data and the transaction data. The tender data is sent by the PIN pad terminal to the point-of-sale terminal, which sends the tender data and the transaction data to a merchant gateway for approval or denial of the tender data. The tender data sent to the POS may be encrypted. The service gateway may provide customer and merchant analytics based on the metadata, as well as perform security/fraud checks, BIN management, PIN pad management. Systems are also disclosed.

    Method and apparatus for performing transactions over a network using cross-origin communication

    公开(公告)号:US10134036B1

    公开(公告)日:2018-11-20

    申请号:US15792253

    申请日:2017-10-24

    Applicant: Stripe, Inc.

    Abstract: A transaction is conducted between a merchant site and a customer's electronic device using a payment processor. The merchant site is associated with a client-side application and a server-side application. The client-side application executes on the customer's electronic device. The client-side application electronically sends payment information retrieved from the customer's electronic device to the payment processor. The client-side application does not send the payment information to the server-side application. The payment processor creates a token from the payment information sent by the client-side application. The token functions as a proxy for the payment information. The payment processor electronically sends the token to the client-side application. The client-side application electronically sends the token to the server-side application for use by the server-side application in conducting the transaction. The payment information can thus be used by the server-side application via the token without the server-side application being exposed to the payment information.

    MERCHANT SPECIFIC MACHINE LEARNING MODEL FOR FRAUD DETECTION

    公开(公告)号:US20250165978A1

    公开(公告)日:2025-05-22

    申请号:US18513104

    申请日:2023-11-17

    Applicant: Stripe, Inc.

    Abstract: A server computer system for detecting a fraudulent electronic transaction may be configured to receive a transaction associated with a merchant. The system processes the transaction with a first machine learning model that is trained specific to the merchant, to obtain a first fraud detection, and processes the transaction with a second machine learning model that is trained based on a plurality of merchants, to obtain a second fraud detection. The system detects fraud associated with the transaction based on the first fraud detection and the second fraud detection. In response to detecting the fraud that is associated with the transaction, the system blocks the transaction.

    DATA MANAGEMENT USING SECURE BROWSERS

    公开(公告)号:US20250165586A1

    公开(公告)日:2025-05-22

    申请号:US19034483

    申请日:2025-01-22

    Applicant: Stripe, Inc.

    Inventor: Akshay JOSHI

    Abstract: Various embodiments described herein support or provide for data management operations, such as receiving a request to access a webpage; determining that accessing the webpage requires secure access via a secure browser; identifying a virtual machine that is configured to allow access to the webpage; and causing display of the webpage in the secure browser embedded in a local browser of the sender device.

    AUTOFILL TECHNIQUES FOR SECONDARY WEB-BASED FORMS

    公开(公告)号:US20250148197A1

    公开(公告)日:2025-05-08

    申请号:US18501933

    申请日:2023-11-03

    Applicant: Stripe, Inc.

    Abstract: Aspects of the subject technology include receiving an indication that a user has accessed a webpage comprising a form. Responsive to determining that the user is registered with a remote server, aspects also include accessing an account information of the user including an attribute, identifying a field of the form, the field including a first form information matching the attribute, generating a new selector that uniquely identifies the field in a document object model associated with the form, and transmitting, to a remote server, an indication of the new selector. Responsive to determining that the user is not registered with the remote server, aspects also include receiving a selector selected from a plurality of selectors associated with the webpage, accessing a second form information from a field of the form associated with the received selector, and autofilling a field of another form with the second form information.

    Secure data management for sensitive information

    公开(公告)号:US12282910B2

    公开(公告)日:2025-04-22

    申请号:US18614551

    申请日:2024-03-22

    Applicant: Stripe, Inc.

    Inventor: Yue Bu

    Abstract: Methods, systems, and computer readable medium are provided for generating, by a secure processor, a plurality of configurable data entry elements configured into a webpage, receiving sensitive data entered via the plurality of configurable data entry elements during a user data entry session, generating a hidden controller iframe in the webpage, aggregating, by the hidden controller iframe, the sensitive data across the plurality of configurable data entry elements, and directing aggregated sensitive data to the secure processor hosted by a first server separate from a second server hosting the webpage.

Patent Agency Ranking