# US 12,762,260 B2 · Systems and methods for protecting tokens using a unified containerized framework > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,762,260 B2 - Document ID: US12762260B2 - Status: Granted - Kind: B2 - Application number: 19/034,426 - Filed: 2025-01-22 - Published: 2026-07-23 - Granted: 2026-10-13 - Earliest claimed: 2025-01-22 - Assignees: Wells Fargo Bank, N.A. - Applicants: Wells Fargo Bank, N.A. - Inventors: Arushi Sood Joshi; Gregory T. Maddox; Michael R. Flood - Web page: https://patentgrep.com/patent/US12762260B2 ## CPC - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems, method, and computer readable medium (CRM) for protecting tokens using a unified containerized framework. Some systems include a data processing system including memory and one or more processors configured to receive, from a user device, a protected record authorization for obtaining protection records and obtain, using a protected data channel, the plurality of protection records. The processors further configured to generate tokens encapsulating a metadata object, wherein each token includes a token control structure that restricts an update or an output to the metadata object. The processors further configured to store the tokens and generate a root control structure to apply operational rules for metadata object updates. The processors further configured to detect at least one off-chain event or condition and update the metadata object based on updating at least one of a status attribute of a token or a quant attribute of the token. ## Claims ### Claim 1 A system, comprising: a data processing system comprising memory and one or more processors configured to: receive, from a user device, a protected record authorization for obtaining a plurality of protection records, the plurality of protection records corresponding to a plurality of control nodes, wherein each protection record of the plurality of protection records comprises at least a quant measure, a classification index, and an identifier; obtain, using a protected data channel, the plurality of protection records from each control node of the plurality of control nodes based on performing at least one handshake verifying a source of each control node of the plurality of control nodes; generate, based on the plurality of protection records, a set of tokens encapsulating a metadata object, wherein each token comprises a token control structure that restricts an update or an output to the metadata object, and wherein the metadata object comprises at least one status attribute corresponding with an operational state of a corresponding protection record and at least one quant attribute corresponding with tracking an update in the quant measure of the corresponding protection record; store, in a ledger storage, the set of tokens; generate a root control structure to apply a plurality of operational rules for metadata object updates, wherein the root control structure comprises executable instructions to interface with a plurality of metadata objects of the set of tokens; detect, using the root control structure, at least one off-chain event or condition corresponding with at least one protection record of the plurality of protection records; and in response to detecting the at least one off-chain event or condition, update, on the ledger storage using at least one of the root control structure or the token control structure, the metadata object based on updating at least one of a status attribute of a token of the set of tokens or a quant attribute of the token of the set of tokens. ### Claim 2 (depends on 1) The system of claim 1, wherein the root control structure comprises additional executable instructions to interface with the token control structure of each token of the set of tokens by embedding operational logic into the metadata object, wherein the operational logic comprises a plurality of instructions for updating the status attribute or the quant attribute based on the at least one off-chain event or condition detected by the root control structure. ### Claim 3 (depends on 2) The system of claim 2, wherein to update the metadata object, the one or more processors configured to: update, using at least one of the root control structure or the token control structure and the plurality of instructions, the status attribute indicating at least one of a state change or updated status corresponding with the operational state of the corresponding protection record; or update, using at least one of the root control structure or the token control structure and the plurality of instructions, the quant attribute of the token based at least on the update to the quant measure of the corresponding protection record. ### Claim 4 (depends on 1) The system of claim 1, wherein to detect the at least one off-chain event or condition, the one or more processors configured to: receive, using at least one of the root control structure or the token control structure and the protected data channel, a synchronization indicator from one or more control nodes of the plurality of control nodes, wherein the synchronization indicator corresponds with at least one of: receipt or detection of updated resource data corresponding with the corresponding protection record; or identification of a predefined temporal event corresponding with the one or more control nodes. ### Claim 5 (depends on 1) The system of claim 1, wherein to detect the at least one off-chain event or condition, the one or more processors configured to: determine at least one of an exchange at one or more control nodes of the plurality of control nodes updating the quant measure of the corresponding protection record; or update the quant measure of the corresponding protection record based on a re-modeling applied by the one or more control nodes. ### Claim 6 (depends on 1) The system of claim 1, the one or more processors configured to: validate, using a first public key of a first public-private key pair corresponding with at least one control node of the plurality of control nodes, a first cryptographic signature of the corresponding protection record, wherein the first cryptographic signature is generated using a first private key of the first public-private key pair; and embed a second cryptographic signature in at least one field of the metadata object of the token, wherein the second cryptographic signature is generated using a second private key of a second public-private key pair corresponding with the data processing system or a third private key of the at least one control node. ### Claim 7 (depends on 6) The system of claim 6, the one or more processors configured to: store or provide, using the ledger storage or the protected data channel, a second public key of the second public-private key pair; and perform, using at least one of the root control structure or the token control structure, the update to the metadata object in response to validating the second cryptographic signature using the second public key, wherein validating comprises: extraction of the second cryptographic signature from the at least one field of the metadata object; decryption, using the second public key, of the second cryptographic signature to generate a validation hash; and comparison of the validation hash to a computed hash of the metadata object. ### Claim 8 (depends on 6) The system of claim 6, the one or more processors configured to: perform, using the protected data channel, the at least one handshake based on at least one of (i) exchanging at least one of the first public key and the second public key with the at least one control node, (ii) executing a challenge-response protocol with the at least one control node, or (iii) analyzing a digital certificate provided by the at least one control node; and restrict, using the token control structure, the update to the metadata object based on determining that a validation of the second cryptographic signature indicates a variation between the second cryptographic signature and a computed hash of the metadata object. ### Claim 9 (depends on 1) The system of claim 1, the one or more processors configured to: identify, based on the classification index, a plurality of resource descriptors corresponding with the plurality of protection records; and identify, based on the plurality of resource descriptors and a plurality of quant attributes of the set of tokens, a resource distribution corresponding with the set of tokens. ### Claim 10 (depends on 1) The system of claim 1, wherein the quant attribute of the token comprises at least one numeric or alphanumeric data field of the metadata object indicating a resource quantity of the corresponding protection record, and wherein the update in the quant measure of the corresponding protection record is based on an off-chain or on-chain modification to the resource quantity. ### Claim 11 A method, comprising: receiving, by one or more processors of a data processing system from a user device, a protected record authorization for obtaining a plurality of protection records, the plurality of protection records corresponding to a plurality of control nodes, wherein each protection record of the plurality of protection records comprises at least a quant measure, a classification index, and an identifier; obtaining, by the one or more processors using a protected data channel, the plurality of protection records from each control node of the plurality of control nodes based on performing at least one handshake verifying a source of each control node of the plurality of control nodes; generating, by the one or more processors based on the plurality of protection records, a set of tokens encapsulating a metadata object, wherein each token comprises a token control structure that restricts an update or an output to the metadata object, and wherein the metadata object comprises at least one status attribute corresponding with an operational state of a corresponding protection record and at least one quant attribute corresponding with tracking an update in the quant measure of the corresponding protection record; storing, by the one or more processors in a ledger storage, the set of tokens; generating, by the one or more processors, a root control structure to apply a plurality of operational rules for metadata object updates, wherein the root control structure comprises executable instructions to interface with a plurality of metadata objects of the set of tokens; detecting, by the one or more processors using the root control structure, at least one off-chain event or condition corresponding with at least one protection record of the plurality of protection records; and in response to detecting the at least one off-chain event or condition, updating, by the one or more processors on the ledger storage using at least one of the root control structure or the token control structure, the metadata object based on updating at least one of a status attribute of a token of the set of tokens or a quant attribute of the token of the set of tokens. ### Claim 12 (depends on 11) The method of claim 11, wherein the root control structure comprises additional executable instructions to interface with the token control structure of each token of the set of tokens by embedding operational logic into the metadata object, wherein the operational logic comprises a plurality of instructions for updating the status attribute or the quant attribute based on the at least one off-chain event or condition detected by the root control structure. ### Claim 13 (depends on 12) The method of claim 12, wherein updating the metadata object comprises: updating, by the one or more processors using at least one of the root control structure or the token control structure and the plurality of instructions, the status attribute indicating at least one of a state change or updated status corresponding with the operational state of the corresponding protection record; or updating, by the one or more processors using at least one of the root control structure or the token control structure and the plurality of instructions, the quant attribute of the token based at least on the update to the quant measure of the corresponding protection record. ### Claim 14 (depends on 11) The method of claim 11, wherein detecting the at least one off-chain event or condition comprises: receiving, by the one or more processors using at least one of the root control structure or the token control structure and the protected data channel, a synchronization indicator from one or more control nodes of the plurality of control nodes, wherein the synchronization indicator corresponds with at least one of: receipt or detection of updated resource data corresponding with the corresponding protection record; or identification of a predefined temporal event corresponding with the one or more control nodes. ### Claim 15 (depends on 11) The method of claim 11, wherein detecting the at least one off-chain event or condition comprises: determining, by the one or more processors, at least one of an exchange at one or more control nodes of the plurality of control nodes updating the quant measure of the corresponding protection record; or updating, by the one or more processors, the quant measure of the corresponding protection record based on a re-modeling applied by the one or more control nodes. ### Claim 16 (depends on 11) The method of claim 11, comprising: validating, by the one or more processors using a first public key of a first public-private key pair corresponding with at least one control node of the plurality of control nodes, a first cryptographic signature of the corresponding protection record, wherein the first cryptographic signature is generated using a first private key of the first public-private key pair; and embedding, by the one or more processors using the token control structure, a second cryptographic signature in at least one field of the metadata object of the token, wherein the second cryptographic signature is generated using a second private key of a second public-private key pair corresponding with the data processing system or a third private key of the at least one control node. ### Claim 17 (depends on 16) The method of claim 16, comprising: storing or providing, by the one or more processors using the ledger storage or the protected data channel, a second public key of the second public-private key pair; and performing, by the one or more processors using at least one of the root control structure or the token control structure, the update to the metadata object in response to validating the second cryptographic signature using the second public key, wherein validating comprises: extraction of the second cryptographic signature from the at least one field of the metadata object; decryption, using the second public key, of the second cryptographic signature to generate a validation hash; and comparison of the validation hash to a computed hash of the metadata object. ### Claim 18 (depends on 16) The method of claim 16, comprising: performing, by the one or more processors using the protected data channel, the at least one handshake based on at least one of (i) exchanging at least one of the first public key and the second public key with the at least one control node, (ii) executing a challenge-response protocol with the at least one control node, or (iii) analyzing a digital certificate provided by the at least one control node; and restricting, by the one or more processors using the token control structure, the update to the metadata object based on determining that a validation of the second cryptographic signature indicates a variation between the second cryptographic signature and a computed hash of the metadata object. ### Claim 19 (depends on 11) The method of claim 11, comprising: determining, by the one or more processors based on the classification index, a plurality of resource descriptors corresponding with the plurality of protection records; and identifying, by the one or more processors based on the plurality of resource descriptors and a plurality of quant attributes of the set of tokens, a resource distribution corresponding with the set of tokens. ### Claim 20 A non-transitory computer readable medium (CRM) comprising one or more instructions stored thereon that, when executed by one or more processors, cause the one or more processors to perform operations comprising: receiving, from a user device, a protected record authorization for obtaining a plurality of protection records, the plurality of protection records corresponding to a plurality of control nodes, wherein each protection record of the plurality of protection records comprises at least a quant measure, a classification index, and an identifier; obtaining, using a protected data channel, the plurality of protection records from each control node of the plurality of control nodes based on performing at least one handshake verifying a source of each control node of the plurality of control nodes; generating, based on the plurality of protection records, a set of tokens encapsulating a metadata object, wherein each token comprises a token control structure that restricts an update or an output to the metadata object, and wherein the metadata object comprises at least one status attribute corresponding with an operational state of a corresponding protection record and at least one quant attribute corresponding with tracking an update in the quant measure of the corresponding protection record; storing, in a ledger storage, the set of tokens; generating a root control structure to apply a plurality of operational rules for metadata object updates, wherein the root control structure comprises executable instructions to interface with a plurality of metadata objects of the set of tokens; detecting, by the one or more processors using the root control structure, at least one off-chain event or condition corresponding with at least one protection record of the plurality of protection records; and in response to detecting the at least one off-chain event or condition, updating, on the ledger storage using at least one of the root control structure or the token control structure, the metadata object based on updating at least one of a status attribute of a token of the set of tokens or a quant attribute of the token of the set of tokens.