Post quantum unique key per token system

Patent metadata

Field	Value
Publication number	US-11206131-B1
Application number	US-201916415473-A
Country	US
Kind code	B1
Filing date	May 17, 2019
Priority date	May 17, 2019
Publication date	Dec 21, 2021
Grant date	Dec 21, 2021

Abstract

Various arrangements relate to a method performed by a processor of a computing system. An example method includes tokenizing a first value using a tokenization algorithm to generate a first token. The first value and first key are inputs of the tokenization algorithm. A message is generated. The message includes a first value identifier associated with the first value and a first key generation identifier associated with the generation of the first key. The message is associated with the first token. A second key is generated. A second value is tokenized using a tokenization algorithm to generate a second token. The second value and second key are inputs of the tokenization algorithm.

First claim

What is claimed:

1. A method, comprising:
determining, by a computing system, a base derivation key and a key derivation function;
generating, by the computing system, a first key using the base derivation key, a first value, and a key derivation function;
tokenizing, by the computing system, the first value using a tokenization algorithm to generate a first token, wherein the first value and first key are inputs of the tokenization algorithm;
generating, by the computing system, a message, the message comprising a first value identifier associated with the first value and a first key generation identifier associated with the generation of the first key, wherein the message is associated with the first token;
generating, by the computing system, a second key using the base derivation key, a second value, and the key derivation function; and
tokenizing, by the computing system, the second value using the tokenization algorithm to generate a second token, wherein the second value and second key are inputs of the tokenization algorithm.

2. The method of claim 1 , wherein the first key generation identifier comprises a key derivation function identifier associated with the key derivation function and a base derivation key identifier associated with the base derivation key, wherein the key derivation function identifier, base derivation key identifier, and the first value are used to regenerate the first key.

3. The method of claim 2 , wherein the message is a first message, further comprising:
generating, by the computing system, a second message, the second message comprising a second value identifier associated with the second value, the key derivation function identifier associated with the key derivation function and the base derivation key identifier associated with the base derivation key, wherein the key derivation function identifier, base derivation key identifier, and the second value are used to regenerate the first key,

wherein the message is associated with the second token.

4. The method of claim 1 , wherein generating the first key further comprises:
determining, by a computing system, a first random character string; and
generating, by the computing system, the first key using the first random character string; and
wherein generating the second key further comprises:
determining, by a computing system, a second random character string; and
generating, by the computing system, the second key using the second random character string.

5. The method of claim 4 , wherein the first key generation identifier comprises the first random character string.

6. The method of claim 5 , wherein the message is a first message, further comprising:
generating, by the computing system, a second message, the second message comprising a second value identifier associated with the second value, a second key generation identifier that comprises the second random character string, wherein the message is associated with the second token.

7. A system comprising:
a repository comprising a plurality of messages;
a server system, the server system comprising a processor and instructions stored in non-transitory machine-readable media, the instructions configured to cause the server system to:
determine a base derivation key and a key derivation function;
generate a first key using the base derivation key, a first value, and the key derivation function;
tokenize the first value using a tokenization algorithm to generate a first token, wherein the first value and first key are inputs of the tokenization algorithm;
generate first message, the first message comprising a first value identifier associated with the first value and a first key generation identifier associated with the generation of the first key, wherein the first message is associated with the first token;
generate a second key using the base derivation key, a second value, and the key derivation function;
tokenize the second value using the tokenization algorithm to generate a second token, wherein the second value and second key are inputs of the tokenization algorithm; and
generate a second message, the second message comprising the first value identifier associated with the first value and a second key generation identifier associated with the generation of the second key, wherein the second message is associated with the second token.

8. The system of claim 7 , wherein the first key generation identifier comprises a key derivation function identifier associated with the key derivation function and a base derivation key identifier associated with the base derivation key, wherein the key derivation function identifier, base derivation key identifier, and the first value are used to regenerate the first key.

9. The system of claim 7 , wherein the second key generation identifier comprises a key derivation function identifier associated with the key derivation function and a base derivation key identifier associated with the base derivation key, wherein the key derivation function identifier, base derivation key identifier, and the first value are used to regenerate the second key.

10. The system of claim 7 , wherein generating the first key further comprises:
determine a first random character string; and
generate the first key using the first random character string; and
wherein generating the second key further comprises:
determine a second random character string; and
generate the second key using the second random character string.

11. The system of claim 10 , wherein the first key generation identifier comprises the first random character string, and wherein the second key generation identifier comprises the second random character string.

12. The system of claim 7 , wherein the first message stored in the repository, and the second message is stored in the repository.

13. The system of claim 7 , wherein the first message is digitally signed with a private key to generate a digitally signed first message, wherein authenticity and data integrity of the first message can be determined based on each of the digitally signed first value identifier associated with the first value, the first key generation identifier associated with the generation of the second key, and a public key of a public/private key pair comprising the private key, and wherein the second message is digitally signed with a private key to generate a digitally signed second message, wherein authenticity and data integrity of the second message can be determined based on each of the digitally signed first value identifier associated with the first value, the second key generation identifier associated with the generation of the second key, and a public key of a public/private key pair comprising the private key.

14. A method, comprising:
receiving, by a computing system, a token, the token comprising a value tokenized using the value and a key as inputs of a tokenization algorithm;
identifying, by the computing system, a message associated with the token, the message comprising a key generation identifier associated with the key and a value identifier, the value identifier associated with the value;
retrieving, by the computing system, the key associated with the key identifier;
detokenizing, by the computing system, the token using the key to retrieve the value;
comparing, by the computing system, the retrieved value with the value associated with the with value identifier.

15. The method of claim 14 , wherein the key generation identifier comprises a key derivation function identifier associated with a key derivation function and a base derivation key iden

Assignees

• Wells Fargo Bank Na

Inventors

• Griffin Phillip H
• Stapleton Jeffrey J

Classifications

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• H04L2209/38

  Electricity · mapped topic