Granted Patent B2

US 12,749,114 · App. 19/055,745 · Granted Sep 29, 2026

Inventors: Debashis Ghosh (Charlotte, NC); Luiz Fernando Flor De Silva (Pleasant Hill, CA); Nathaniel C. Eutsler (San Francisco, CA); Matthew Mullin Shepherd (Charlotte, NC)

Assignee: Wells Fargo Bank, N.A.

G06Q40/04G06Q2220/16

Abstract

Claims (101)

1 . A system, comprising:

a data processing system comprising memory and one or more processors configured to:

generate, based at least in part on a metadata object, a protected token comprising a link with the metadata object, wherein the protected token is encapsulated within a control structure that restricts an output of the metadata object to a remote device different from the data processing system;

transmit the protected token to the remote device;

detect, by the control structure, that an outputting attribute is satisfied based at least in part on off-chain data;

in response to detecting the outputting attribute is satisfied, output at least a portion of the output of the metadata object to the remote device;

detect, by the control structure, that an output preventing attribute is satisfied based at least in part on the off-chain data, the output preventing attribute comprising:

a user identifier of a user of the remote device matching a blacklisted user identifier, the blacklisted user identifier identifying a blacklisted user with a fraudulent exchange history, or

a location of the user, determined via a location of the remote device, matching a blacklisted location, the blacklisted location identifying a sanctioned location; and

in response to detecting the at least one output preventing attribute is satisfied, prevent outputting the output of the metadata object to the remote device, wherein the metadata object comprises a plurality of burning attributes for burning the protected token; and

the one or more processors are configured to:

detect, by the control structure, at least one burning attribute of the plurality of burning attributes is satisfied based at least in part on the off-chain data, and

in response to detecting the at least one burning attribute is satisfied, retrieve the protected token from the remote device and burn the protected token.

2 . The system of claim 1 , the one or more processors further configured to:

receive, from the remote device, a security token;

compare the security token to a recorded security token stored in the metadata object; and

in response to the security token matching the recorded security token, authorize the user of the remote device to access at least a portion of the protected token via the remote device.

3 . The system of claim 1 , wherein:

the metadata object further comprises a plurality of minting attributes for minting a new protected token;

the at least one burning attribute is associated with at least one minting attribute; and

the one or more processors are further configured to, in response to burning the protected token:

generate a new metadata object comprising new metadata and a plurality of new outputting attributes for outputting;

generate, based at least in part on the new metadata object, the new protected token comprising a new link with the new metadata object, wherein the new protected token is encapsulated within a new control structure that restricts an output of the new metadata object to the remote device;

sign the new protected token using at least one of the first private key or the second public key; and

transmit the signed new protected token to the remote device.

4 . The system of claim 1 , wherein the at least one outputting attribute comprises a period of time, wherein the period of time starts in response to transmitting the protected token to the remote device.

5 . The system of claim 1 , wherein the at least one outputting attribute comprises a dynamic attribute, the dynamic attribute configured to change based at least in part on at least a portion of the off-chain data, wherein the at least the portion of the off-chain data comprises one or more of weather conditions, trade regulations, pandemics, natural disasters, political unrest, or shipping route disruptions.

6 . The system of claim 1 , the one or more processors further configured to:

in response to outputting the output of the metadata object to the remote device, receive the protected token from the remote device, wherein the remote device is a first remote device associated with a provider; and

in response to receiving the protected token, transmit the protected token to a second remote device associated with a customer.

7 . The system of claim 1 , the one or more processors further configured to:

receive the protected token from the remote device; and

in response to receiving the protected token, authorize outputting the output of the metadata object to the remote device.

8 . The system of claim 7 , wherein:

the metadata object further comprises a plurality of output reversing attributes for reversing output;

outputting the at least the portion of the output of the metadata object to the remote device comprises transmitting the at least the portion of the output of the metadata object to a shared digital wallet of the remote device, the shared digital wallet accessible via the remote device and the data processing system; and

the one or more processors are further configured to:

detect, by the control structure, at least one output reversing attribute of the plurality of output reversing attributes is satisfied based at least in part on the off-chain data; and

in response to detecting the at least one output reversing attribute is satisfied, retrieving the at least the portion of the output of the metadata object from the shared digital wallet.

9 . The system of claim 1 , wherein:

the protected token is stored on a first blockchain network;

the one or more processors are configured to:

receive a network transfer request to transfer the protected token to a second blockchain network; and

in response to receiving the network transfer request, transfer the protected token from the first blockchain network to the second blockchain network; and

transferring the protected token comprises:

receiving, by the one or more processors, a signed exchange request signed by a second private key, wherein a second public and private key pair comprises the second public key and the second private key, the second public and private key pair being associated with the protected token on the first blockchain network;

providing, by the one or more processors to the second blockchain network, the second public key based at least in part on interfacing with a destination address of the second blockchain network via a first application programming interface (API);

determining, by the one or more processors from the second blockchain network, the signed exchange request was verified; and

in response to determining that the signed exchange request was verified, updating, by the one or more processors, the first blockchain network by removing the second public and private key pair.

10 . The system of claim 1 , wherein the output of the metadata object comprises a fungible value, and wherein the fungible value is in a form of a digital currency, a digital form of a fiat currency, or a digital financial instrument for exchange.

11 . The system of claim 1 , wherein:

the at least one outputting attribute comprises at least a portion of a first digital representation of the exchange matching at least a portion of a second digital representation of the exchange;

the first digital representation is at least one of an image, a scannable code, a video, or data received from the remote device; and

the second digital representation is at least one of an image, a scannable code, a video, or data stored in the metadata of the exchange.

12 . The system of claim 11 , wherein matching the at least the portion of the first digital representation to the at least the portion of the second digital representation comprises analyzing the first digital representation based at least in part on collecting one or more content areas of the first digital representation and cross-referencing the one or more content areas with the second digital representation.

13 . A method, comprising:

generating, based at least in part on a metadata object, a protected token comprising a link with the metadata object, wherein the protected token is encapsulated within a control structure that restricts an output of the metadata object to a remote device different from the data processing system;

transmitting the protected token to the remote device;

detecting, by the control structure, that an outputting attribute is satisfied based at least in part on off-chain data;

in response to detecting the outputting attribute is satisfied, outputting at least a portion of the output of the metadata object to the remote device;

detecting, by the control structure, that an output preventing attribute is satisfied based at least in part on the off-chain data, the output preventing attribute comprising:

a user identifier of a user of the remote device matching a blacklisted user identifier, the blacklisted user identifier identifying a blacklisted user with a fraudulent exchange history, or

a location of the user, determined via a location of the remote device, matching a blacklisted location, the blacklisted location identifying a sanctioned location; and

in response to detecting the at least one output preventing attribute is satisfied, preventing outputting the output of the metadata object to the remote device, wherein the metadata object comprises a plurality of burning attributes for burning the protected token; and

detecting, by the control structure, at least one burning attribute of the plurality of burning attributes is satisfied based at least in part on the off-chain data; and

in response to detecting the at least one burning attribute is satisfied, retrieving the protected token from the remote device and burn the protected token.

14 . The method of claim 13 , further comprising:

receiving, from the remote device, a security token;

comparing the security token to a recorded security token stored in the metadata object; and

in response to the security token matching the recorded security token, authorizing the user of the remote device to access at least a portion of the protected token via the remote device.

15 . The method of claim 13 , further comprising:

in response to outputting the output of the metadata object to the remote device, receiving the protected token from the remote device, wherein the remote device is a first remote device associated with a provider; and

in response to receiving the protected token, transmitting the protected token to a second remote device associated with a customer.

16 . The method of claim 13 , further comprising:

receiving the protected token from the remote device; and

in response to receiving the protected token, authorizing outputting the output of the metadata object to the remote device.

17 . The method of claim 13 , wherein:

the protected token is stored on a first blockchain network;

the method further comprises:

receiving a network transfer request to transfer the protected token to a second blockchain network; and

in response to receiving the network transfer request, transferring the protected token from the first blockchain network to the second blockchain network; and

transferring the protected token comprises:

receiving a signed exchange request signed by a second private key, wherein a second public and private key pair comprises the second public key and the second private key, the second public and private key pair being associated with the protected token on the first blockchain network;

providing, to the second blockchain network, the second public key based at least in part on interfacing with a destination address of the second blockchain network via a first application programming interface (API);

determining, from the second blockchain network, the signed exchange request was verified; and

in response to determining that the signed exchange request was verified, updating, by the one or more processors, the first blockchain network by removing the second public and private key pair.

18 . At least one non-transitory computer-readable medium comprising computer readable instructions, such that, when executed, causes at least one processor to:

generate, based at least in part on a metadata object, a protected token comprising a link with the metadata object, wherein the protected token is encapsulated within a control structure that restricts an output of the metadata object to a remote device different from the data processing system;

transmit the protected token to the remote device;

detect, by the control structure, that an outputting attribute is satisfied based at least in part on off-chain data;

in response to detecting the outputting attribute is satisfied, output at least a portion of the output of the metadata object to the remote device;

detect, by the control structure, that an output preventing attribute is satisfied based at least in part on the off-chain data, the output preventing attribute comprising:

a user identifier of a user of the remote device matching a blacklisted user identifier, the blacklisted user identifier identifying a blacklisted user with a fraudulent exchange history, or

a location of the user, determined via a location of the remote device, matching a blacklisted location, the blacklisted location identifying a sanctioned location; and

in response to detecting the at least one output preventing attribute is satisfied, prevent outputting the output of the metadata object to the remote device, wherein the metadata object comprises a plurality of burning attributes for burning the protected token; and

detect, by the control structure, at least one burning attribute of the plurality of burning attributes is satisfied based at least in part on the off-chain data, and

in response to detecting the at least one burning attribute is satisfied, retrieve the protected token from the remote device and burn the protected token.

19 . The non-transitory computer-readable medium of claim 18 , the at least one processor is further configured to:

receive, from the remote device, a security token;

compare the security token to a recorded security token stored in the metadata object; and

in response to the security token matching the recorded security token, authorize the user of the remote device to access at least a portion of the protected token via the remote device.

Continuity (2)

References Cited (19)