# US 12,010,246 B2 · Systems and applications for semi-anonymous communication tagging

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,010,246 B2
- Document ID: US12010246B2
- Status: Granted
- Kind: B2
- Application number: 18/122,299
- Filed: 2023-03-16
- Published: 2023-07-13
- Granted: 2024-06-11
- Earliest claimed: 2019-12-18
- Assignees: Wells Fargo Bank, N.A.
- Applicants: Wells Fargo Bank, N.A.
- Inventors: Phillip H. Griffin
- Web page: https://patentgrep.com/patent/US12010246B2

## CPC

- H04L 9/3255: {using group based signatures, e.g. ring or threshold signatures}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3236: {using cryptographic hash functions}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 2209/42: Anonymization, e.g. involving pseudonyms
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and applications are described that use group signature technology to allow for anonymous and/or semi-anonymous feedback while allowing for the application of rules and parameters. The use of group signature technology may serve to potentially mitigate or prevent malicious identification of individuals or entities providing a communication such as feedback. Feedback may range from constructive feedback all the way to the ‘whistleblower’ variety. It may be desirable to identify the individuals as belonging to a particular group or having a particular status or position while maintaining the anonymity of the individuals within the particular group.

## Claims

### Claim 1

A system comprising one or more processing circuits configured to:
receive, anonymously from a sender, a first feedback, a second feedback, and a single group public key associated with the first feedback and the second feedback, wherein the first feedback and the second feedback are signed by the sender with a corresponding private key, and wherein the first feedback and the second feedback comprise a group signature and a digital certificate indicating group membership of the sender in a group;
verify the group signature using the single group public key based at least in part on matching the group signature with the digital certificate associated with the first feedback and the second feedback;
link, based on matching the group signature, the first feedback and the second feedback using a linking key without revealing an identity of the sender;
responsive to the first feedback and the second feedback being linked, open the identity of the sender using a secret master key;
responsive to opening the identity of the sender, apply a rule or a parameter to at least one of the first feedback or the second feedback, the rule or the parameter associated with the at least one of the first feedback or the second feedback and configured to restrict acceptance of the at least one of the first feedback or the second feedback;
compare formatting of the at least one of the first feedback or the second feedback to a formatting requirement associated with the group, wherein the formatting is dependent on the group membership of the sender in the group; and
responsive to the formatting of the at least one of the first feedback or the second feedback not meeting the formatting requirement, deny acceptance of the at least one of the first feedback or the second feedback.

### Claim 2 (depends on 1)

The system of claim 1, wherein the rule or the parameter are dependent on contents of the first feedback.

### Claim 3 (depends on 1)

The system of claim 1, wherein the rule or the parameter are determined by parameters associated with the group or a type of group associated with the group signature used to sign the first feedback.

### Claim 4 (depends on 1)

The system of claim 1, wherein the one or more processing circuits are further configured to tag the digital certificate with at least one of the group membership or a status of the sender of the first feedback,
wherein tagging the digital certificate comprises issuing the digital certificate, the digital certificate comprising an indicator of at least one of the group membership or the status of the sender of the first feedback.

### Claim 5 (depends on 1)

The system of claim 1, wherein the one or more processing circuits are further configured to tag the digital certificate with at least one of the group membership or a status of the sender of the first feedback,
wherein tagging the digital certificate comprises entering an indicator of the group membership or the status of the sender of the first feedback in a certificate extension of the digital certificate.

### Claim 6 (depends on 1)

The system of claim 1, wherein the one or more processing circuits are further configured to determine, based on the group signature, at least one of the group membership or a status of the sender of the first feedback.

### Claim 7 (depends on 1)

The system of claim 1, wherein the one or more processing circuits are further configured to, responsive to an analysis of the first feedback, determine whether a management action is needed,
wherein the management action comprises an alteration of the group membership associated with the group signature.

### Claim 8

A method comprising:
receiving, by one or more processors anonymously from a sender, a first feedback, a second feedback, and a single group public key associated with the first feedback and the second feedback, wherein the first feedback and the second feedback are signed by the sender with a corresponding private key, and wherein the first feedback and the second feedback comprise a group signature and a digital certificate indicating group membership of the sender in a group;
verifying the group signature using the single group public key based at least in part on matching the group signature with the digital certificate associated with the first feedback and the second feedback;
linking, by the one or more processors based on matching the group signature, the first feedback and the second feedback using a linking key without revealing an identity of the sender;
responsive to the first feedback and the second feedback being linked, opening, by the one or more processors, the identity of the sender using a secret master key;
responsive to opening the identity of the sender, applying, by the one or more processors, a rule or a parameter to at least one of the first feedback or the second feedback, the rule or the parameter associated with the at least one of the first feedback or the second feedback and configured to restrict acceptance of the at least one of the first feedback or the second feedback;
comparing, by the one or more processors, formatting of the at least one of the first feedback or the second feedback to a formatting requirement associated with the group, wherein the formatting is dependent on the group membership of the sender in the group; and
responsive to the formatting of the at least one of the first feedback or the second feedback not meeting the formatting requirement, denying, by the one or more processors, acceptance of the at least one of the first feedback or the second feedback.

### Claim 9 (depends on 8)

The method of claim 8, wherein the rule or the parameter are dependent on contents of the first feedback.

### Claim 10 (depends on 8)

The method of claim 8, wherein the rule or the parameter are determined by parameters associated with the group or a type of group associated with the group signature used to sign the first feedback.

### Claim 11 (depends on 8)

The method of claim 8, further comprising tagging the digital certificate with at least one of the group membership or a status of the sender of the first feedback,
wherein tagging the digital certificate comprises issuing the digital certificate, the digital certificate comprising an indicator of at least one of the group membership or the status of the sender of the first feedback.

### Claim 12 (depends on 8)

The method of claim 8, further comprising tagging the digital certificate with at least one of the group membership or a status of the sender of the first feedback,
wherein tagging the digital certificate comprises entering an indicator of the group membership or the status of the sender of the first feedback in a certificate extension of the digital certificate.

### Claim 13 (depends on 8)

The method of claim 8, further comprising determining, based on the group signature, at least one of the group membership or a status of the sender of the first feedback.

### Claim 14 (depends on 8)

The method of claim 8, further comprising, responsive to an analysis of the first feedback, determining whether a management action is needed,
wherein the management action comprises an alteration of the group membership associated with the group signature.

### Claim 15

A non-transitory computer-readable storage media storing instructions that are executable by one or more processors to perform operations comprising:
receiving, by the one or more processors anonymously from a sender, a first feedback, a second feedback, and a single group public key associated with the first feedback and the second feedback, wherein the first feedback and the second feedback are signed by the sender with a corresponding private key, and wherein the first feedback and the second feedback comprise a group signature and a digital certificate indicating group membership of the sender in a group;
verifying the group signature using the single group public key based at least in part on matching the group signature with the digital certificate associated with the first feedback and the second feedback;
linking, by the one or more processors based on matching the group signature, the first feedback and the second feedback using a linking key without revealing an identity of the sender;
responsive to the first feedback and the second feedback being linked, opening, by the one or more processors, the identity of the sender using a secret master key;
responsive to opening the identity of the sender, applying, by the one or more processors, a rule or a parameter to at least one of the first feedback or the second feedback, the rule or the parameter associated with the at least one of the first feedback or the second feedback and configured to restrict acceptance of the at least one of the first feedback or the second feedback;
comparing, by the one or more processors, formatting of the at least one of the first feedback or the second feedback to a formatting requirement associated with the group, wherein the formatting is dependent on the group membership of the sender in the group; and
responsive to the formatting of the at least one of the first feedback or the second feedback not meeting the formatting requirement, denying, by the one or more processors, acceptance of the at least one of the first feedback or the second feedback.

### Claim 16 (depends on 15)

The non-transitory computer-readable storage media of claim 15, wherein the rule or the parameter are dependent on contents of the first feedback.

### Claim 17 (depends on 15)

The non-transitory computer-readable storage media of claim 15, wherein the rule or the parameter are determined by parameters associated with the group or a type of group associated with the group signature used to sign the first feedback.

### Claim 18 (depends on 15)

The non-transitory computer-readable storage media of claim 15, the operations further comprising tagging the digital certificate with at least one of the group membership or a status of the sender of the first feedback,
wherein tagging the digital certificate comprises issuing the digital certificate, the digital certificate comprising an indicator of at least one of the group membership or the status of the sender of the first feedback.

### Claim 19 (depends on 15)

The non-transitory computer-readable storage media of claim 15, the operations further comprising tagging the digital certificate with at least one of the group membership or a status of the sender of the first feedback,
wherein tagging the digital certificate comprises entering an indicator of the group membership or the status of the sender of the first feedback in a certificate extension of the digital certificate.

### Claim 20 (depends on 15)

The non-transitory computer-readable storage media of claim 15, the operations further comprising determining, based on the group signature, at least one of the group membership or a status of the sender of the first feedback.