IP Library Granted Patent US 12,561,677
Granted Patent B2
US 12,561,677 · App. 18/201,427 · Granted Feb 24, 2026

System and method for authentication of a resource transfer target after resource allocation

Inventors: Sanjay Arjun Lohar (Charlotte, NC); James J. Siekman (Charlotte, NC); Marabella Youkhaneh White (Charlotte, NC); Pamela Elizabeth Barnes (Waxhaw, NC); Nicholas Stephen Rose (Charlotte, NC)
Assignee: BANK OF AMERICA CORPORATION
G06Q20/3829G06Q20/02G06Q20/3825G06Q20/407
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,561,677
App. No.
18/201,427
Granted
Feb 24, 2026
Kind
B2
Abstract

A system is provided for authentication of a resource transfer target after resource allocation. In particular, the system may generate a secure token associated with the target of the resource transfer as part of a registration process. In this regard, the token may comprise various types of information regarding the target, which may include a cryptographic address associated with the target. Upon receiving a request to transfer a resource, the system may prompt the target to input information associated with the target and/or the resource transfer, and subsequently prompt the target to digitally sign a data record associated with the resource transfer using a private key associated with the target. Based on comparing the information provided by the user with the information obtained by the system in decrypting the data record, the system may perform authentication of the target.

Claims (67)

1 . A system for authentication of a resource transfer target after resource allocation, wherein the system is structured for maintaining resource security while structuring granular control of a resource transfer, the system comprising:

a processing device;

a non-transitory storage device containing instructions when executed by the processing device, causes the processing device to perform the steps of:

determining an initiation, via a user computing device of a user as a transferee, of a request within a virtual environment to execute a resource transfer of a resource, wherein a resource NFT associated with the resource is generated and stored on a distributed ledger, wherein determining the initiation of the request comprises identifying that the user has selected a virtual representation of the resource within the virtual environment;

receiving data and metadata associated with the resource transfer and the user, the data and metadata comprising a transferee identifier of the user and a resource identifier of the resource;

generating an asymmetric cryptographic key pair associated with a cryptographic address of the user, wherein the asymmetric cryptographic key pair comprises a private key structured for exclusive use by the user and a public key structured for transmission;

prompting the user computing device to digitally sign a data record on a distributed ledger using the private key associated with the user, the data record comprising a reference to a transferee NFT associated with the user on the distributed ledger;

performing verification of the data record by decrypting the data record using the public key associated with the cryptographic address of the user corresponding to the private key;

searching the distributed ledger for the transferee NFT using the transferee identifier and the resource NFT using the resource identifier;

authenticating the resource associated with the resource transfer based on at least metadata associated with the resource, wherein the metadata associated with the resource is located within the resource NFT associated with the resource, wherein the authentication of the resource comprises (i) determining the resource identifier located within the resource NFT of the resource, wherein the resource identifier comprises a cryptographic hash value associated with the resource, and (ii) performing on-chain verification of the resource identifier based on comparing the cryptographic hash value of the resource identifier with values of authorized resources stored on the distributed ledger; and

validating the data and metadata associated with the resource transfer and the user based on information stored in the transferee NFT.

2 . The system of claim 1 , wherein validating the data and metadata comprises:

detecting a match between the transferee identifier comprised in the request with the information stored within the transferee NFT; and

executing the resource transfer by facilitating transfer of the resource according to one or more parameters specified within the request to execute the resource transfer.

3 . The system of claim 1 , wherein validating the data and metadata comprises:

detecting a mismatch between the transferee identifier with the information stored within the transferee NFT;

executing one or more remediation processes, the one or more remediation processes comprising blocking the resource transfer; and

rejecting data records submitted from the user.

4 . The system of claim 3 , wherein the one or more remediation processes comprises transmitting a notification to the user computing device, the notification comprising an indication that the user is not authorized to execute the resource transfer.

5 . The system of claim 1 , wherein determining the initiation of the request within the virtual environment to execute the resource transfer further comprises:

identifying that the user has selected the virtual representation of the resource within the virtual environment; and

detecting that the user has interacted with a selectable element of the virtual representation of the resource within the virtual environment.

6 . The system of claim 5 , wherein the selectable element as a virtual button appearing proximate to the virtual representation of the resource.

7 . The system of claim 1 , wherein the data and metadata further comprise transaction timestamp, and a transferee address.

8 . A computer program product for authentication of a resource transfer target after resource allocation, wherein the computer program product is structured for maintaining resource security while structuring granular control of a resource transfer, the computer program product comprising a non-transitory computer-readable medium storing code instructions that, when executed by a processor of an apparatus, cause the processor to perform the steps of:

determining an initiation, via a user computing device of a user as a transferee, of a request within a virtual environment to execute a resource transfer of a resource, wherein a resource NFT associated with the resource is generated and stored on a distributed ledger, wherein determining the initiation of the request comprises identifying that the user has selected a virtual representation of the resource within the virtual environment;

receiving data and metadata associated with the resource transfer and the user, the data and metadata comprising a transferee identifier of the user and a resource identifier of the resource;

generating an asymmetric cryptographic key pair associated with a cryptographic address of the user, wherein the asymmetric cryptographic key pair comprises a private key structured for exclusive use by the user and a public key structured for transmission;

prompting the user computing device to digitally sign a data record on a distributed ledger using the private key associated with the user, the data record comprising a reference to a transferee NFT associated with the user on the distributed ledger;

performing verification of the data record by decrypting the data record using the public key associated with the cryptographic address of the user corresponding to the private key;

searching the distributed ledger for the transferee NFT using the transferee identifier and the resource NFT using the resource identifier;

authenticating the resource associated with the resource transfer based on at least metadata associated with the resource, wherein the metadata associated with the resource is located within the resource NFT associated with the resource, wherein the authentication of the resource comprises (i) determining the resource identifier located within the resource NFT of the resource, wherein the resource identifier comprises a cryptographic hash value associated with the resource, and (ii) performing on-chain verification of the resource identifier based on comparing the cryptographic hash value of the resource identifier with values of authorized resources stored on the distributed ledger; and

validating the data and metadata associated with the resource transfer and the user based on information stored in the transferee NFT.

9 . The computer program product of claim 8 , wherein validating the data and metadata comprises:

detecting a match between the transferee identifier with the information stored within the transferee NFT; and

executing the resource transfer by facilitating transfer of the resource according to one or more parameters specified within the request to execute the resource transfer.

10 . The computer program product of claim 8 , wherein validating the data and metadata comprises:

detecting a mismatch between the transferee identifier with the information stored within the transferee NFT;

executing one or more remediation processes, the one or more remediation processes comprising blocking the resource transfer; and

rejecting data records submitted from the user.

11 . The computer program product of claim 10 , wherein the one or more remediation processes comprises transmitting a notification to the user computing device, the notification comprising an indication that the user is not authorized to execute the resource transfer.

12 . The computer program product of claim 8 , wherein determining the initiation of the request within the virtual environment to execute the resource transfer further comprises:

identifying that the user has selected the virtual representation of the resource within the virtual environment; and

detecting that the user has interacted with a selectable element of a virtual representation of the resource within the virtual environment.

13 . The computer program product of claim 12 , wherein the selectable element as a virtual button appearing proximate to the virtual representation of the resource.

14 . A computer-implemented method for authentication of a resource transfer target after resource allocation, wherein the computer-implemented method is structured for maintaining resource security while structuring granular control of a resource transfer, the computer-implemented method comprising steps performed by an apparatus:

determining an initiation, via a user computing device of a user as a transferee, of a request within a virtual environment to execute a resource transfer of a resource, wherein a resource NFT associated with the resource is generated and stored on a distributed ledger, wherein determining the initiation of the request comprises identifying that the user has selected a virtual representation of the resource within the virtual environment;

receiving data and metadata associated with the resource transfer and the user, the data and metadata comprising a transferee identifier of the user and a resource identifier of the resource;

generating an asymmetric cryptographic key pair associated with a cryptographic address of the user, wherein the asymmetric cryptographic key pair comprises a private key structured for exclusive use by the user and a public key structured for transmission;

prompting the user computing device to digitally sign a data record on the distributed ledger using the private key associated with the user, the data record comprising a reference to a transferee NFT associated with the user on the distributed ledger;

performing verification of the data record by decrypting the data record using the public key associated with the cryptographic address of the user corresponding to the private key;

searching the distributed ledger for the transferee NFT using the transferee identifier and the resource NFT using the resource identifier;

authenticating the resource associated with the resource transfer based on at least metadata associated with the resource, wherein the metadata associated with the resource is located within the resource NFT associated with the resource, wherein the authentication of the resource comprises (i) determining the resource identifier located within the resource NFT of the resource, wherein the resource identifier comprises a cryptographic hash value associated with the resource, and (ii) performing on-chain verification of the resource identifier based on comparing the cryptographic hash value of the resource identifier with values of authorized resources stored on the distributed ledger; and

validating the data and metadata associated with the resource transfer and the user based on information stored in the transferee NFT.

15 . The computer-implemented method of claim 14 , wherein validating the data and metadata comprises:

detecting a match between the transferee identifier with the information stored within the transferee NFT; and

executing the resource transfer by facilitating transfer of the resource according to one or more parameters specified within the request to execute the resource transfer.

16 . The computer-implemented method of claim 14 , wherein validating the data and metadata comprises:

detecting a mismatch between the transferee identifier with the information stored within the transferee NFT;

executing one or more remediation processes, the one or more remediation processes comprising blocking the resource transfer; and

rejecting data records submitted from the user.

17 . The computer-implemented method of claim 16 , wherein the one or more remediation processes comprises transmitting a notification to the user computing device, the notification comprising an indication that the user is not authorized to execute the resource transfer.

18 . The computer-implemented method of claim 14 , wherein determining the initiation of the request within the virtual environment to execute the resource transfer further comprises:

identifying that the user has selected the virtual representation of the resource within the virtual environment; and

detecting that the user has interacted with a selectable element of a virtual representation of the resource within the virtual environment.

19 . The computer-implemented method of claim 18 , wherein the selectable element as a virtual button appearing proximate to the virtual representation of the resource.

20 . The computer-implemented method of claim 14 , wherein the data and metadata further comprise transaction timestamp, and a transferee address.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 24, 2023
From: LOHAR, SANJAY ARJUN; SIEKMAN, JAMES J.; WHITE, MARABELLA YOUKHANEH; BARNES, PAMELA ELIZABETH; ROSE, NICHOLAS STEPHEN
To: BANK OF AMERICA CORPORATION
Reel/Frame 063749/0668 →
Continuity (1)
Related Publication 20240394692A1 · Nov 28, 2024
References Cited (29)
US 8194646B2 · Elliott · 2012 [cited by applicant]
US 8429630B2 · Nickolov · 2013 [cited by applicant]
US 8463749B2 · Zizys · 2013 [cited by applicant]
US 8934373B2 · Smith · 2015 [cited by applicant]
US 9288155B2 · Uehara · 2016 [cited by applicant]
US 9813924B2 · Smith · 2017 [cited by applicant]
US 10149121B2 · Kim · 2018 [cited by applicant]
US 10582522B2 · Cho · 2020 [cited by applicant]
US 10694383B2 · Cho · 2020 [cited by applicant]
US 10833865B2 · Kelly · 2020 [cited by applicant]
US 10985934B2 · Shribman · 2021 [cited by applicant]
US 11316254B2 · Kim · 2022 [cited by applicant]
US 11452001B2 · Liao · 2022 [cited by applicant]
US 11452163B2 · Park · 2022 [cited by applicant]
US 11490291B2 · Talebi Fard · 2022 [cited by applicant]
US 11523319B2 · Ryu · 2022 [cited by applicant]
US 12175454B1 · Kurani · 2024 [cited by examiner]
US 12204671B2 · Jurat · 2025 [cited by examiner]
US 12294651B2 · Collen · 2025 [cited by examiner]
US 20190132138A1 · Finlow-Bates · 2019 [cited by examiner]
US 20210022024A1 · Yao · 2021 [cited by applicant]
US 20220021552A1 · Ansari · 2022 [cited by applicant]
US 20220132603A1 · Adjakple · 2022 [cited by applicant]
US 20220166586A1 · Kundu · 2022 [cited by applicant]
US 20220201638A1 · Arrobo Vidal · 2022 [cited by applicant]
US 20230089937A1 · Singh · 2023 [cited by examiner]
US 20230104103A1 · Eby · 2023 [cited by examiner]
US 20230186291A1 · Haddad · 2023 [cited by examiner]
US 20230252733A1 · Herrity · 2023 [cited by examiner]