US 12,488,347 B2
Increased network security using a secure token exchange
Skyler Nesheim, Des Moines, IA (US); Nicholas Leeper, Des Moines, IA (US); and Nicholas Schulze, Des Moines, IA (US)
Assigned to DWOLLA, INC., Windsor Heights, IA (US)
Filed by Dwolla, Inc., Des Moines, IA (US)
Filed on May 5, 2023, as Appl. No. 18/143,901.
Prior Publication US 2024/0370868 A1, Nov. 7, 2024
Int. Cl. G06Q 20/40 (2012.01); G06Q 20/10 (2012.01)
CPC G06Q 20/4014 (2013.01) [G06Q 20/108 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method for securely transmitting sensitive information between services over a network, comprising:
receiving, at a client application executing on one or more first computing devices, a token from a token-originating service, wherein:
the token corresponds to certain sensitive information that is available from the token-originating service,
the token-originating service provides an application programming interface (API), and
the client application requests the token via the API;
sending the token from the client application to a target service executing on one or more second computing devices, wherein the target service requires the certain sensitive information to perform a particular action, and wherein the target service includes a plurality of client simulators;
selecting, by the client application, a particular client simulator from the plurality of client simulators based on the particular client simulator supporting the API provided by the token-originating service;
the target service causing the particular client simulator to use the token to obtain the certain sensitive information from the token-originating service via the API in a secure service-to-service communication over the network without exposing the certain sensitive information to the client application; and
after obtaining the certain sensitive information from the token-originating service, the target service using the certain sensitive information to perform the particular action.