IP Library Granted Patent US 12,401,510
Granted Patent B2
US 12,401,510 · App. 17/931,507 · Granted Aug 26, 2025

Systems and methods for user control and exclusion of cryptographic tokenized data

Inventors: Julian Duque (Arlington, VA); Purva Shanker (Arlington, VA); Samuel Rapowitz (Roswell, GA); Dennis Liu (Richmond, VA)
Assignee: Capital One Services, LLC
H04L9/3213H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,401,510
App. No.
17/931,507
Granted
Aug 26, 2025
Kind
B2
Abstract

The invention relates to generating cryptographic tokens based on received records. The system may receive a blockchain operation request comprising a plurality of records, encrypt a plurality of records into an encrypted payload, generate a cryptographic token based on the encrypted payload, and cause the cryptographic token to be committed to a blockchain.

Claims (95)

1. A system for generating cryptographic tokens based on received records, the system comprising:

one or more processors; and

one or more non-transitory, computer-readable media comprising instructions that, when executed by the one or more processors, cause operations comprising:

receiving a first blockchain operation request from a computing device, wherein the first blockchain operation request comprises a plurality of records and a first target address associated with a first cryptography-based storage application, and wherein each record of the plurality of records comprises an identifier of an item;

determining, based on the first target address, a first public key associated with the first cryptography-based storage application and encrypting the plurality of records into a first encrypted payload using the first public key;

generating, based on one or more characteristics associated with one or more items corresponding to one or more item identifiers that are retrievable based on one or more payload identifiers that include a payload identifier of the first encrypted payload and based on the first target address, a cryptographic token configured to be controlled by the first target address and enable access to the first encrypted payload for the first cryptography-based storage application associated with the first target address, wherein a characteristic, of the one or more characteristics, includes a designation relating one or more of a threshold, a criteria, or a requirement being satisfied to lead to a determination of the characteristic;

causing the cryptographic token to be committed to a blockchain;

receiving, from the computing device, a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application associated with a second target address, wherein the second blockchain operation request comprises the second target address;

transmitting a command to the computing device to decrypt the first encrypted payload, wherein the computing device decrypts the first encrypted payload using a first private key associated with the first cryptography-based storage application;

receiving the plurality of records from the computing device;

determining, based on the second target address, a second public key associated with the second cryptography-based storage application and encrypting the plurality of records into a second encrypted payload using the second public key; and

replacing the first encrypted payload with the second encrypted payload.

2. The system of claim 1 , wherein the instructions for generating the cryptographic token further cause the one or more processors to perform operations comprising:

setting the first target address as a controlling address for the cryptographic token; and

encoding the first encrypted payload into the cryptographic token.

3. The system of claim 1 , wherein the instructions for generating the cryptographic token further cause the one or more processors to perform operations comprising:

generating the payload identifier, wherein the payload identifier enables retrieval of the first encrypted payload;

storing the first encrypted payload in cloud storage in association with the payload identifier; and

encoding the payload identifier into the cryptographic token.

4. The system of claim 3 , wherein the instructions for replacing the first encrypted payload with the second encrypted payload further cause the one or more processors to perform operations comprising:

retrieving the payload identifier;

determining, based on the payload identifier, a location associated with the first encrypted payload; and

replacing, in the location associated with the first encrypted payload, the first encrypted payload with the second encrypted payload.

5. A method for generating cryptographic tokens based on received records, the method comprising:

receiving a blockchain operation request comprising a plurality of records, wherein each record of the plurality of records comprises an identifier of an item, and wherein the blockchain operation request is associated with a cryptography-based storage application;

encrypting the plurality of records into an encrypted payload using a public key associated with the cryptography-based storage application, wherein the encrypted payload is a first encrypted payload, and wherein the cryptography-based storage application is a first cryptography-based storage application;

generating, based on one or more characteristics associated with one or more items corresponding to one or more item identifiers that are retrievable based on one or more payload identifiers that include a payload identifier of the encrypted payload, a cryptographic token configured to be controlled by the cryptography-based storage application and enable access to the encrypted payload using the cryptography-based storage application, wherein a characteristic, of the one or more characteristics, includes a designation relating one or more of a threshold, a criteria, or a requirement being satisfied to lead to a determination of the characteristic;

causing the cryptographic token to be committed to a blockchain;

receiving, from a computing device, a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application associated with a second target address, wherein the second blockchain operation request comprises the second target address;

transmitting a command to the computing device to decrypt the first encrypted payload, wherein the computing device decrypts the first encrypted payload using a first private key associated with the first cryptography-based storage application;

receiving the plurality of records from the computing device;

determining, based on the second target address, a second public key associated with the second cryptography-based storage application and encrypting the plurality of records into a second encrypted payload using the second public key; and

replacing the first encrypted payload with the second encrypted payload.

6. The method of claim 5 , further comprising determining, based on a key identifier associated with the cryptography-based storage application, the public key associated with the cryptography-based storage application.

7. The method of claim 5 , wherein generating the cryptographic token comprises:

setting an address associated with the cryptography-based storage application as a controlling address for the cryptographic token; and

encoding the encrypted payload into the cryptographic token.

8. The method of claim 5 , wherein generating the cryptographic token comprises:

generating the payload identifier, wherein the payload identifier enables retrieval of the encrypted payload;

storing the encrypted payload in cloud storage in association with the payload identifier; and

encoding the payload identifier into the cryptographic token.

9. The method of claim 8 , further comprising:

receiving a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application;

transmitting a command to a computing device associated with the cryptography-based storage application to decrypt the encrypted payload, wherein the computing device decrypts the encrypted payload using a private key associated with the cryptography-based storage application;

receiving the plurality of records from the computing device;

encrypting the plurality of records into a new encrypted payload using a second public key associated with the second cryptography-based storage application; and

replacing the encrypted payload with the new encrypted payload.

10. The method of claim 9 , wherein replacing the encrypted payload with the new encrypted payload comprises:

retrieving the payload identifier;

determining, based on the payload identifier, a location associated with the encrypted payload; and

replacing, in the location associated with the encrypted payload, the encrypted payload with the new encrypted payload.

11. The method of claim 5 , further comprising:

receiving a second blockchain operation request comprising a second plurality of records;

determining, based on a blockchain identifier associated with the second blockchain operation request, that the second blockchain operation request is associated with the cryptography-based storage application;

encrypting the second plurality of records into a second encrypted payload using the public key associated with the cryptography-based storage application; and

storing the second encrypted payload in a cloud-based storage, wherein the second encrypted payload is accessed using the cryptography-based storage application using the cryptographic token.

12. The method of claim 11 , further comprising:

adding a second payload identifier associated with the second encrypted payload to the cryptographic token;

receiving a request to access entries associated with the cryptographic token;

retrieving a first payload identifier associated with the plurality of records and the second payload identifier; and

retrieving the encrypted payload and the second encrypted payload.

13. The method of claim 5 , wherein the characteristic is energy efficiency.

14. A non-transitory, computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving a blockchain operation request comprising a plurality of records, wherein each record of the plurality of records comprises an identifier of an item;

encrypting the plurality of records into an encrypted payload using a key associated with a cryptography-based storage application, wherein the encrypted payload is a first encrypted payload, and wherein the cryptography-based storage application is a first cryptography-based storage application;

generating, based on one or more characteristics associated with one or more items corresponding to one or more item identifiers that are retrievable based on one or more payload identifiers that include a payload identifier of the encrypted payload, a cryptographic token configured to be controlled by the cryptography-based storage application and enable access to the encrypted payload using the cryptography-based storage application, wherein a characteristic, of the one or more characteristics, includes a designation relating one or more of a threshold, a criteria, or a requirement being satisfied to lead to a determination of the characteristic;

causing the cryptographic token to be committed to a blockchain;

receiving, from a computing device, a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application associated with a second target address, wherein the second blockchain operation request comprises the second target address;

transmitting a command to the computing device to decrypt the first encrypted payload, wherein the computing device decrypts the first encrypted payload using a first private key associated with the first cryptography-based storage application;

receiving the plurality of records from the computing device;

determining, based on the second target address, a second public key associated with the second cryptography-based storage application and encrypting the plurality of records into a second encrypted payload using the second public key; and

replacing the first encrypted payload with the second encrypted payload.

15. The non-transitory, computer-readable medium of claim 14 , wherein the instructions cause the one or more processors to determine, based on a key identifier associated with the cryptography-based storage application, the key associated with the cryptography-based storage application.

16. The non-transitory, computer-readable medium of claim 14 , wherein the instructions for generating the cryptographic token further cause the one or more processors to perform operations comprising:

setting an address associated with the cryptography-based storage application as a controlling address for the cryptographic token; and

encoding the encrypted payload into the cryptographic token.

17. The non-transitory, computer-readable medium of claim 14 , wherein the instructions for generating the cryptographic token further cause the one or more processors to perform operations comprising:

generating the payload identifier, wherein the payload identifier enables retrieval of the encrypted payload;

storing the encrypted payload in cloud storage in association with the payload identifier; and

encoding the payload identifier into the cryptographic token.

18. The non-transitory, computer-readable medium of claim 17 , wherein the further cause the one or more processors to perform operations comprising:

receiving a second blockchain operation request to transfer control of the cryptographic token to a second cryptography-based storage application;

transmitting a command to a computing device associated with the cryptography-based storage application to decrypt the encrypted payload, wherein the computing device decrypts the encrypted payload using a private key associated with the cryptography-based storage application;

receiving the plurality of records from the computing device;

encrypting the plurality of records into a new encrypted payload using a second public key associated with the second cryptography-based storage application; and

replacing the encrypted payload with the new encrypted payload.

19. The non-transitory, computer-readable medium of claim 18 , wherein the instructions for replacing the encrypted payload with the new encrypted payload cause the one or more processors to perform operations comprising:

retrieving the payload identifier;

determining, based on the payload identifier, a location associated with the encrypted payload; and

replacing, in the location associated with the encrypted payload, the encrypted payload with the new encrypted payload.

20. The non-transitory, computer-readable medium of claim 14 , wherein the instructions cause the one or more processors to perform operations further comprising:

receiving a second blockchain operation request comprising a second plurality of records;

determining, based on a blockchain identifier associated with the second blockchain operation request, that the second blockchain operation request is associated with the cryptography-based storage application;

encrypting the second plurality of records into a second encrypted payload using the key associated with the cryptography-based storage application; and

storing the second encrypted payload in a cloud-based storage, wherein the second encrypted payload is accessed using the cryptography-based storage application using the cryptographic token.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 12, 2022
From: DUQUE, JULIAN; SHANKER, PURVA; RAPOWITZ, SAMUEL; LIU, DENNIS
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 061066/0425 →
Continuity (1)
Related Publication 20240089105A1 · Mar 14, 2024
References Cited (19)
US 9374373B1 · Chan · 2016 [cited by examiner]
US 9419841B1 · Kozolchyk · 2016 [cited by examiner]
US 9722974B1 · Fuller · 2017 [cited by examiner]
US 12244667B1 · Bogu · 2025 [cited by examiner]
US 12277247B2 · Jakobsson · 2025 [cited by examiner]
US 20070253549A1 · Celikkan · 2007 [cited by examiner]
US 20080137845A1 · Wood · 2008 [cited by examiner]
US 20140164760A1 · Hybertson · 2014 [cited by examiner]
US 20170289104A1 · Shankar · 2017 [cited by examiner]
US 20200084027A1 · Duchon · 2020 [cited by examiner]
US 20200162246A1 · Schouppe · 2020 [cited by examiner]
US 20200313897A1 · Heath · 2020 [cited by examiner]
US 20200379868A1 · Dherange · 2020 [cited by examiner]
US 20220052988A1 · Gadnis · 2022 [cited by examiner]
US 20220173893A1 · Basu · 2022 [cited by examiner]
US 20240086549A1 · Rapowitz · 2024 [cited by examiner]
US 20240412208A1 · Loreth · 2024 [cited by examiner]
US 20250028790A1 · Finlow-Bates · 2025 [cited by examiner]
US 20250030546A1 · Stange · 2025 [cited by examiner]