Systems and methods for performing secure communications with rotating key communications

Patent metadata

Field	Value
Publication number	US-12489732-B2
Application number	US-202318455837-A
Country	US
Kind code	B2
Filing date	Aug 25, 2023
Priority date	Aug 25, 2023
Publication date	Dec 2, 2025
Grant date	Dec 2, 2025

Abstract

Systems and methods are described for performing secure communications with rotating key communications. For example, the system may receive a first applet request to perform a first rotating key communication across one or more computer networks to access a first server host. The system may then determine a first processing characteristic for the first applet request and a first plurality of server locations of the first server host (e.g., across the one or more computer networks). The system may then determine a first plurality of connection paths to a first subset of the first plurality of server locations. The system may then filter the first plurality of connection paths to generate a first subset of the plurality of connection paths. Based on the first subset of the plurality of connection paths, the system may generate a first rotating key for performing the rotating key communication.

First claim

What is claimed is:

1 . A system for performing secure communications with rotating key communications using applets linked to near field communication tags, the system comprising:
a first device comprising a near field communication tag and a first applet, wherein the first applet is configured to facilitate a first applet request in response to being located near a second device configured to transmit the first applet request to perform a first rotating key communication to access a first server host; and a platform service configured to:
receive the first applet request;
determine a first processing characteristic for the first applet request;
determine a first plurality of server locations of the first server host across one or more computer networks;
retrieve known server host domain addresses validated by the platform service;
filter the first plurality of server locations based on the known server host domain addresses for the first plurality of server locations to generate a first subset of the first plurality of server locations;
determine a plurality of connection paths to the first subset of the first plurality of server locations;
filter the plurality of connection paths based on the first processing characteristic to generate a first subset of the plurality of connection paths; and
generate a first rotating key for performing the first rotating key communication based on the first subset of the plurality of connection paths.

2 . A method for performing secure communications with rotating key communications, the method comprising:
receiving a first applet request to perform a first rotating key communication across one or more computer networks to access a first server host; determining a first processing characteristic for the first applet request; determining a first plurality of server locations of the first server host across the one or more computer networks; determining a first plurality of connection paths to a first subset of the first plurality of server locations; filtering the first plurality of connection paths based on the first processing characteristic to generate a first subset of the first plurality of connection paths; and generating a first rotating key, for a pair of devices, for performing the first rotating key communication based on the first subset of the first plurality of connection paths.

3 . The method of claim 2 , further comprising:
receiving a second applet request to apply a second processing characteristic; filtering the first subset of the first plurality of connection paths based on the second processing characteristic to generate a second subset of the first plurality of connection paths; and generating a second recommendation, for the pair of devices, for performing the first rotating key communication based on the second subset of the first plurality of connection paths.

4 . The method of claim 2 , further comprising:
retrieving a list of known server host domains; and filtering the first subset of the first plurality of connection paths based on the list of known server host domains to generate a second subset of the first plurality of connection paths, wherein the first rotating key is further based on the second subset of the first plurality of connection paths.

5 . The method of claim 2 , further comprising:
retrieving known server host domain addresses validated by a platform service; and filtering the first plurality of server locations based on the known server host domain addresses for the first plurality of server locations to generate the first subset of the first plurality of server locations.

6 . The method of claim 2 , wherein determining the first plurality of server locations of the first server host across the one or more computer networks further comprises:
determining a connection characteristic for the first server host; and comparing the connection characteristic to characteristics of a device facilitating the first applet request.

7 . The method of claim 2 , wherein filtering the first plurality of connection paths based on the first processing characteristic to generate the first subset of the first plurality of connection paths further comprises:
determining a first network and a second network in the first plurality of connection paths; and filtering the first network and the second network based on the first processing characteristic.

8 . The method of claim 2 , wherein determining the first plurality of connection paths to the first subset of the first plurality of server locations further comprises:
determining a plurality of authentication schemes for use in performing rotating key communications across the one or more computer networks; generating a ranking of the plurality of authentication schemes for the first subset of the first plurality of server locations; and filtering the ranking based on the first processing characteristic.

9 . The method of claim 2 , wherein determining the first plurality of connection paths to the first subset of the first plurality of server locations further comprises:
determining a plurality of authentication schemes for use in performing rotating key communications across the one or more computer networks; generating a feature input based on the plurality of authentication schemes; inputting the feature input into an artificial intelligence model to generate an output; and determining the first plurality of connection paths to the first subset of the first plurality of server locations based on the output.

10 . The method of claim 9 , wherein generating the feature input based on the plurality of authentication schemes further comprises:
determining a plurality of authentication characteristics for the plurality of authentication schemes; and generating an array of values representing the plurality of authentication characteristics.

11 . The method of claim 2 , wherein filtering the first plurality of connection paths based on the first processing characteristic to generate the first subset of the first plurality of connection paths further comprises:
ranking the first plurality of connection paths based on the first processing characteristic to generate a plurality of rankings; and filtering the plurality of rankings based on a threshold ranking to determine the first subset of the first plurality of connection paths.

12 . The method of claim 2 , wherein filtering the first plurality of connection paths based on the first processing characteristic to generate the first subset of the first plurality of connection paths further comprises:
determining a network corresponding to the first processing characteristic; and filtering the first plurality of connection paths based on whether each connection path in the first plurality of connection paths includes the network.

13 . The method of claim 2 , wherein filtering the first plurality of connection paths based on the first processing characteristic to generate the first subset of the first plurality of connection paths further comprises:
determining a maximum fee requirement corresponding to the first processing characteristic; determining a respective maximum fee for each connection path in the first plurality of connection paths; and filtering the first plurality of connection paths based on the respective maximum fee.

14 . The method of claim 2 , wherein filtering the first plurality of connection paths based on the first processing characteristic to generate the first subset of the first plurality of connection paths further comprises:
determining an application programming inter

Assignees

• Capital One Services Llc

Inventors

• Douglas Lawrence
• Keenan Kevin

Classifications

• H04L63/0236 Primary

  Filtering by address, protocol, port number or service, e.g. IP-address or URL · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L63/0254 Primary

  Stateful filtering · CPC title