Wells Fargo Bank, N.A.

Other

Jeff J Stapleton

Peter Bordow

Robert L Carter, Jr

Richard Orlando Toohey

Pierre Arbajian

Ramesh Yarlagadda

Bradford A Shea

Julio Jiron

Volkmar Scharf-Katz

Akhlaq M Khan

Thomas E Bell

Michael Erik Meinholz

Abhijit Rao

M Erik Meinholz

Phillip H Griffin

Ravi K Maganti

Upul D Hanwella

Mabel Oza

Todd Biggs

Luis Antonio Suarez

Sean Zhang

Kurt Paul Stevens

Brad A Shea

Luiz Silva

Richard Stec

Ramanathan Ramanathan

Omar B Khan

Michael Knorr

Sadie Salim

Manesh Saini

John T Dunlap

Naman A Aggarwal

David Marc Delfiner

Bradley L Morrison

Arnold G Werschky

Palak J Desai

Richard Wade Phillips

Systems and techniques for secure communications and distribution of random values for cryptographic key generation, coordinated with the use of specific key generation parameters, are described. An example method includes: receiving a first random value and a second random value generated from at least one quantum random number generator (QRNG), with at least one of the first random value and the second random value being provided from a satellite communication; obtaining key generation parameters associated with cryptographic key generation, where the key generation parameters specify a specific combination of the first random value and the second random value; and generating a cryptographic key, using the specific combination of the first random value and the second random value, as a seed to a cryptographic function.

Key establishment and secure communications using satellite-provided random number values

Systems, apparatuses, methods, and computer program products are disclosed for establishing cryptographic keys shared among three or more devices. An example method includes generating a set of particles and an entangled particle triplet based on the set of particles. The example method further includes transmitting the first set of entangled particles to a first host device, the second set of entangled particles to a second host device, and the third set of entangled particles to a third host device, and making a determination whether the three sets of bits are matching, where the three sets of bits are derived from the three sets of entangled particles sent to the three host devices. The example method further includes establishing the cryptographic keys based on the matching sets of bits.

Systems and methods for establishing cryptographic keys shared among three or more devices

Systems, apparatuses, methods, and computer program products are disclosed for secure utilization of quick response (QR) codes. An example method includes obtaining a key known to the initiating device and a participating device, and identifying, by QR code processing circuitry of the initiating device, a payload to be encoded in a QR code. The example method further includes generating, by security circuitry of the initiating device and based on the payload and the key, a secure character string, creating, by the QR code processing circuitry of the initiating device, the QR code using the secure character string, and outputting the QR code by the communications hardware of the initiating device.

Systems and methods for secure utilization of quick response codes

Systems, apparatuses, methods, and computer program products are disclosed for determining a security vulnerability of a computer system. An example method includes initializing a policy based on initial policy data. The example method further includes selecting an action based on the policy and executing, by agent circuitry, the action in the environment. The example method further includes, subsequent to executing the action in the environment, receiving an observation of the environment and determining an updated state from the set of states based on the observation. The example method further includes determining, by the policy, a reward based on the updated state and updating the policy based on the updated state.

Systems and methods for determining a security vulnerability of a computer system

Disclosed are example methods, systems, and devices that allow for secure data processing using data packages generated by edge devices. The techniques include generating a biometric signature using information captured by a computing device, and encrypting user data obtained via the computing device using the biometric signature and a device identifier of the computing device. A security token can be generated and utilized by the computing device to generate a data package, which is configured such that any change to the data package would cause a validation process of the data package using the security token to fail. The data package can be encrypted using various digital keys and provided to secondary computing systems.

Secure data processing using data packages generated by edge devices

Securing digital assets in a vault that interfaces with multiple different third-party wallets to store keys/mnemonics. The vault interface accepts input from multiple different party wallets to combine multiple encryptions and secure storage techniques. Numerous cryptographic mechanisms are employed to securely pull a mnemonic phrase from a third-party wallet and into an institution's vault. A customer's mnemonic phrase is securely transported from a personal wallet into a secured institution's encrypted vault using the power of HSM to encrypt and decrypt a customer's mnemonic phrase securely.

Digital asset vault

Disclosed are example methods, systems, and devices that allow for secure digital authorization via generated datasets. The techniques include receiving a first dataset of a first user and a second dataset of a second user and generating a first set of identity elements and a second set of identity elements based on the first dataset and the second dataset, respectively. A linkage definition can be generated based on the first and second datasets, which can be associated with a set of activation elements. The techniques include determining that a set of inputs satisfy one or more of the set of activation elements and, in response, generating a set of security access tokens based on the linkage condition. The security access tokens can be transmitted to a computing device upon analyzing and verifying biometric data received from that computing device.

Secure digital authorization based on identity elements of users and/or linkage definitions identifying shared digital assets

Systems, apparatuses, methods, and computer program products are disclosed for constructing a foundational identity to establish the identity of an individual and linking the foundational identity to various other identities of the individual in virtual spaces. An example method includes linking identities across virtual spaces. The example method further includes verifying identity activity associated with the various other identities using the link between the various other identities and the foundational identity, and based on the verification of the identity activity, generate outputs.

Systems and methods for identifying activities of individuals in virtual spaces using identity linking

A system and method for verifying code bundles. One method includes receiving, from a client device, a request for information to verify an authorization of a code bundle, the code bundle associated with a first signed code segment and a second signed code segment. The method further includes generating a list of certificates associated with the code bundle and including a first certificate associated with the first signed code segment and a second certificate associated with the second signed code segment. The method further includes transmitting, to the client device, a message comprising the list of certificates, the list of certificates generated by a code sign management system (CSMS) and associated with the code bundle. The method further includes verifying, from the message causing the client device to verify the code bundle and based on the list of certificates, the code bundle.

Code-sign white listing (CSWL)

Disclosed are example methods, systems, and devices for sensor data processing for monitoring devices. These techniques include receiving scan data from a computing device that corresponds to a scan by an imaging device and analyzing the scan data to determine that the scan data corresponds to a manufactured article. An indication can be transmitted with a request for audiovisual data corresponding to an operation of the manufactured article, and the audiovisual data can be received from an imaging device or a microphone of the computing device. A sound sample corresponding to the operation of the manufactured article is extracted, and a status metric for the article is generated based on a comparison of the sound sample to a sound signature in an identity profile of the manufactured article. The status of the manufactured article can then be determined.

Sensor data processing for monitoring device performance

Systems, apparatuses, methods, and computer program products are disclosed for hardware security module communication management. An example method includes deriving, by a first HSM, a first cryptographic key based on an initial key and a first set of seed bits. The method also includes receiving a message comprising a second cryptographic key from a key exchange management device, wherein the second cryptographic key is associated with a second HSM. The method also includes deriving, a third cryptographic key based on the first cryptographic key and the second cryptographic key, wherein deriving the third cryptographic key establishes secure communication between the first HSM and the second HSM based on the second HSM having also derived the third cryptographic key. The method also includes performing, a first cryptographic data protection action using the third cryptographic key.

Systems and methods for hardware security module communication management

Systems, apparatuses, and methods are disclosed for quantum entanglement authentication. An example method performed by a first device includes receiving a first electronic identification of a first subset of a first set of entangled quantum particles and a first number generated based on a second subset of the first set of entangled quantum particles associated with a second device, generating a second number based on the first subset of the first set of entangled quantum particles, generating a first session key based on the first number and the second number, receiving, from the second device, an electronic communication comprising a second session key, the second session key based on a third number and a fourth number, and authenticating a session between the first device and the second device based on the first session key being identical to the second session key.

Systems and methods for quantum consensus

Disclosed are example methods, systems, and devices that allow for executing machine-learning models for real-time and secure analysis of digital metrics. The techniques include generating metrics for identity elements stored in digital profiles of users. A subset of profiles can be identified that have metrics that fall below a predetermined thresholds, with which a training dataset can be generated. Machine-learning models can be executed over the training dataset to train an artificial intelligence agent that receives digital profiles as input and outputs translational elements corresponding to identity elements in the digital profiles. After training, additional profiles can be input to the machine-learning models of the artificial intelligence agent to identify a second subset of digital profiles with corresponding metrics. Electronic messages corresponding to the second subset can be generated and transmitted to one or more computing devices identified in the second subset of digital profiles.

Machine-learning for real-time and secure analysis of digital metrics

Disclosed are example methods, systems, and devices that allow for secure generation of authentication datasets from network activity. The techniques include accessing secured data sources to generate a first dataset of secured data, and extracting information from one or more unsecured data sources to generate a second dataset comprising a second dataset. A third set of data elements can be generated from the first and second datasets, and may be utilized to authenticate credentials that can be utilized to access secured data via a network. The techniques can transmit indications that credentials are invalid if the credentials fail to satisfy aspects of the third dataset.

Secure generation of authentication datasets from network activity

Systems and methods may generally be used to authenticate user credentials. An example method may include using a personal identifier and a stored base derivation key to generate an initial key value, generating a current key value using an initial key value and a counter, determining a decryption key from the current key value and decrypting an encrypted secret value using the decryption key to identify a password. The method may include generating a password check value using the current key value and the device identifier, and determining whether to authenticate the user device based on whether the password check value indicates that the password is valid.

Growing community of inventors

O'Fallon, MO, United States of America

Jeff J Stapleton