IP Library › Granted Patent US 11,880,479
Granted Patent B2
US 11,880,479 · App. 17/395,046 · Granted Jan 23, 2024

Access control for updating documents in a digital document repository

Inventors: Beverley Claire Morgan (Wrexham, GB); Amanda Jane Adams (Flint, GB)
Assignee: Bank of America Corporation
G06F21/6218G06F16/93G06K7/1417G06K19/06037H04L9/30H04L9/3242H04L9/3247G06F21/6209
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,880,479
App. No.
17/395,046
Granted
Jan 23, 2024
Kind
B2
Abstract

A device configured to identify a first digital document in a digital document repository, to identify a first graphical code that represents the first digital document, and to send the first graphical code to an approved user device. The device is further configured to obtain a second graphical code that represents a public encryption key for the organization and to extract the public encryption key for an organization from the second graphical code. The device is further configured to obtain a third graphical code from the approved user device. The third graphical code represents a second digital document comprising data and a digital signature that was signed using a private encryption key for the organization. The device is further configured to determine the third graphical code passes validation using the public encryption key for the organization and to store the second digital document in a digital document repository.

Claims (79)

1. A digital document storing device, comprising:

a memory operable to store a digital document repository comprising a plurality of digital documents; and

a processor operably coupled to the memory, configured to:

identify a first digital document that is associated with an organization within the digital document repository;

identify a first graphical code, wherein the first graphical code is an encoded graphical representation of the first digital document;

send the first graphical code to an approved user device;

obtain a second graphical code, wherein the second graphical code is an encoded graphical representation of a public encryption key for the organization;

extract the public encryption key for the organization from the second graphical code;

obtain a third graphical code from the approved user device, wherein the third graphical code is an encoded graphical representation of a second digital document comprising data and a digital signature that was signed using a private encryption key for the organization;

extract the second digital document from the third graphical code;

validate the third graphical code using the public encryption key for the organization;

determine the third graphical code passes validation using the public encryption key for the organization; and

store the second digital document in the digital document repository.

2. The device of claim 1 , wherein:

the first graphical code is a first Quick Response (QR) code;

the second graphical code is a second QR code; and

the third graphical code is a third QR code.

3. The device of claim 1 , wherein validating the third graphical code comprises:

performing a hashing operation on the data to generate a first hash;

decrypting the digital signature using the public encryption key to recover a second hash;

comparing the first hash and the second hash; and

determining the third graphical code is valid when then first hash matches the second hash.

4. The device of claim 1 , wherein the processor is further configured to:

generate a copy of the second digital document; and

send the copy of the second digital document to a second device.

5. The device of claim 1 , wherein extracting the second digital document from the third graphical code comprises converting the third graphical code into text.

6. The device of claim 1 , wherein the data identifies one or more items that are associated with the organization.

7. The device of claim 1 , wherein the second digital document is a modified version of the first digital document.

8. A digital document storing method, comprising:

identifying a first digital document that is associated with an organization within a digital document repository;

identifying a first graphical code, wherein the first graphical code is an encoded graphical representation of the first digital document;

sending the first graphical code to an approved user device;

obtaining a second graphical code, wherein the second graphical code is an encoded graphical representation of a public encryption key for the organization;

extracting the public encryption key for the organization from the second graphical code;

obtaining a third graphical code from the approved user device, wherein the third graphical code is an encoded graphical representation of a second digital document comprising data and a digital signature that was signed using a private encryption key for the organization;

extracting the second digital document from the third graphical code;

validating the third graphical code using the public encryption key for the organization;

determining the third graphical code passes validation using the public encryption key for the organization; and

storing the second digital document in the digital document repository.

9. The method of claim 8 , wherein:

the first graphical code is a first Quick Response (QR) code;

the second graphical code is a second QR code; and

the third graphical code is a third QR code.

10. The method of claim 8 , wherein validating the third graphical code comprises:

performing a hashing operation on the data to generate a first hash;

decrypting the digital signature using the public encryption key to recover a second hash;

comparing the first hash and the second hash; and

determining the third graphical code is valid when then first hash matches the second hash.

11. The method of claim 8 , further comprising:

generating a copy of the second digital document; and

sending the copy of the second digital document to a second device.

12. The method of claim 8 , wherein extracting the second digital document from the third graphical code comprises converting the third graphical code into text.

13. The method of claim 8 , wherein the data identifies one or more items that are associated with the organization.

14. The method of claim 8 , wherein the second digital document is a modified version of the first digital document.

15. A non-transitory computer-readable medium storing instructions that when executed by a processor cause the processor to:

identify a first digital document that is associated with an organization within a digital document repository;

identify a first graphical code, wherein the first graphical code is an encoded graphical representation of the first digital document;

send the first graphical code to an approved user device;

obtain a second graphical code, wherein the second graphical code is an encoded graphical representation of a public encryption key for the organization;

extract the public encryption key for the organization from the second graphical code;

obtain a third graphical code from the approved user device, wherein the third graphical code is an encoded graphical representation of a second digital document comprising data and a digital signature that was signed using a private encryption key for the organization;

extract the second digital document from the third graphical code;

validate the third graphical code using the public encryption key for the organization;

determine the third graphical code passes validation using the public encryption key for the organization; and

store the second digital document in the digital document repository.

16. The non-transitory computer-readable medium of claim 15 , wherein:

the first graphical code is a first Quick Response (QR) code;

the second graphical code is a second QR code; and

the third graphical code is a third QR code.

17. The non-transitory computer-readable medium of claim 15 , wherein validating the third graphical code comprises:

performing a hashing operation on the data to generate a first hash;

decrypting the digital signature using the public encryption key to recover a second hash;

comparing the first hash and the second hash; and

determining the third graphical code is valid when then first hash matches the second hash.

18. The non-transitory computer-readable medium of claim 15 , wherein the instructions further cause the processor to:

generate a copy of the second digital document; and

send the copy of the second digital document to a second device.

19. The non-transitory computer-readable medium of claim 15 , wherein extracting the second digital document from the third graphical code comprises converting the third graphical code into text.

20. The non-transitory computer-readable medium of claim 15 , wherein the data identifies one or more items that are associated with the organization.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 5, 2021
From: MORGAN, BEVERLEY CLAIRE; ADAMS, AMANDA JANE
To: BANK OF AMERICA CORPORATION
Reel/Frame 057095/0584 →
Continuity (1)
Related Publication 20230037567A1 · Feb 9, 2023