US 12,135,812 B2
System for data access token management
Darius A. Miranda, San Francisco, CA (US); Rajiv Ranjan, Fremont, CA (US); Uma Meyyappan, Freemont, CA (US); Chris Theodore Kalaboukis, San Jose, CA (US); Joon Maeng, Newcastle, WA (US); Ramanathan Ramanathan, Bellevue, WA (US); Abhijit Rao, Irvine, CA (US); Abhijit Shetti, Pleasanton, CA (US); Rameshchandra Bhaskar Ketharaju, Hyderabad (IN); and Chandramouli Subramanian, San Ramon, CA (US)
Assigned to Wells Fargo Bank, N.A., San Francisco, CA (US)
Filed by Wells Fargo Bank, N.A., San Francisco, CA (US)
Filed on May 5, 2023, as Appl. No. 18/313,117.
Application 18/313,117 is a continuation of application No. 16/949,072, filed on Oct. 13, 2020, granted, now 11,669,627.
Prior Publication US 2023/0274019 A1, Aug. 31, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/62 (2013.01); G06F 9/451 (2018.01); G06F 21/31 (2013.01); G06F 21/60 (2013.01); G06F 21/78 (2013.01); G06F 21/10 (2013.01)
CPC G06F 21/6218 (2013.01) [G06F 9/451 (2018.02); G06F 21/31 (2013.01); G06F 21/602 (2013.01); G06F 21/78 (2013.01); G06F 21/1014 (2023.08); G06F 2221/2141 (2013.01); G06F 2221/2145 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, at a server device and from a requesting computing device associated with a requesting user, a request for a data item, the data item configured as a data structure, the data structure including:
an encrypted data payload;
metadata identifying a source of the payload and a time the data payload was captured;
a token, the token including an identification of an owner of the data item and access rights to the data payload; and
an initial value, the initial value representing a value with respect to the data item;
parsing, at the server device, the token to identify the owner of the data item;
transmitting the request for the data item to a computing device associated with the owner;
receiving a response from the computing device associated with the owner, the response indicating the requesting user may access the data item; and
in response to the response from the computing device associated with the owner:
transmitting a decryption key to the requesting computing device for the encrypted data payload;
updating, within the token, the access rights to the data payload to indicate the requesting user has access to the data item; and
updating, within the token, the access rights to the data payload to include an access condition, the access condition identifying a time limit for the access.