Abstract:
A method of associating a first party and a second party is provided, the method comprising: receiving a first electronic message comprising information indicative of the first party; generating a first electronic token in response to receiving the information indicative of the first party; sending the first electronic token to the first party; receiving one or more second electronic messages from the second party, the one or more second electronic messages comprising the first electronic token and information indicative of the second party; generating a second electronic token in response to receiving the first electronic token and the information indicative of the second party from the second party; associating the information indicative of the first party, the second party and the second electronic token, the first party being identified on the basis of the first electronic token; and sending the second electronic token to the first party.
Abstract:
An apparatus for identifying an end node bank account in a network of bank accounts for funds from a fraudulent transaction, comprising processing circuitry configured to: identify a node account into which funds from the fraudulent transaction are paid; determine the number of account relationships associated 5 with the node account; and identify the node account as an end node bank account when the number of account relationships is above a threshold value.
Abstract:
A method of generating a plurality of different one time tokens, the method comprising: acquiring a first numerical value from a predetermined sequence of consecutive numerical values; applying format preserving encryption to the acquired first numerical value to generate a first numerical one time token; acquiring a second numerical value from the predetermined sequence of consecutive numerical values, the acquired second numerical value being different to the acquired first numerical value; and applying the format preserving encryption to the acquired second numerical value to generate a second numerical one time token.
Abstract:
An information processing system for associating a first party and a second party comprising: a first information processing apparatus; a second information processing apparatus configured to: receive a message from the first information processing apparatus comprising information identifying the second party; generate a code associated with the second party; and transmit a message comprising the code to the first information processing apparatus; and a third information processing apparatus configured to: receive an authentication credential from the first party; obtain the code; transmit a message comprising the code and information identifying the first party to the second information processing apparatus; wherein the second information processing apparatus is configured to: associate the first and second parties; and transmit a message comprising information indicating the association of the first and second parties to the third information processing apparatus; wherein the third information processing apparatus is configured to: receive approval of the association from the first party; and transmit a message comprising information indicating the approval of the association to the second information processing apparatus; wherein the second information processing apparatus is configured to transmit a message comprising information indicating the approval of the association to the first information processing apparatus.
Abstract:
A Method, Apparatus and Computer Program for Verifying the Integrity of Electronic Messages A method for verifying integrity of electronic messages, comprising the steps of: obtaining an input message digest for a source electronic message; adding the input message digest to an input accumulator that accumulates the input message digests over a predetermined period of time; obtaining an output message digest for a destination electronic message; adding the output message digest to an output accumulator that accumulates the output message digests over the predetermined period of time; comparing the value of the input accumulator with the value of the output accumulator at the expiration of the predetermined period of time; and verifying integrity in the source and destination electronic messages over the predetermined period of time when the value of the input accumulator is equivalent to the value of the output accumulator.
Abstract:
A method of tracing messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first outbound message, the message information comprising a first source identifier and a first destination identifier and determining whether the first source identifier is associated with a set of messages in a storage unit, whereby when the first source identifier is associated with a set of messages, the method comprises producing a trace request, the trace request comprising the first destination identifier and an identifier identifying the set of messages associated with the first source identifier.
Abstract:
A communications device for implementing an electronic payment process, the communications device comprising: a receiver unit operable to: receive a secure limited use key (SLUK) from a financial institution, the SLUK being generated by the financial institution using (1) a first limited use key (LUK) generated using a first key associated with the financial institution, an identifier which identifies a user of the communications device and a variable code and (2) a subset of the characters of a passcode associated with the user of the communications device, each character in the subset being identified by its character position in the passcode and the character position in the passcode of each of the characters in the subset being determined by a predetermined algorithm on the basis of a second key associated with the user of the communications device, the identifier which identifies the user of the communications device and the variable code, the second key being a secret key, wherein the SLUK is generated by wrapping the first LUK using each of the characters in the subset; and receive the variable code from the financial institution; a storage unit operable to store the received SLUK and variable code and to store the second key associated with the user of the communications device and the identifier which identifies the user of the communications device; a controller operable to, in response to an operation by a user to initiate an electronic payment at a point of sale (POS) device, generate the character position in the passcode of each character in the subset, the character position in the passcode of each character in the subset being determined by the predetermined algorithm on the basis of the second key, the identifier of the user of the communications device and the variable code, as stored in the storage unit; and a user interface operable to indicate to the user of the communications device the character position in the passcode of each character in the subset as generated by the controller and to receive an input from the user indicative of each character in the subset; wherein the controller is operable to perform an unwrapping process on the SLUK stored in the storage unit using each character indicated by the input from the user, the unwrapping process generating a second LUK; and wherein the communications device comprises: a transmitter unit operable to transmit the generated second LUK to the financial institution for authentication of the electronic payment.
Abstract:
The present invention provides a system for receiving electronic messages from a financial institution, the system comprising a plurality of switches configured to communicate with one another and to process the received electronic messages, wherein each switch includes processing circuitry that is configured to receive an electronic message that includes a unique identifier and, in dependence upon the unique identifier, either process the electronic message or forward the electronic message to another one of the switches for processing.
Abstract:
The present invention provides an interface for controlling the transfer of electronic messages between a financial institution and a transaction processing system for processing the messages, wherein the financial institution is connected to the transaction processing system via a data communications network, the interface comprising communication circuitry operable to receive an electronic message issued by the financial institution; and processing circuitry operable to determine whether the format of the electronic message conforms to a predetermined standard necessary for processing of the electronic message; and in the event that the format of the electronic message does conform to the predetermined standard, the communication circuitry is further operable to transmit the electronic message over the network for storage in a message queue unit associated with the transaction processing system; and in the event that the format of the electronic message does not conform to the predetermined standard, the communication circuitry is operable to return the electronic message to the financial institution.
Abstract:
A method of building a set of traceable messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first message, the message information comprising a first source identifier and a first destination identifier and determining whether the source identifier is associated with a set of previous messages, whereby when the first source identifier is associated with a set of previous messages, the method comprises identifying the first message as also belonging to the set of previous messages and when the first source identifier is not associated with a set of previous messages, the method comprises identifying the first message as belonging to a new set of messages, the method further comprising associating the first destination identifier with the set of messages to which the first message belongs, such that if a second message is sent from that destination, the second message will be identified as belonging to that set of messages.