IP Library › Granted Patent US 11,399,015
Granted Patent B2
US 11,399,015 · App. 16/437,598 · Granted Jul 26, 2022

Data security tool

Inventors: Jo-Ann Taylor (Godalming, GB); Manu Jacob Kurian (Dallas, TX); Michael Robert Young (Davidson, NC)
Assignee: Bank of America Corporation
H04L63/0428H04L9/0861H04L9/321
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,399,015
App. No.
16/437,598
Granted
Jul 26, 2022
Kind
B2
Abstract

An apparatus includes a memory and a hardware processor. The memory stores identification information of a user. The processor receives from a device a request for the identification information of the user and in response to the request, appends a data element to the identification information to produce a protected message. The processor also encrypts the protected message to produce an encrypted message and communicates the encrypted message to the device. The data element executes in response to the encrypted message being decrypted, and the data element encrypts the identification information when the data element executes.

Claims (63)

1. An apparatus comprising:

a memory configured to store identification information of a user; and

a hardware processor communicatively coupled to the memory, the hardware processor configured to:

receive from a device a request for the identification information of the user;

in response to the request, append a data element to the identification information to produce a protected message, the data element comprising executable software code;

encrypt the protected message to produce an encrypted message; and

communicate the encrypted message to the device;

detect that the device attempts to decrypt the encrypted message, wherein the data element executes the executable software code in response to the encrypted message being decrypted and wherein the data element encrypts the identification information when the executable software code of the data element executes;

wherein:

the data element starts a timer when the data element executes; and the data element encrypts the identification information when the timer expires; and

in response to encrypting the identification information, the data element generates and communicates to the hardware processor a tag indicating that the identification information has been encrypted.

2. The apparatus of claim 1 , wherein:

the data element detects when the identification information has been accessed when the data element executes; and

the data element encrypts the identification information in response to detecting that the identification information has been accessed.

3. The apparatus of claim 1 , wherein the hardware processor is further configured to:

generate a key that can be used to decrypt the encrypted message; and

communicate the key to the device, wherein the data element encrypts the identification information in response to the device receiving the key.

4. The apparatus of claim 1 , wherein:

the data element executes in response to detecting that the encrypted message has been communicated by the device to a second device; and

the data element encrypts the identification information in response to detecting that the encrypted message has been communicated to the second device.

5. The apparatus of claim 1 , wherein the hardware processor is further configured to authenticate at least one of the device and the user before communicating the encrypted message to the device.

6. A method comprising:

storing, by a memory, identification information of a user; and

receiving, by a hardware processor communicatively coupled to the memory, from a device a request for the identification information of the user;

in response to the request, appending, by the hardware processor, a data element to the identification information to produce a protected message, the data element comprising executable software code;

encrypting, by the hardware processor, the protected message to produce an encrypted message;

communicating, by the hardware processor, the encrypted message to the device;

decrypting, by the device, the encrypted message;

executing the executable software code of the data element in response to the encrypted message being decrypted; and

encrypting, by the data element, the identification information when the executable software code of the data element executes;

further comprising:

starting a timer when the data element executes, wherein the data element encrypts the identification information when the timer expires; and

generating a tag indicating that the identification information has been encrypted; and communicating, by the device, the tag to the hardware processor.

7. The method of claim 6 , further comprising detecting when the identification information has been accessed when the data element executes, wherein the data element encrypts the identification information in response to detecting that the identification information has been accessed.

8. The method of claim 6 , further comprising:

generating, by the hardware processor, a key that can be used to decrypt the encrypted message; and

communicating, by the hardware processor, the key to the device, wherein the data element encrypts the identification information in response to the device receiving the key.

9. The method of claim 6 , further comprising:

executing the data element in response to detecting that the encrypted message has been communicated by the device to a second device; and

encrypting the identification information in response to detecting that the encrypted message has been communicated to the second device.

10. The method of claim 6 , further comprising authenticating at least one of the device and the user before communicating the encrypted message to the device.

11. A system comprising:

a device;

a data security tool configured to:

store identification information of a user;

receive, from the device, a request for the identification information of the user;

in response to the request, append a data element to the identification information to produce a protected message, the data element comprising executable software code;

encrypt the protected message to produce an encrypted message; and

communicate the encrypted message to the device;

detect that the device attempts to decrypt the encrypted message, wherein the data element executes the executable software code on the device in response to the encrypted message being decrypted by the device and wherein the data element encrypts the identification information when the executable software code of the data element executes on the device;

wherein:

the data element starts a timer on the device when the data element executes; and the data element encrypts the identification information on the device when the timer expires; and

in response to encrypting the identification information, the data element generates and communicates to the data security tool a tag indicating that the identification information has been encrypted.

12. The system of claim 11 , wherein:

the data element detects when the identification information has been accessed on the device when the data element executes; and

the data element encrypts the identification information on the device in response to detecting that the identification information has been accessed.

13. The system of claim 11 , wherein the data security tool is further configured to:

generate a key that can be used to decrypt the encrypted message; and

communicate the key to the device, wherein the data element encrypts the identification information in response to the device receiving the key.

14. The system of claim 11 , wherein:

the data element executes in response to detecting that the encrypted message has been communicated by the device to a second device; and

the data element encrypts the identification information in response to detecting that the encrypted message has been communicated to the second device.

15. The system of claim 11 , wherein the data security tool is further configured to authenticate at least one of the device and the user before communicating the encrypted message to the device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 11, 2019
From: TAYLOR, JO-ANN; KURIAN, MANU JACOB; YOUNG, MICHAEL ROBERT
To: BANK OF AMERICA CORPORATION
Reel/Frame 049433/0742 →
Continuity (1)
Related Publication 20200396210A1 · Dec 17, 2020