IP Library Granted Patent US 11,843,702
Granted Patent B2
US 11,843,702 · App. 16/953,724 · Granted Dec 12, 2023

System and method for secure distribution of resource transfer request data

Inventors: Milos Dunjic (Oakville, CA); Asad Joheb (Toronto, CA); David Samuel Tax (Toronto, CA)
Assignee: The Toronto-Dominion Bank
H04L9/3247G06F9/5011
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,843,702
App. No.
16/953,724
Granted
Dec 12, 2023
Kind
B2
Abstract

A processor-implemented method is disclosed. The method includes: generating a secure data object associated with a request for transfer of resources, the secure data object indicating one or more resource transfer parameters including account information for a transferee account at a resource account management system, wherein the secure data object includes a first hash computed based on the one or more resource transfer parameters; signing the secure data object using a private key associated with the resource account management system; and sending the secure data object to a messaging address associated with a transferor of the requested resources.

Claims (46)

1. A computing device, comprising:

a processor; and

a memory coupled to the processor, the memory storing computer-executable instructions that, when executed by the processor, configure the processor to:

receive, via a client device, a resource transfer request from a transferee for resources to be transferred from a transferor account to a transferee account;

generate a secure data object for forwarding to a transferor associated with the transferor account based on request data of the resource transfer request, the secure data object indicating one or more resource transfer parameters including account information for the transferee account, wherein the secure data object includes a first hash computed based on an input string concatenating at least a unique transfer identifier and a transferee account identifier;

sign the secure data object using a private key of a transferee resource account management system; and

send the signed secure data object to a messaging address of the transferor associated with the transferor account.

2. The computing device of claim 1 , wherein the instructions, when executed, further configure the processor to:

validate the secure data object by:

verifying that a signature associated with the secure data object is valid using a public key corresponding to the private key of the transferee resource account management system; and

computing a second hash based on the one or more resource transfer parameters included in the secure data object and comparing the second hash to the first hash to confirm that the one or more resource transfer parameters have not been modified after the signing.

3. The computing device of claim 2 , wherein validating the secure data object further comprises confirming that a unique identifier included in the secure data object has not been used previously.

4. The computing device of claim 3 , wherein confirming that the unique identifier has not been used previously comprises sending a request to the transferee resource account management system to confirm that no resource transfers to accounts at the transferee resource account management system have been processed using the unique identifier.

5. The computing device of claim 2 , wherein the instructions, when executed, further configure the processor to:

after verifying that the signature associated with the secure data object is valid, configure a transfer of the requested resources from the transferor account to the transferee account identified by the account information using a real-time resource transfer rail.

6. The computing device of claim 5 , wherein the secure data object indicates a quantity of resources associated with the resource transfer and wherein configuring the transfer comprises configuring a transfer of the quantity of resources identified in the secure data object.

7. The computing device of claim 5 , wherein the secure data object includes a unique identifier and wherein configuring the transfer comprises embedding the unique identifier in transfer data associated with the resource transfer.

8. The computing device of claim 5 , wherein the instructions, when executed, further configure the processor to provide, to a computing device associated with the transferor, identification information for a transferee that is identified in the secure data object.

9. The computing device of claim 1 , wherein the secure data object includes a unique identifier and wherein the first hash is computed based, in part, on the unique identifier.

10. The computing device of claim 1 , wherein generating the secure data object comprises obtaining the account information for the transferee account directly from the transferee resource account management system.

11. A computer-implemented method, comprising:

receiving, via a client device, a resource transfer request from a transferee for resources to be transferred from a transferor account to a transferee account;

generating a secure data object for forwarding to a transferor associated with the transferor account based on request data of the resource transfer request, the secure data object indicating one or more resource transfer parameters including account information for the transferee account, wherein the secure data object includes a first hash computed based on an input string concatenating at least a unique transfer identifier and a transferee account identifier;

signing the secure data object using a private key of a transferee resource account management system; and

sending the signed secure data object to a messaging address of a transferor associated with the transferor account.

12. The method of claim 11 , further comprising:

validating the secure data object by:

verifying that a signature associated with the secure data object is valid using a public key corresponding to the private key of the transferee resource account management system; and

computing a second hash based on the one or more resource transfer parameters included in the secure data object and comparing the second hash to the first hash to confirm that the one or more resource transfer parameters have not been modified after the signing.

13. The method of claim 12 , wherein validating the secure data object further comprises confirming that a unique identifier included in the secure data object has not been used previously.

14. The method of claim 13 , wherein confirming that the unique identifier has not been used previously comprises sending a request to the transferee resource account management system to confirm that no resource transfers to accounts at the transferee resource account management system have been processed using the unique identifier.

15. The method of claim 12 , further comprising:

after verifying that the signature associated with the secure data object is valid, configure a transfer of the requested resources from the transferor account to the transferee account identified by the account information using a real-time resource transfer rail.

16. The method of claim 15 , wherein the secure data object indicates a quantity of resources associated with the resource transfer and wherein configuring the transfer comprises configuring a transfer of the quantity of resources identified in the secure data object.

17. The method of claim 15 , wherein the secure data object includes a unique identifier and wherein configuring the transfer comprises embedding the unique identifier in transfer data associated with the resource transfer.

18. The method of claim 11 , wherein the secure data object includes a unique identifier and wherein the first hash is computed based, in part, on the unique identifier.

19. The method of claim 11 , wherein generating the secure data object comprises obtaining the account information for the transferee account directly from the transferee resource account management system.

20. A computer-implemented method, comprising:

at a transferee resource account management system:

generating a secure data object for forwarding to a transferor associated with the transferor account based on request data of a resource transfer request for resources to be transferred from a transferor account to a transferee account at the first resource account management system, the secure data object indicating one or more resource transfer parameters including account information for the transferee account, wherein the secure data object includes a first hash computed based on an input string concatenating at least a unique transfer identifier and a transferee account identifier;

signing the secure data object using a private key of the first resource account management system; and

sending the secure data object to a messaging address of a transferor associated with the transferor account;

at a transferor resource account management system:

validating the secure data object by:

verifying that a signature associated with the secure data object is valid using a public key corresponding to the private key of the first resource account management system; and

computing a second hash based on the one or more resource transfer parameters included in the secure data object and comparing the second hash to the first hash to confirm that the one or more resource transfer parameters have not been modified after the signing.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 9, 2023
From: DUNJIC, MILOS; JOHEB, ASAD; TAX, DAVID SAMUEL
To: THE TORONTO-DOMINION BANK
Reel/Frame 064543/0564 →
Continuity (1)
Related Publication 20220166629A1 · May 26, 2022