IP Library Granted Patent US 12,411,973
Granted Patent B2
US 12,411,973 · App. 18/504,824 · Granted Sep 9, 2025

System and method for enhanced encryption orchestration and application integration framework

Inventors: Maharaj Mukherjee (Poughkeepsie, NY); Dihong Qiu (Plainsboro, NJ); Sanjeeb Kumar Sahoo (Jersey City, NJ); Venkat P. Ravula (South Brunswick, NJ); Veerandra S. Srivastava (Plainsboro, NJ); Riazuddin Khaja (Fuquay Varina, NC); Swetha Guddannagari (Princeton, NJ); Mayank Sharma (Edison, NJ); Esada Qazi (Roseland, NJ)
Assignee: BANK OF AMERICA CORPORATION
G06F21/6218G06F9/547G06F21/602
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,411,973
App. No.
18/504,824
Granted
Sep 9, 2025
Kind
B2
Abstract

Systems, computer program products, and methods are described herein for enhanced encryption orchestration and application integration frameworks. The system performs steps of initializing a broker application to act as a data security broker within a computing environment; providing an application programming interface (API) for external application interaction; receiving and processing requests via the API for access to encrypted code and data; containerizing the code and data within an isolated environment, subject to predefined rules; monitoring usage to ensure adherence to these rules; initiating self-destruction of the container upon reaching a predetermined usage limit or condition; and securely erasing all sensitive data and code after usage completion.

Claims (43)

1. A system for enhanced encryption orchestration and application integration frameworks, the system comprising:

a processing device;

a non-transitory storage device containing instructions when executed by the processing device, causes the processing device to perform the steps of:

initializing a broker application to act as a data security broker within a computing environment;

providing an application programming interface (API) through the broker application for external application interaction;

receiving and processing a request from an external application via the provided API for access to encrypted code and data;

containerizing the encrypted code and data within an isolated environment, wherein the container is subject to predefined rules governing access and usage;

monitoring usage of containerized code and data to ensure adherence to the predefined rules governing access and usage;

initiating self-destruction of the container upon reaching a predetermined usage limit or condition; and

securely erasing all sensitive data and code after use.

2. The system of claim 1 , wherein the system is further configured to: generate a unique encryption key for each instance of code and data interaction, disseminating the key to the calling application via the provided API.

3. The system of claim 1 , wherein the system is further configured to: implement predefined rules within each container of the containerized code and data, dictating conditions for accessing and using the contents.

4. The system of claim 3 , wherein the conditions for accessing and using the contents further comprise a limited number of accesses or application-specific access to the contents.

5. The system of claim 1 , wherein the system is further configured to: allow for configurable usage limits on the containerized code and data, wherein the limits are defined based on number of uses or time-based criteria.

6. The system of claim 1 , wherein the system is further configured to: utilize cloud-based environments and services to host the broker application.

7. The system of claim 1 , wherein the system is further configured to: provide a logging mechanism, documenting all interactions with the containerized code and data, including access requests, usage patterns, and self-destruction events.

8. A computer program product for enhanced encryption orchestration and application integration frameworks, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to:

initialize a broker application to act as a data security broker within a computing environment;

provide an application programming interface (API) through the broker application for external application interaction;

receive and process a request from an external application via the provided API for access to encrypted code and data;

containerize the encrypted code and data within an isolated environment, wherein the container is subject to predefined rules governing access and usage;

monitor usage of containerized code and data to ensure adherence to the predefined rules governing access and usage;

initiate self-destruction of the container upon reaching a predetermined usage limit or condition; and

securely erase all sensitive data and code after use.

9. The computer program product of claim 8 , wherein the code further causes the apparatus to: generate a unique encryption key for each instance of code and data interaction, disseminating the key to a calling application via the provided API.

10. The computer program product of claim 8 , wherein the code further causes the apparatus to: implement predefined rules within each container of the containerized code and data, dictating conditions for accessing and using the contents.

11. The computer program product of claim 10 , wherein the conditions for accessing and using the contents further comprise a limited number of accesses or application-specific access to the contents.

12. The computer program product of claim 8 , wherein the code further causes the apparatus to: allow for configurable usage limits on the containerized code and data, wherein the limits are defined based on number of uses or time-based criteria.

13. The computer program product of claim 8 , wherein the code further causes the apparatus to: utilize cloud-based environments and services to host the broker application.

14. The computer program product of claim 8 , wherein the code further causes the apparatus to: provide a logging mechanism, documenting all interactions with the containerized code and data, including access requests, usage patterns, and self-destruction events.

15. A method for enhanced encryption orchestration and application integration frameworks, the method comprising:

initializing a broker application to act as a data security broker within a computing environment;

providing an application programming interface (API) through the broker application for external application interaction;

receiving and processing a request from an external application via the provided API for access to encrypted code and data;

containerizing the encrypted code and data within an isolated environment, wherein the container is subject to predefined rules governing access and usage;

monitoring usage of containerized code and data to ensure adherence to the predefined rules governing access and usage;

initiating self-destruction of the container upon reaching a predetermined usage limit or condition; and

securely erasing all sensitive data and code after use.

16. The method of claim 15 , wherein the method further comprises: generating a unique encryption key for each instance of code and data interaction, disseminating the key to a calling application via the provided API.

17. The method of claim 15 , wherein the method further comprises: implementing predefined rules within each container of the containerized code and data, dictating conditions for accessing and using the contents.

18. The method of claim 16 , wherein the conditions for accessing and using the contents further comprise a limited number of accesses or application-specific access to the contents.

19. The method of claim 15 , wherein the method further comprises: allowing for configurable usage limits on the containerized code and data, wherein the limits are defined based on number of uses or time-based criteria.

20. The method of claim 15 , wherein the method further comprises: providing a logging mechanism, documenting all interactions with the containerized code and data, including access requests, usage patterns, and self-destruction events.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 8, 2023
From: MUKHERJEE, MAHARAJ; QIU, DIHONG; SAHOO, SANJEEB KUMAR; RAVULA, VENKAT P.; SRIVASTAVA, VEERANDRA S.; KHAJA, RIAZUDDIN; GUDDANNAGARI, SWETHA; SHARMA, MAYANK; QAZI, ESADA
To: BANK OF AMERICA CORPORATION
Reel/Frame 065523/0262 →
Continuity (1)
Related Publication 20250148109A1 · May 8, 2025
References Cited (31)
US 9300639B1 · Roth · 2016 [cited by applicant]
US 9438579B2 · Evans · 2016 [cited by applicant]
US 9459925B2 · Lawson · 2016 [cited by applicant]
US 9547771B2 · Roth · 2017 [cited by applicant]
US 9805206B2 · Gounares · 2017 [cited by examiner]
US 9875372B2 · Stuntebeck · 2018 [cited by examiner]
US 9887975B1 · Gifford · 2018 [cited by applicant]
US 10090998B2 · Roth · 2018 [cited by applicant]
US 10210341B2 · Roth · 2019 [cited by applicant]
US 10404670B2 · Roth · 2019 [cited by applicant]
US 10474829B2 · Roth · 2019 [cited by applicant]
US 10769287B2 · Roth · 2020 [cited by applicant]
US 10826708B2 · Campagna · 2020 [cited by applicant]
US 11226945B2 · Smart · 2022 [cited by applicant]
US 11323479B2 · Roth · 2022 [cited by applicant]
US 11372993B2 · Roth · 2022 [cited by applicant]
US 11431757B2 · Roth · 2022 [cited by applicant]
US 11470054B2 · Roth · 2022 [cited by applicant]
US 11546156B1 · Hendry · 2023 [cited by applicant]
US 11695555B2 · Roth · 2023 [cited by applicant]
US 11750609B2 · Gilpin · 2023 [cited by applicant]
US 11803658B1 · Jonak · 2023 [cited by examiner]
US 11924165B2 · McDowall · 2024 [cited by examiner]
US 11991155B2 · Ackerly · 2024 [cited by examiner]
US 20140229732A1 · Roth · 2014 [cited by applicant]
US 20160357424A1 · Pang · 2016 [cited by examiner]
US 20200142725A1 · Resende · 2020 [cited by examiner]
US 20210026700A1 · Manickam · 2021 [cited by examiner]
US 20210281548A1 · Ackerly · 2021 [cited by examiner]
US 20240272947A1 · Kumar · 2024 [cited by examiner]
US 20240289189A1 · More · 2024 [cited by examiner]