# US 11,445,364 B2 · Secure data communication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,445,364 B2
- Document ID: US11445364B2
- Status: Granted
- Kind: B2
- Application number: 16/669,374
- Filed: 2019-10-30
- Published: 2020-06-04
- Granted: 2022-09-13
- Earliest claimed: 2018-10-30
- Assignees: Barclays Execution Services Limited
- Applicants: Barclays Execution Services Limited
- Inventors: Scott Bushell
- Web page: https://patentgrep.com/patent/US11445364B2

## CPC

- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- H04W 12/033: of the user plane, e.g. user's traffic
- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04W 12/069: using certificates or pre-shared keys
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/80: Wireless
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Method and system for securely communicating data, the method comprising the steps of: initiating a secure communication between a mobile device and a requester using a cryptographic key to verify the user of the mobile device. Receiving, using the secure communication, at a mobile device a request from the requester, the request including an indication of one or more requested data attributes associated with a user of the mobile device. At the mobile device, querying a data store for the requested one or more data attributes and a verification attribute. In response to the request, providing the requester, using the secure communication, with the requested one or more data attributes and the verification attribute from the data store, wherein the verification attribute is generated from one or more data items of a physical token issued to the user, the one or more data items including information characterising a biological feature of the user, the verification attribute also indicating that sensor data of a biological feature of the user detected by the mobile device has been matched to the information characterising the biological feature of the user. At the requester, receiving the verification attribute over the secure communication.

## Claims

### Claim 1

A method for securely communicating data, the method comprising the steps of:
initiating a secure communication between a mobile device and a requester using a cryptographic key to verify the user of the mobile device;
receiving, using the secure communication, at a mobile device a request from the requester, the request including an indication of one or more requested data attributes associated with a user of the mobile device;
at the mobile device, querying a data store for the requested one or more data attributes and a verification attribute;
in response to the request, providing the requester, using the secure communication, with the requested one or more data attributes and the verification attribute from the data store, wherein the verification attribute is generated from one or more data items of a physical token issued to the user, the one or more data items including information characterising a biological feature of the user, the verification attribute also indicating that sensor data of a biological feature of the user detected by the mobile device has been matched to the information characterising the biological feature of the user, wherein the one or more requested data attributes originates from an external organization; and
verifying the data attributes originating from the external organisation by:
retrieving from a distributed ledger data describing the one or more data attributes, including an identifier of the external organisation, and/or cryptographic signature of the external organisation; and
confirming that the external organisation meets a predetermined level of trust based on the retrieved data.

### Claim 2 (depends on 1)

The method of claim 1, wherein the step of initiating the secure communication between the mobile device and the requester further uses a cryptographic key to verify the identity of the requester.

### Claim 3 (depends on 2)

The method of claim 2, wherein the cryptographic key used to verify the identity of the user and/or the requester is stored in a distributed ledger and wherein the step of initiating the secure communication between a user of a mobile device and a requester includes retrieving the cryptographic key of the user and/or requester from the distributed ledger.

### Claim 4 (depends on 1)

The method according to claim 1 further comprising the step of verifying the data attributes associated with a user by:
retrieving from a distributed ledger data describing the one or more data attributes; and
comparing the one or more data attributes with the retrieved data.

### Claim 5 (depends on 4)

The method of claim 4, wherein the data describing the one or more data attributes describe any one or more of: the size, length, data structure, format of the one or more data attributes, creation time, expiration, and/or revocation.

### Claim 6 (depends on 1)

The method according to claim 1 further comprising the step of storing within the distributed ledger, a log of the request and a log of the response.

### Claim 7 (depends on 1)

The method according to claim 1, wherein the data store is within the mobile device or within an external database accessible over a network.

### Claim 8 (depends on 1)

The method according to claim 1 further comprising the step of the requester storing a log of the request and a log of the receiving the one or more user data attributes.

### Claim 9 (depends on 1)

The method according to claim 1, wherein the information characterising a biological feature of the user is stored within a secure digital data store within the physical token.

### Claim 10 (depends on 1)

The method of claim 1, wherein the data attributes originating from the external organisation are digitally signed by the external organisation.

### Claim 11 (depends on 1)

The method according to claim 1, wherein initiating the secure communication between a user of a mobile device and a requester further includes using graphical representation of data displayed to by the mobile device to the requester and/or by the requester to the mobile device, wherein the graphical representation of data includes a cryptographic key of the user and/or a cryptographic key of the requester.

### Claim 12 (depends on 1)

The method according to claim 1, wherein the response further includes payment data enabling the requester to obtain payment from the user.

### Claim 13

A mobile device comprising:
one or more processors;
one or more sensors configured to generate sensor data; and
memory storing computer-executable instructions that, when executed by the one or more processors, cause the mobile device to:
initiate a secure communication between the mobile device and a requester using a cryptographic key to verify the identity of the user;
receive, using the secure communication, request from the requester, the request including an indication of one or more requested data attributes associated with a user of the mobile device;
query a data store for the requested one or more data attributes and a verification attribute;
in response to the request, provide the requester, using the secure communication, with the requested one or more data attributes and the verification attribute from the data store, wherein the verification attribute is generated from one or more data items of a physical token issued to the user, the one or more data items including information characterising a biological feature of the user, the verification attribute also indicating that sensor data of a biological feature of the user detected by the mobile device has been matched to the information characterising the biological feature of the user, wherein the one or more requested data attributes originates from an external organization; and
verify the data attributes originating from the external organisation by:
retrieving from a distributed ledger data describing the one or more data attributes, including an identifier of the external organisation, and/or cryptographic signature of the external organisation; and
confirming that the external organisation meets a predetermined level of trust based on the retrieved data.