# US 12,763,940 B2 · Post quantum unique key per token system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,763,940 B2
- Document ID: US12763940B2
- Status: Granted
- Kind: B2
- Application number: 18/407,204
- Filed: 2024-01-08
- Published: 2024-12-12
- Granted: 2026-10-13
- Earliest claimed: 2019-05-17
- Assignees: Wells Fargo Bank, N.A.
- Applicants: Wells Fargo Bank, N.A.
- Inventors: Phillip H. Griffin; Jeffrey J. Stapleton
- Web page: https://patentgrep.com/patent/US12763940B2

## CPC

- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/3247: {involving digital signatures}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Various arrangements relate to a method performed by a processor of a computing system. An example method includes tokenizing a first value using a tokenization algorithm to generate a first token. The first value and first key are inputs of the tokenization algorithm. A message is generated. The message includes a first value identifier associated with the first value and a first key generation identifier associated with the generation of the first key. The message is associated with the first token. A second key is generated. A second value is tokenized using a tokenization algorithm to generate a second token. The second value and second key are inputs of the tokenization algorithm.

## Claims

### Claim 1

A method, comprising:
receive, by a computing system, a token comprising key request information;
retrieve, by the computing system, the key request information from the token;
requesting, by the computing system, a key for the token based on the key request information, the token corresponding to output of a tokenization algorithm receiving a value and a derivation key as an input, wherein the derivation key is generated using a unique base derivation key that is not known by the computing system, and wherein the token is associated with a message comprising a key generation identifier associated with the derivation key and a value identifier associated with the value;
retrieving, by the computing system, the derivation key;
detokenizing, by the computing system, the token using the retrieved derivation key to retrieve the value; and
transmitting, by the computing system, the value to an external computing system, wherein the external computing system verifies the token by comparing the token to a fresh token generated using the value and the derivation key.

### Claim 2 (depends on 1)

The method of claim 1, wherein the computing system retrieves the derivation key via an encrypted transmission.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
generating, by the computing system, a second message comprising a second value identifier associated with a second value,
wherein the second message is associated with a second token.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
generating, by the computing system, a second key using the unique base derivation key, a second value, and a key derivation function; and
tokenizing, by the computing system, the second value using the tokenization algorithm to generate a second token, wherein the second value and the second key are inputs of the tokenization algorithm.

### Claim 5

A system, comprising:
memory and one or more processors to:
receive a token comprising key request information;
retrieve the key request information from the token;
request a key for the token based on the key request information, the token corresponding to output of a tokenization algorithm receiving a value and a derivation key as an input, wherein the derivation key is generated using a unique base derivation key that is not known by the one or more processors, and wherein the token is associated with a message comprising a key generation identifier associated with the derivation key and a value identifier associated with the value;
retrieve the derivation key;
detokenize the token using the retrieved derivation key to retrieve the value; and
transmit the value to an external computing system, wherein the external computing system verifies the token by comparing the token to a fresh token generated using the value and the derivation key.

### Claim 6 (depends on 5)

The system of claim 5, wherein the token is detokenized using the derivation key via a tokenization schema that was used to tokenize the token.

### Claim 7 (depends on 6)

The system of claim 6, the one or more processors to:
generate a second message comprising a second value identifier associated with a second value,
wherein the second message is associated with a second token.

### Claim 8 (depends on 5)

The system of claim 5, the one or more processors to:
generate a second key using the unique base derivation key, a second value, and a key derivation function; and
tokenize the second value using the tokenization algorithm to generate a second token, wherein the second value and the second key are inputs of the tokenization algorithm.

### Claim 9

A non-transitory computer readable medium including one or more instructions stored thereon and executable by a processor to:
receive, by the processor, a token comprising key request information;
retrieve, by the processor, the key request information from the token;
request, by the processor, a key for the token based on the key request information, the token corresponding to output of a tokenization algorithm receiving a value and a derivation key as an input, wherein the derivation key is generated using a unique base derivation key that is not known by the processor, and wherein the token is associated with a message comprising a key generation identifier associated with the derivation key and a value identifier associated with the value;
retrieve, by the processor, the derivation key;
detokenize, by the processor, the token using the retrieved derivation key to retrieve the value; and
transmit, by the processor, the value to an external computing system, wherein the external computing system verifies the token by comparing the token to a fresh token generated using the value and the derivation key.

### Claim 10 (depends on 9)

The non-transitory computer readable medium of claim 9, wherein the one or more instructions executable by the processor to:
generate, by the processor, a second message comprising a second value identifier associated with a second value,
wherein the second message is associated with a second token.