Wells Fargo Bank, N.a.

International Business Machines Corporation

Phillip H Griffin

Jeffrey J Stapleton

David V Duccini

Michael Knorr

Jal Daruwalla

Lynnel J Kresse

Ashia Kennon

Joanne Strobel-Cort

Catherine Wangari Mwangi

Jeff J Stapleton

David E Newman

Nishant Usapkar

Luis Antonio Suarez

Upul D Hanwella

Kurt Paul Stevens

Ronnie F McGinnis, Jr

Brian L Keltner

Luiz Silva

Richard Stec

Ramanathan Ramanathan

Abhijit Rao

Todd Weston Arnold

Robert L Carter, Jr

Mabel Oza

Todd Biggs

Sean Zhang

Palak J Desai

Richard Wade Phillips

Naman A Aggarwal

Securing digital assets in a vault that interfaces with multiple different third-party wallets to store keys/mnemonics. The vault interface accepts input from multiple different party wallets to combine multiple encryptions and secure storage techniques. Numerous cryptographic mechanisms are employed to securely pull a mnemonic phrase from a third-party wallet and into an institution's vault. A customer's mnemonic phrase is securely transported from a personal wallet into a secured institution's encrypted vault using the power of HSM to encrypt and decrypt a customer's mnemonic phrase securely.

Digital asset vault

Systems, methods, and apparatuses of creating a repair token for a distributed ledger are provided. A method includes identifying an error in the distributed ledger via a computing system. The error is associated with a first block on the distributed ledger. The method further includes creating the repair token having content of the first block and a correction to the error via the computing system.

Systems and methods for blockchain repair assurance tokens

Systems and methods for protecting user data received by, stored on, and/or requested by third-party computing devices include a data entry computing system on a first network node. A data entry computing system can include a processing circuit that can identify user-entered data as sensitive user data, generate a content encryption key (CEK), generate encrypted user data by encrypting the sensitive user data with the CEK, tag the encrypted user data and the CEK with a tag readable by a database server on a network node different than the data entry computing system, the tag comprising information indicative of the encrypted user data, and transmit the encrypted user data to the database server, wherein the database server excludes a private key of a key manager on a network node different than the data entry computing system.

Systems and methods for third party data protection

A method, system, and apparatus for managing digital certificates, managing a certificate authority (CA), and cross-referencing CA hierarchies. The method includes receiving, by a processor of a CA computing system, at least one of a digital certificate generation request and a digital certificate revocation from a user via a user computing device, the digital certificate generation request including a user public key and a user identity. The method further includes generating a digital certificate for the user and signing the digital certificate with a CA private key, wherein the CA private key is associated with a known CA public key. The method further includes publishing the digital certificate signed with the CA private key to a digital certificate blockchain, determining a certificate status of the digital certificate, and publishing an update to the digital certificate blockchain to reflect the certificate status of the digital certificate.

Systems and methods for notary agent for public key infrastructure names

A biometric electronic signature authenticated key exchange ('BESAKE') token processing system. The system includes a storage location having a plurality of biometric reference templates. The system further includes an authentication computing system having a processor and instructions. The instructions configured to cause the authentication computing system to receive a signing party identifier and the BESAKE token from a signing party. The BESAKE token having a biometric sample encrypted using an encryption key. The instructions further configured to generate a decryption key and decrypt the encrypted biometric sample from the BESAKE token. The instructions further configured to match the biometric sample with a biometric reference template and transmit to a biometric service provider computing system a match request. The instructions further configured to determine a signing party identity via a binary match value. The binary match value relating to a result of matching the biometric sample with the biometric reference template.

Biometric electronic signature authenticated key exchange token

Examples described herein relate to systems, apparatuses, and methods for generating a securitized loan blockchain, including providing at least one security criterion, identifying at least one loan block of a loan blockchain that satisfies the security criterion, where the loan blockchain corresponds to at least one loan, and the security criterion is associated with the at least one loan block and a dynamic financial profile of a borrower of the at least one loan, and generating a security blockchain including at least a first security block, where the first security block is associated with a loan link identifier object that identifies the loan block of the loan blockchain.

Blockchain based loan securitization

A system, method, and apparatus for distributed extensible blockchain structures is provided. A system includes a parent blockchain. The parent blockchain includes a first block including first content, the first block stored at a first location, and a second block stored at a second location different than the first location. The second block includes second content and a first SignerInfo element. The first SignerInfo element includes a hash on the second content, a hash on the first content of the first block, a pointer to the first location of the first block, and a first SignatureValue element generated by digitally signing at least the hash on the second content, the hash on the first content, and the pointer to the first location.

Systems and methods for distributed extensible blockchain structures

The methods and system allow for the generation of a signcrypted biometric electronic signature token using a subsequent biometric sample after an enrollment of a biometric reference value in a biometric system. The signcrypted biometric electronic signature token involves simultaneous encryption and digital signature to protect the confidentiality. The system as described herein provides data integrity, origin authentication, and efficiency by performing encryption and digital signature simultaneously. The process allows a signcrypting party to enroll in a biometric service, sign a piece of data or content using a public key, that may be tied to a trusted anchor certificate authority, and submit a biometric sample. Subsequently, the relying party may validate the information on that piece of data or content to confirm the identity of the signcrypting party.

Signcrypted biometric electronic signature tokens

An example method includes receiving an encrypted biometric enrollment data and user identifier data. The encrypted biometric enrollment data includes at least one biometric enrollment sample from a user encrypted using an encryption key. The encryption key is generated based on a user secret and the user identifier is associated with the user. The user identifier is matched with a stored user secret. A decryption key is generated based on the stored user secret. The encrypted biometric enrollment data is decrypted using the decryption key. The at least one biometric enrollment sample is retrieved from the decrypted biometric enrollment data. The at least one biometric enrollment sample is processed using a biometric processing algorithm to generate a biometric reference template. A biometric reference template identifier uniquely identifying the biometric reference template is generated. An encryption key is generated based on the stored user secret and encrypts an enrollment confirmation message.

Biometric authenticated biometric enrollment

In a system, computer-readable media and methods for secure ledger assurance tokenization (SLAT), a block content of a first blockchain is audited, which includes accessing, by a request circuit of a SLAT computing system, a retrievably stored cross-reference content and generating an audit result. Generating an audit result includes evaluating, by a SLAT circuit of the SLAT computing system, the cross-reference content such that the audit result is informed at least by the cross-reference content. The audit result is included in a secure ledger assurance token generated by a SLAT generation circuit of the SLAT computing system and stored relationally to the block content of the first blockchain.

Secure ledger assurance tokenization

Systems, apparatuses, and methods are disclosed for measuring one or more metrics of a cryptographic algorithm in a post-quantum cryptography (PQC) system. An example method includes obtaining a set of operating parameters comprising an algorithm of interest, wherein the algorithm of interest is a PQC algorithm, a legacy algorithm operating in a hybrid PQC system, or a variant thereof, and wherein the algorithm of interest is wrapped to present, via a wrapped algorithm of interest, a standardized interface to a sequence of benchmark operations. The example method further includes observing benchmark values of the one or more metrics, wherein the one or more metrics pertain to a designated benchmark operation from the sequence of benchmark operations. The example method further includes outputting a report comprising the benchmark values of the one or more metrics.

Systems and methods for measuring one or more metrics of a cryptographic algorithm in a post-quantum cryptography system

A method includes receiving an event, the event associated with a digital signature in a first time-based message comprising a first trusted time stamp token generated using a first hash of digitally signed content from a trusted timing authority; generating a first block on a distributed ledger; generating a second hash of the first trusted time stamp token; receiving a second trusted time stamp token from the trusted timing authority in response to transmitting the second hash to the trusted timing authority; and generating a second block on the distributed ledger; wherein verification of data integrity of the digitally signed content is provided via the first hash of the digitally signed content and second hash of the first trusted time stamp token and via the hash of the first block and a hash of the second block.

Time-based digital signature

A method includes receiving an agreement associated with a signing party by a computing system, receiving a biometric sample captured from the signing party by the computing system, generating a hash of the agreement by the computing system, and receiving a secret knowledge factor by the computing system. The method further includes generating an encryption key using the secret knowledge factor as an input to a password authenticated key exchange protocol by the computing system and generating a biometric-based electronic signature token by encrypting the biometric sample and the hash of the agreement with the encryption key by the computing system. The method further includes generating a smart contract based on the agreement by the computing system. The smart contract includes terms of the agreement and the biometric-based electronic signature token. The biometric-based electronic signature token providing biometric-based pre-authorization to be initiated by the smart contract.

Biometrics-based e-signatures for pre-authorization and acceptance transfer

Systems and methods for using ring usage certificate extensions are described. Some implementations described limit the ability of signers using a 'ring signature' from using public key certificates to create the ring signatures without the permission of the creators of those respective public key certificates. An implementation may describe receiving a request to validate, receiving a plurality of digital certificates associated with the request to validate, determining the request to validate requires validation of a ring signature using the plurality of digital certificates, determining one or more of the plurality of digital certificates comprises a ring usage certificate extension, analyzing the ring usage certificate extension to retrieve a value associated with the ring usage certificate extension, and failing validation of the request based on determining the request to validate requires validation of the ring signature and based on the value associated with the ring usage certificate extension.

Systems and methods of ring usage certificate extension

A method including receiving a signcrypted cross-border payment message, the signcrypted cross-border payment message generated by signcrypting a cross-border payment message using a first financial institution public key, a first financial institution private key, and a second financial institution public key, retrieving the first financial institution public key, the second financial institution public key, and a second financial institution private key, wherein the second financial institution public key and the second financial institution private key are part of a public/private key pair, unsigncrypting the signcrypted cross-border payment message using the first financial institution public key, the second financial institution public key, and the second financial institution private key to retrieve the cross-border payment message, and verifying that the first financial institution public key is associated with a first financial institution.

Growing community of inventors

Raleigh, NC, United States of America

Phillip H Griffin