Sharing and requesting private data using cryptography

Patent metadata

Field	Value
Publication number	US-12407513-B2
Application number	US-202318157596-A
Country	US
Kind code	B2
Filing date	Jan 20, 2023
Priority date	Jan 20, 2023
Publication date	Sep 2, 2025
Grant date	Sep 2, 2025

Abstract

Methods and systems are described herein for an access control system that may receive, from a device associated with a cryptography-based storage application, a blockchain operation request. The blockchain operation request may include an identifier of a cryptographic token (e.g., non-fungible token) that may store encrypted verification data encrypted using a public key associated with the cryptography-based storage application. The access control system may use an address associated with the cryptography-based storage application to send the verification data so that the verification data is decrypted and a first encoding of the decrypted data is generated by the device associated with the cryptography-based storage application. The access control system may then compare that first encoding with a second encoding made from the original verification data, and, based on the first encoding matching the second encoding, generate an authentication confirmation.

First claim

What is claimed is:

1. A method comprising:
receiving, from a device associated with a cryptography-based storage application, a blockchain operation request, wherein the blockchain operation request comprises an identifier of a cryptographic token, and wherein the cryptographic token is associated with encrypted verification data encrypted using a public key associated with the cryptography-based storage application;
in response to transmitting the blockchain operation request to a blockchain node, receiving, from an on-chain program associated with the cryptographic token, the encrypted verification data;
transmitting, via the on-chain program, a command to decrypt the encrypted verification data;
receiving a first encoding from the device, wherein the first encoding is generated based on decrypted verification data;
retrieving a second encoding generated using an encoding process on original verification data; and
based on the first encoding matching the second encoding, generating an authentication confirmation.

2. The method of claim 1 , further comprising, based on the first encoding matching the second encoding, submitting the blockchain operation request to the blockchain node for performing a blockchain operation associated with the blockchain operation request.

3. The method of claim 1 , further comprising:
receiving, from a second device associated with a second cryptography-based storage application, a second blockchain operation request for generating the cryptographic token, wherein the second blockchain operation request comprises verification data and an address associated with the cryptography-based storage application;
retrieving the public key associated with the cryptography-based storage application;
encrypting the verification data using the public key associated with the cryptography-based storage application;
generating the cryptographic token to store the encrypted verification data; and
causing execution of a second blockchain operation based on the second blockchain operation request, wherein the second blockchain operation records the cryptographic token to a blockchain.

4. The method of claim 3 , further comprising:
receiving a token identifier associated with the cryptographic token; and
transmitting the token identifier and the encoding process to be stored in the on-chain program.

5. The method of claim 3 , further comprising:
determining, using an application identifier associated with the second cryptography-based storage application, a user associated with the second cryptography-based storage application;
generating an authorization request for the second blockchain operation request; and
transmitting the authorization request to the user associated with the second cryptography-based storage application.

6. The method of claim 1 , wherein the blockchain operation request causes a plurality of cryptographic tokens to be assigned to be controlled by the cryptography-based storage application.

7. The method of claim 1 , wherein retrieving the second encoding generated using the encoding process based on the original verification data comprises retrieving the second encoding from the cryptographic token.

8. The method of claim 1 , wherein the device decrypts the encrypted verification data and generates the first encoding using the encoding process on the decrypted verification data.

9. A non-transitory, computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a device associated with a cryptography-based storage application, a blockchain operation request, wherein the blockchain operation request comprises an identifier of a cryptographic token, and wherein the cryptographic token is associated with encrypted verification data encrypted using a public key associated with the cryptography-based storage application;
in response to transmitting the blockchain operation request to a blockchain node, receiving, from an on-chain program associated with the cryptographic token, the encrypted verification data;
transmitting, via the on-chain program, a command to decrypt the encrypted verification data;
receiving a first encoding from the device, wherein the first encoding is generated based on decrypted verification data;
retrieving a second encoding generated using an encoding process on original verification data; and
based on the first encoding matching the second encoding, generating an authentication confirmation.

10. The non-transitory, computer-readable storage medium of claim 9 , wherein the instructions further cause the one or more processors to, based on the first encoding matching the second encoding, submit the blockchain operation request to the blockchain node for performing a blockchain operation associated with the blockchain operation request.

11. The non-transitory, computer-readable storage medium of claim 9 , wherein the instructions further cause the one or more processors to perform operations comprising:
receiving, from a second device associated with a second cryptography-based storage application, a second blockchain operation request for generating the cryptographic token, wherein the second blockchain operation request comprises verification data and an address associated with the cryptography-based storage application;
retrieving the public key associated with the cryptography-based storage application;
encrypting the verification data using the public key associated with the cryptography-based storage application;
generating the cryptographic token to store the encrypted verification data; and
causing execution of a second blockchain operation based on the second blockchain operation request, wherein the second blockchain operation records the cryptographic token to a blockchain.

12. The non-transitory, computer-readable storage medium of claim 11 , wherein the instructions further cause the one or more processors to perform operations comprising:
receiving a token identifier associated with the cryptographic token; and
transmitting the token identifier and the encoding process to be stored in the on-chain program.

13. The non-transitory, computer-readable storage medium of claim 11 , wherein the instructions further cause the one or more processors to perform operations comprising:
determining, using an application identifier associated with the second cryptography-based storage application, a user associated with the second cryptography-based storage application;
generating an authorization request for the second blockchain operation request; and
transmitting the authorization request to the user associated with the second cryptography-based storage application.

14. The non-transitory, computer-readable storage medium of claim 9 , wherein the blockchain operation request causes a plurality of cryptographic tokens to be assigned to be controlled by the cryptography-based storage application.

15. The non-transitory, computer-readable storage medium of claim 9 , wherein the instructions for retrieving the second encoding generated using the encoding process based on the original verification data further cause the one or more processors to retrieve the second encoding from the cryptographic token.

16. The non-transitory, computer-readable storage medium of claim 9 , wherein the device decrypts the encrypted verification data and generates the first encoding using the encoding process on the decrypted verification data.

Assignees

• Capital One Services Llc

Inventors

• Osborn Kevin
• Zhu Xiaoguang
• Rapowitz Samuel

Classifications

• H04L9/30 Primary

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title