# US 12,223,070 B2 · Multicomputer processing to protect data from unauthorized modification > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,223,070 B2 - Document ID: US12223070B2 - Status: Granted - Kind: B2 - Application number: 18/787,154 - Filed: 2024-07-29 - Published: 2024-11-21 - Granted: 2025-02-11 - Earliest claimed: 2023-02-13 - Assignees: Equity Protect Inc. - Applicants: Equity Protect Inc. - Inventors: James G. Adams; Ryan S. Marshall - Web page: https://patentgrep.com/patent/US12223070B2 ## CPC - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An aspect relates to generation of a secure token based on encrypted and/or hashed data associated with a user and/or an asset, and recording the secure token on a distributed database. An encrypted communication may be received from a user device, the communication comprising an instruction to remove security content from a third party database record, the security content stored in association with a first asset, the security content configured to inhibit recording of at least a first document type in association with the first asset. In response to the instruction, generating the security content and causing the security content to be recorded in association with the first asset. ## Claims ### Claim 1 An encryption and data security system, comprising: a network interface; at least one processing device operable to: receive, via the network interface, a first document; determine if the first document comprises data that is only to be provided to requestors of the first document that have received authorization from a controller, using metadata associated with the first document and/or by using natural language processing comprising named entity recognition, wherein the first document further comprises a first authentication indicator; at least partly in response to determining that the first document comprises data that is only to be provided to requestors of the first document that have received authorization from the controller generating an optical code encoding a link to an authorization request interface and/or generating a plain text link to the authorization request interface; generate and store a second document comprising a modified version of the first document wherein the data that is only to be provided to requestors of the first document that have received authorization from the controller is redacted from the first document without redacting the authentication indicator, and the optical code and/or plain text link is inserted into the second document; receive, via the network interface, a request for the second document, comprising the first authentication indicator and the optical code and/or plain text link to the authorization request interface from a requester system; provide access to the requester system to the second document, comprising the first authentication indicator and the optical code and/or plain text link to the authorization request interface; receive, via activation of the link encoded in the optical code or the activation of the plain text link, a request for the authorization request interface; provide, at least partly in response to the activation of the link encoded in the optical code or the activation of the plain text link, the authorization request interface to the requester system; receive, from the requester system, via the authorization request interface a request for the first document comprising the data that is only to be provided to requestors of the first document that have received authorization from a controller; transmit, to a device associated with the controller a communication regarding the request for the first document comprising the data that is only to be provided to requestors of the first document that have received authorization from a controller; at least partly in response to receiving an approval of the request for the first document comprising the data that is only to be provided to requestors of the first document that have received authorization from a controller, provide the requester with access to the first document in locked form wherein the first document is encrypted; and provide a key to the requester enabling the requester to unlock the locked first document, wherein the key is configured to be utilized to decrypt the encrypted for document. ### Claim 2 (depends on 1) The encryption and data security system as defined in claim 1, wherein the first authentication indicator comprises a stamp. ### Claim 3 (depends on 1) The encryption and data security system as defined in claim 1, wherein the optical code comprises a QR code. ### Claim 4 (depends on 1) The encryption and data security system as defined in claim 1, wherein the first key is hashed and securely stored. ### Claim 5 (depends on 1) The encryption and data security system as defined in claim 1, wherein the system is configured to exchange messages with the requester system to jointly determine a strong cryptographic key. ### Claim 6 (depends on 1) The encryption and data security system as defined in claim 1, wherein the system is configured to embed a unique identifier in the first document provided to the requester. ### Claim 7 (depends on 1) The encryption and data security system as defined in claim 1, wherein the system is configured to embed a unique identifier in the first document provided to the requester using steganography, wherein the unique identifier is not visible to a human eye. ### Claim 8 A computer-implemented method of securing data from unauthorized access, the computer-implemented method comprising: accessing a first document; determining if the first document comprises data that is only to be provided to requestors of the first document that have received authorization from a controller, using metadata associated with the first document and/or by using natural language processing, wherein the first document further comprises a first authentication indicator; at least partly in response to determining that the first document comprises data that is only to be provided to requestors of the first document that have received authorization from the controller generating an optical code encoding a link to an authorization request interface and/or generating a plain text link to the authorization request interface; generating and storing a second document comprising a modified version of the first document wherein the data that is only to be provided to requestors of the first document that have received authorization from the controller is redacted from the first document without redacting the authentication indicator and the optical code and/or plain text link is inserted into the second document; receiving over a network a request for the second document, comprising the first authentication indicator and the optical code and/or plain text link to the authorization request interface from a requester system; providing access to the requester system to the second document, comprising the first authentication indicator and the optical code and/or plain text link to the authorization request interface; receiving over the network, via activation of the link encoded in the optical code or the activation of the plain text link, a request for the authorization request interface; providing over the network, at least partly in response to the activation of the link encoded in the optical code or the activation of the plain text link, the authorization request interface to the requester system; receiving over the network, from the requester system, via the authorization request interface a request for the first document comprising the data that is only to be provided to requestors of the first document that have received authorization from a controller; transmitting over the network, to a device associated with the controller a communication regarding the request for the first document comprising the data that is only to be provided to requestors of the first document that have received authorization from a controller; and at least partly in response to receiving an approval of the request for the first document comprising the data that is only to be provided to requestors of the first document that have received authorization from a controller, providing the requester with access to the first document. ### Claim 9 (depends on 8) The computer-implemented method as defined in claim 8, wherein the first authentication indicator comprises a stamp. ### Claim 10 (depends on 8) The computer-implemented method as defined in claim 8, wherein the optical code comprises a QR code. ### Claim 11 (depends on 8) The computer-implemented method as defined in claim 8, the method further comprising providing over the network a key to the requester enabling the requester to unlock the first document, wherein the key is hashed and securely stored. ### Claim 12 (depends on 8) The computer-implemented method as defined in claim 8, the method further comprising exchanging messages with the requester system to jointly determine a strong cryptographic key configured to unlock the first document. ### Claim 13 (depends on 8) The computer-implemented method as defined in claim 8, the method further comprising embedding a unique identifier in the first document provided to the requester. ### Claim 14 (depends on 8) The computer-implemented method as defined in claim 8, the method further comprising embedding a unique identifier in the first document provided to the requester using steganography, wherein the unique identifier is not visible to a human eye. ### Claim 15 (depends on 8) The computer-implemented method as defined in claim 8, wherein the controller is provided access to the first document is locked form, wherein the first document is encrypted, the method further comprising: providing over the network a key to the requester enabling the requester to unlock the locked first document, wherein the key is configured to be utilized to decrypt the encrypted for document. ### Claim 16 A non-transitory computer-readable medium that stores instructions, that when executed by a computing device, cause the computing device to perform operations comprising: access a first document comprising an authentication indicator; identify personally identifying information in the first document; generate an optical code encoding a link to an authorization request interface and/or generating a plain text link to the authorization request interface; generate and store a second document comprising a modified version of the first document wherein the personally identifying information is redacted from the first document without redacting the authentication indicator, and wherein the optical code and/or plain text link is inserted into the second document; receive a request for the second document, comprising the first authentication indicator and the optical code and/or plain text link to the authorization request interface from a requester system; provide access to the requester system to the second document, comprising the first authentication indicator and the optical code and/or plain text link to the authorization request interface; receive, via activation of the link encoded in the optical code or the activation of the plain text link, a request for the authorization request interface; provide, at least partly in response to the activation of the link encoded in the optical code or the activation of the plain text link, the authorization request interface to the requester system; receive from the requester system, via the authorization request interface a request for the first document comprising the personally identifying information; transmit, to an electronic destination associated with an authorized entity, a communication regarding the request for the first document comprising the personally identifying information; and at least partly in response to receiving an approval of the request for the first document comprising the personally identifying information, providing the requester with access to the first document. ### Claim 17 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, wherein the first authentication indicator comprises a stamp. ### Claim 18 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, wherein the optical code comprises a QR code. ### Claim 19 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, the operations further comprising providing a key to the requester enabling the requester to unlock the first document, wherein the key is hashed and securely stored. ### Claim 20 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, the operations further comprising exchanging messages with the requester system to jointly determine a strong cryptographic key configured to unlock the first document. ### Claim 21 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, the operations further comprising embedding a unique identifier in the first document provided to the requester. ### Claim 22 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, the operations further comprising embedding a unique identifier in the first document provided to the requester using steganography, wherein the unique identifier is not visible to a human eye. ### Claim 23 (depends on 16) The non-transitory computer-readable medium as defined in claim 16, wherein the authorized entity is provided access to the first document is locked form, wherein the first document is encrypted, the operations further comprising: providing a key to the requester enabling the requester to unlock the locked first document, wherein the key is configured to be utilized to decrypt the encrypted for document.