# US 12,192,334 B2 · Database exclusion (DBX) for multi-party access (MPA) to sensitive personal information (SPI) > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,334 B2 - Document ID: US12192334B2 - Status: Granted - Kind: B2 - Application number: 18/244,650 - Filed: 2023-09-11 - Published: 2023-12-28 - Granted: 2025-01-07 - Earliest claimed: 2020-04-29 - Assignees: Wells Fargo Bank, N.A. - Applicants: Wells Fargo Bank, N.A. - Inventors: Jeff J. Stapleton - Web page: https://patentgrep.com/patent/US12192334B2 ## CPC - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - H04L 9/0822: {using key encryption key} - H04L 9/0869: {involving random numbers or seeds} - H04L 9/14: using a plurality of keys or algorithms - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system and method for protecting Sensitive Personal Information (SPI) from Multi-Party Access (MPA), including receiving a request for access to a data record, the request comprising an encrypted device identifier identifying the client device, encrypting the data record using a random symmetric key to generate an encrypted data record, encrypting the data record using a second symmetric key to generate a second encrypted data record, the second symmetric key being different from the random symmetric key, encrypting the random symmetric key to generate an encrypted symmetric key by using a public key associated with the client device or a key encryption key associated with the one or more processors, and transmitting a message comprising the encrypted symmetric key and the encrypted device identifier. The message causing the client device to access the data record using a database, the encrypted device identifier, and the encrypted symmetric key. ## Claims ### Claim 1 A method, comprising: transmitting, by a client device and to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device; receiving, by the client device from the system, a message comprising an encrypted symmetric key and the encrypted device identifier; and in response to receiving the message, accessing, by the client device, the data record using a database, the encrypted device identifier, and the encrypted symmetric key. ### Claim 2 (depends on 1) The method of claim 1, further comprising in response to receiving the message, retrieving, by the client device, the data record from the database. ### Claim 3 (depends on 1) The method of claim 1, wherein the data record is encrypted; and the method further comprising in response to receiving the message, decrypting, by the client device, the encrypted data record using a random symmetric key determined from the encrypted symmetric key. ### Claim 4 (depends on 3) The method of claim 3, wherein the random symmetric key is generated using a pseudorandom number generator (PRNG). ### Claim 5 (depends on 1) The method of claim 1, further comprising in response to receiving the message, discarding, by the client device, an encrypted symmetric key responsive to an elapse of a predetermined window of time. ### Claim 6 (depends on 1) The method of claim 1, wherein the request comprises a public key of the client device. ### Claim 7 (depends on 1) The method of claim 1, wherein an encrypted data record is access by the client device in response to receiving the message; the data record is stored in a second database prior to the system receiving the request; the encrypted data record is stored in database in response to the system receiving the request. ### Claim 8 A client device comprising: one or more memory devices; and one or more processors configured to: transmit to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device; receive a message comprising an encrypted symmetric key and the encrypted device identifier; and in response to receiving the message, access the data record using a database, the encrypted device identifier, and the encrypted symmetric key. ### Claim 9 (depends on 8) The client device of claim 8, the one or more processors further configured to in response to receiving the message, retrieve the data record from the database. ### Claim 10 (depends on 8) The client device of claim 8, wherein the data record is encrypted; and the one or more processors further configured to in response to receiving the message, decrypting, by the client device, the encrypted data record using a random symmetric key determined from the encrypted symmetric key. ### Claim 11 (depends on 10) The client device of claim 10, wherein the random symmetric key is generated using a pseudorandom number generator (PRNG). ### Claim 12 (depends on 8) The client device of claim 8, the one or more processors further configured to in response to receiving the message, discard an encrypted symmetric key responsive to an elapse of a predetermined window of time. ### Claim 13 (depends on 8) The client device of claim 8, wherein the request comprises a public key of the client device. ### Claim 14 (depends on 8) The client device of claim 8, wherein an encrypted data record is access by the client device in response to receiving the message; the data record is stored in a second database prior to the system receiving the request; the encrypted data record is stored in database in response to the system receiving the request. ### Claim 15 At least one non-transitory computer-readable storage medium storing instructions which, when executed by one or more processors, cause the one or more processors to: transmit to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device; receive a message comprising an encrypted symmetric key and the encrypted device identifier; and in response to receiving the message, access the data record using a database, the encrypted device identifier, and the encrypted symmetric key. ### Claim 16 (depends on 15) The non-transitory computer-readable storage medium of claim 15, the one or more processors further configured to in response to receiving the message, retrieve the data record from the database. ### Claim 17 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the data record is encrypted; and the one or more processors further caused to in response to receiving the message, decrypting, by the client device, the encrypted data record using a random symmetric key determined from the encrypted symmetric key. ### Claim 18 (depends on 17) The non-transitory computer-readable storage medium of claim 17, wherein the random symmetric key is generated using a pseudorandom number generator (PRNG). ### Claim 19 (depends on 15) The non-transitory computer-readable storage medium of claim 15, the one or more processors further caused to in response to receiving the message, discard an encrypted symmetric key responsive to an elapse of a predetermined window of time. ### Claim 20 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the request comprises a public key of the client device.