Systems and methods for user control and exclusion of cryptographic tokenized data

Patent metadata

Field	Value
Publication number	US-12401510-B2
Application number	US-202217931507-A
Country	US
Kind code	B2
Filing date	Sep 12, 2022
Priority date	Sep 12, 2022
Publication date	Aug 26, 2025
Grant date	Aug 26, 2025

Abstract

The invention relates to generating cryptographic tokens based on received records. The system may receive a blockchain operation request comprising a plurality of records, encrypt a plurality of records into an encrypted payload, generate a cryptographic token based on the encrypted payload, and cause the cryptographic token to be committed to a blockchain.

First claim

What is claimed is:

1. A system for generating cryptographic tokens based on received records, the system comprising:
one or more processors; and
one or more non-transitory, computer-readable media comprising instructions that, when executed by the one or more processors, cause operations comprising:
receiving a first blockchain operation request from a computing device, wherein the first blockchain operation request comprises a plurality of records and a first target address associated with a first cryptography-based storage application, and wherein each record of the plurality of records comprises an identifier of an item;
determining, based on the first target address, a first public key associated with the first cryptography-based storage application and encrypting the plurality of records into a first encrypted payload using the first public key;
generating, based on one or more characteristics associated with one or more items corresponding to one or more item identifiers that are retrievable based on one or more payload identifiers that include a payload identifier of the first encrypted payload and based on the first target address, a cryptographic token configured to be controlled by the first target address and enable access to the first encrypted payload for the first cryptography-based storage application associated with the first target address, wherein a characteristic, of the one or more characteristics, includes a designation relating one or more of a threshold, a criteria, or a requirement being satisfied to lead to a determination of the characteristic;
causing the cryptographic token to be committed to a blockchain;
receiving, from the computing device, a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application associated with a second target address, wherein the second blockchain operation request comprises the second target address;
transmitting a command to the computing device to decrypt the first encrypted payload, wherein the computing device decrypts the first encrypted payload using a first private key associated with the first cryptography-based storage application;
receiving the plurality of records from the computing device;
determining, based on the second target address, a second public key associated with the second cryptography-based storage application and encrypting the plurality of records into a second encrypted payload using the second public key; and
replacing the first encrypted payload with the second encrypted payload.

2. The system of claim 1 , wherein the instructions for generating the cryptographic token further cause the one or more processors to perform operations comprising:
setting the first target address as a controlling address for the cryptographic token; and
encoding the first encrypted payload into the cryptographic token.

3. The system of claim 1 , wherein the instructions for generating the cryptographic token further cause the one or more processors to perform operations comprising:
generating the payload identifier, wherein the payload identifier enables retrieval of the first encrypted payload;
storing the first encrypted payload in cloud storage in association with the payload identifier; and
encoding the payload identifier into the cryptographic token.

4. The system of claim 3 , wherein the instructions for replacing the first encrypted payload with the second encrypted payload further cause the one or more processors to perform operations comprising:
retrieving the payload identifier;
determining, based on the payload identifier, a location associated with the first encrypted payload; and
replacing, in the location associated with the first encrypted payload, the first encrypted payload with the second encrypted payload.

5. A method for generating cryptographic tokens based on received records, the method comprising:
receiving a blockchain operation request comprising a plurality of records, wherein each record of the plurality of records comprises an identifier of an item, and wherein the blockchain operation request is associated with a cryptography-based storage application;
encrypting the plurality of records into an encrypted payload using a public key associated with the cryptography-based storage application, wherein the encrypted payload is a first encrypted payload, and wherein the cryptography-based storage application is a first cryptography-based storage application;
generating, based on one or more characteristics associated with one or more items corresponding to one or more item identifiers that are retrievable based on one or more payload identifiers that include a payload identifier of the encrypted payload, a cryptographic token configured to be controlled by the cryptography-based storage application and enable access to the encrypted payload using the cryptography-based storage application, wherein a characteristic, of the one or more characteristics, includes a designation relating one or more of a threshold, a criteria, or a requirement being satisfied to lead to a determination of the characteristic;
causing the cryptographic token to be committed to a blockchain;
receiving, from a computing device, a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application associated with a second target address, wherein the second blockchain operation request comprises the second target address;
transmitting a command to the computing device to decrypt the first encrypted payload, wherein the computing device decrypts the first encrypted payload using a first private key associated with the first cryptography-based storage application;
receiving the plurality of records from the computing device;
determining, based on the second target address, a second public key associated with the second cryptography-based storage application and encrypting the plurality of records into a second encrypted payload using the second public key; and
replacing the first encrypted payload with the second encrypted payload.

6. The method of claim 5 , further comprising determining, based on a key identifier associated with the cryptography-based storage application, the public key associated with the cryptography-based storage application.

7. The method of claim 5 , wherein generating the cryptographic token comprises:
setting an address associated with the cryptography-based storage application as a controlling address for the cryptographic token; and
encoding the encrypted payload into the cryptographic token.

8. The method of claim 5 , wherein generating the cryptographic token comprises:
generating the payload identifier, wherein the payload identifier enables retrieval of the encrypted payload;
storing the encrypted payload in cloud storage in association with the payload identifier; and
encoding the payload identifier into the cryptographic token.

9. The method of claim 8 , further comprising:
receiving a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application;
transmitting a command to a computing device associated with the cryptography-based storage application to decrypt the encrypted payload, wherein the computing device decrypts the encrypted payload using a private key associated with the cryptography-based storage application;
receiving the plurality of records from the computing device;
encrypting the plurality of records into a new encrypted payload using a second public key associated with the second cryptography-based storage application; and
replacing the encrypted payload with the new encrypt

Assignees

• Capital One Services Llc

Inventors

• Duque Julian
• Shanker Purva
• Rapowitz Samuel
• Liu Dennis

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title