IP Library › Granted Patent US 12712866
Granted Patent B2
US 12712866 · App. 18/634,718 · Granted Aug 18, 2026

Apparatus and method for managing credentials

Inventors: Madeleine Lucy Fraser Brown (Pittsburgh, PA); Aleksandar Milicevic (San Diego, CA); Andres Philipp Noetzli (Palo Alto, CA); John Michael Renner (Arlington, VA); Deian Stefan (San Diego, CA); Riad Samir Wahby (Pittsburgh, PA)
Assignee: Cubist, Inc.
H04L63/08H04L63/101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12712866
App. No.
18/634,718
Granted
Aug 18, 2026
Kind
B2
Abstract

In an aspect, an apparatus for managing credentials is presented. The apparatus includes a processor and a memory communicatively connected to the processor. The memory contains instructions configuring the processor to receive a user request. The processor is configured to authenticate the user request through an authentication module. The processor is configured to combine the authentication data with the user request to generate an authentication request. The processor is configured to communicate the authentication request to an authorization module. The processor is configured to authorize the user request at the authorization module based on the authentication data. The processor is configured to sign the user request to generate a user signature, wherein the user signature provides a user with access to an immutable sequential listing.

Claims (48)

1 . An apparatus for managing credentials, comprising:

a processor; and

a memory communicatively connected to the processor, the memory containing instructions configuring the processor to:

receive a user request;

authenticate the user request through an authentication module;

combine authentication data with the user request to generate an authentication request;

communicate the authentication request to an authorization module;

authorize the user request at the authorization module based on the authentication data;

sign the user request to generate a user signature; and

provide a user device access to an immutable sequential listing based on the user signature.

2 . The apparatus of claim 1 , wherein the user signature is generated for a type of immutable sequential listing.

3 . The apparatus of claim 1 , wherein the processor is further configured to generate a proxy server, wherein the proxy server is configured to communicate the user signature between an off-chain node and an on-chain node.

4 . The apparatus of claim 1 , wherein the processor is further configured to key-wrap the user signature with a symmetric key-wrapping key inside a physical hardware security module (HSM).

5 . The apparatus of claim 4 , wherein the processor is further configured to cryptographically seal the user signature to the HSM.

6 . The apparatus of claim 1 , further comprising a trusted platform module (TPM) in communication with the processor, wherein the TPM is configured to store the user signature.

7 . The apparatus of claim 1 , wherein the processor is further configured to provide the user signature through an application programming interface (API).

8 . The apparatus of claim 1 , wherein the processor is further configured to:

receive the user request;

identify, at a request handler, bytes to be signed based on a handle of the user request; and

sign the bytes to be signed based on the handle of the user request.

9 . The apparatus of claim 1 , wherein the processor is further configured to:

generate an access control list; and

modify access to the user signature based on the access control list.

10 . The apparatus of claim 1 , wherein the authentication module includes a local authentication proxy.

11 . A method for managing credentials using a computing device, comprising:

receiving a user request;

authenticating the user request through an authentication module;

combining authentication data with the user request to generate an authentication request;

communicating the authentication request to an authorization module;

authorizing the user request at the authorization module based on the authentication data;

signing the user request to generate a user signature; and

providing a user device access to an immutable sequential listing based on the user signature.

12 . The method of claim 11 , wherein signing the user request to generate the user signature comprises signing the user request to generate the user signature for a type of immutable sequential listing.

13 . The method of claim 11 , further comprising:

generating a proxy server; and

communicating the user signature between an off-chain node and an on-chain node through the proxy server.

14 . The method of claim 11 , further comprising key-wrapping the user signature with a symmetric key-wrapping key inside a physical hardware security module (HSM).

15 . The method of claim 14 , further comprising cryptographically sealing the user signature to the HSM.

16 . The method of claim 11 , further comprising storing the user signature in a trusted platform module (TPM).

17 . The method of claim 11 , further comprising providing the user signature to a computing device through an application programming interface (API).

18 . The method of claim 11 , further comprising:

receiving the user request;

identifying, at a request handler, bytes to be signed based on a handle of the user request; and

signing the bytes to be signed based on the handle of the user request.

19 . The method of claim 11 , further comprising:

generating an access control list; and

modifying access to the user signature based on the access control list.

20 . The method of claim 11 , wherein the authentication module includes a local authentication proxy.