# US 12,763,948 B2 · Alternating encryption schemes

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,763,948 B2
- Document ID: US12763948B2
- Status: Granted
- Kind: B2
- Application number: 18/901,323
- Filed: 2024-09-30
- Published: 2026-04-23
- Granted: 2026-10-13
- Earliest claimed: 2024-09-30
- Assignees: Bank of America Corporation
- Applicants: Bank of America Corporation
- Inventors: Manu Kurian; Jabir Mahammad
- Web page: https://patentgrep.com/patent/US12763948B2

## CPC

- H04L 9/14: using a plurality of keys or algorithms
- G06N 10/20: Models of quantum computing, e.g. quantum circuits or universal quantum computers
- H04L 9/0631: {Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS

## Abstract

Apparatus, methods and systems for dynamically encrypting data. Methods may include encrypting a dataset with a first encryption scheme. Methods may include storing the dataset in a first memory location. Methods may include continually executing an alternating encryption scheme. The alternating encryption scheme may include replacing the first encryption scheme with a second encryption scheme at randomly selected times. Methods may include detecting an attempted breach of the first encryption scheme. Methods may include replacing the dataset with a decoy dataset. Methods may include re-encrypting the dataset with a third encryption scheme. Methods may include storing the dataset in a second memory location. Based on monitoring the attempted breach, methods may include identifying access points having greater than a threshold level of vulnerability to attempted breaches. Methods may include adding an additional layer of encryption to the identified access points. Methods may include resuming the alternating encryption scheme.

## Claims

### Claim 1

A method for dynamically encrypting data leveraging artificial intelligence and quantum computing, the method comprising:
using an encryption engine executing on a computing platform, encrypting a dataset with a first encryption scheme;
storing the dataset in a first location in a memory that is in electronic communication with the computing platform;
continually executing an alternating encryption scheme, the executing using a quantum randomizing engine, the executing comprising:
randomly selecting a time at which to replace the first encryption scheme; and
at the selected time, replacing the first encryption scheme with a second encryption scheme, the second encryption scheme being randomly selected from a plurality of encryption schemes;
using a monitoring engine executing on the computing platform, monitoring the dataset;
detecting, via the monitoring engine, an attempted breach of the first encryption scheme;
in response to detecting the attempted breach, pausing the alternating encryption scheme;
in response to pausing the alternating encryption scheme:
creating a decoy dataset using an artificial intelligence engine executing on the computing platform;
replacing the dataset with the decoy dataset without changing the first encryption scheme;
re-encrypting the dataset, using the encryption engine, with a third encryption scheme, the third encryption scheme being randomly selected from the plurality of encryption schemes;
storing the dataset in a second location in the memory, the second location being different from the first location;
identifying, through monitoring the attempted breach, a plurality of characteristics characterizing the attempted breach;
based on the plurality of characteristics identifying access points within the computing platform that are identified as having greater than a threshold level of vulnerability to attempted breaches, the identifying using the artificial intelligence engine together with a quantum optimization engine; and
adding an additional layer of encryption to the identified access points; and
after re-encrypting the dataset with the third encryption scheme resuming the alternating encryption scheme.

### Claim 2 (depends on 1)

The method of claim 1 wherein:
the first encryption scheme and the second encryption scheme include a 28-bit advanced encryption standard (“AES”) encryption; and
the third encryption scheme includes a192-bit AES encryption.

### Claim 3 (depends on 1)

The method of claim 1 wherein:
the first encryption scheme and the second encryption scheme include 192-bit advanced encryption standard (“AES”) encryption; and
the third encryption scheme includes a 256-bit AES encryption.

### Claim 4 (depends on 1)

The method of claim 1 wherein the first encryption scheme is an advanced encryption standard (“AES”) encryption, a triple data encryption standard (“TDES”), Rivest Sahmir Adleman (“RSA”) encryption, a Blowfish encryption, a Twofish encryption, a format preserving encryption (“FPE”) or an elliptic curve cryptography (“EEC”) encryption.

### Claim 5 (depends on 1)

The method of claim 1 wherein the second encryption scheme is an advanced encryption standard (“AES”) encryption, a triple data encryption standard (“TDES”), Rivest Sahmir Adleman (“RSA”) encryption, a Blowfish encryption, a Twofish encryption, a format preserving encryption (“FPE”) or an elliptic curve cryptography (“EEC”) encryption.

### Claim 6 (depends on 1)

The method of claim 1 wherein the third encryption scheme is an advanced encryption standard (“AES”) encryption, a triple data encryption standard (“TDES”), Rivest Sahmir Adleman (“RSA”) encryption, a Blowfish encryption, a Twofish encryption, a format preserving encryption (“FPE”) or an elliptic curve cryptography (“EEC”) encryption.

### Claim 7 (depends on 1)

The method of claim 1 wherein re-encrypting the dataset with the third encryption scheme further comprises:
segmenting the dataset into a plurality of data segments;
encrypting, using the encryption engine, each data segment with a different encryption scheme from the plurality of encryption schemes; and
storing each data segment in a different location within the memory.

### Claim 8 (depends on 1)

The method of claim 1 wherein the access points includes at least one network connection.

### Claim 9 (depends on 1)

The method of claim 1 wherein:
the computing platform is a classical computing platform;
the quantum randomizing engine and the quantum optimization engine are executing on a quantum computing platform; and
the quantum computing platform is in electronic communication with the classical computing platform.

### Claim 10 (depends on 1)

The method of claim 1 wherein identifying the access points further comprises:
identifying, using the artificial intelligence engine, a plurality of access points;
assigning, using the quantum optimization engine, a score to each of the plurality of access points; and
selecting, using the artificial intelligence engine, a group of access points that are assigned a score greater than/equal to a threshold score.

### Claim 11

An apparatus for dynamic data encryption leveraging artificial intelligence and quantum computing, the apparatus comprising:
an encryption engine executing on a computing platform, the encryption engine configured to encrypt a dataset with a first encryption scheme;
a memory that is in electronic communication with the computing platform, the memory configured to store the dataset in a first location;
a quantum randomization engine configured to continually execute an alternating encryption scheme, the quantum randomization engine configured to:
randomly select a time at which to replace the first encryption scheme; and
randomly select a second encryption scheme from a plurality of encryption schemes;
an artificial intelligence engine executing on the computing platform configured to replace the first encryption scheme with the second encryption scheme at the selected time; and
a monitoring engine executing on the computing platform configured to:
monitor the dataset;
detect an attempted breach of the first encryption scheme;
wherein, in response to detecting the attempted breach:
the computing platform is configured to pause the alternating encryption scheme;
the artificial intelligence engine is configured to:
create a decoy dataset; and
replace the dataset with the decoy dataset without changing the first encryption scheme;
the encryption engine is configured to re-encrypt the dataset with a third encryption scheme, the third encryption scheme being randomly selected from the plurality of encryption schemes;
the memory is configured to store the dataset in a second location, the second location being different from the first location;
the monitoring engine is configured to identify a plurality of characteristics characterizing the attempted breach;
the artificial intelligence engine together with a quantum optimization engine are configured to identify access points within the computing platform that are identified as having greater than a threshold level of vulnerability to attempted breaches, the access points being identified based on the plurality of characteristics;
the encryption engine is further configured to add an additional layer of encryption around the identified access points; and
after re-encrypting the dataset with the third encryption scheme, the computing platform is further configured to resume the alternating encryption scheme.

### Claim 12 (depends on 11)

The apparatus of claim 11 wherein:
the first encryption scheme and the second encryption scheme include a 28-bit advanced encryption standard (“AES”) encryption; and
the third encryption scheme includes a192-bit AES encryption.

### Claim 13 (depends on 11)

The apparatus of claim 11 wherein:
the first encryption scheme and the second encryption scheme include 192-bit advanced encryption standard (“AES”) encryption; and
the third encryption scheme includes a 256-bit AES encryption.

### Claim 14 (depends on 11)

The apparatus of claim 11 wherein the first encryption scheme is an advanced encryption standard (“AES”) encryption, a triple data encryption standard (“TDES”), Rivest Sahmir Adleman (“RSA”) encryption, a Blowfish encryption, a Twofish encryption, a format preserving encryption (“FPE”) or an elliptic curve cryptography (“EEC”) encryption.

### Claim 15 (depends on 11)

The apparatus of claim 11 wherein the second encryption scheme is an advanced encryption standard (“AES”) encryption, a triple data encryption standard (“TDES”), Rivest Sahmir Adleman (“RSA”) encryption, a Blowfish encryption, a Twofish encryption, a format preserving encryption (“FPE”) or an elliptic curve cryptography (“EEC”) encryption.

### Claim 16 (depends on 11)

The apparatus of claim 11 wherein the third encryption scheme is an advanced encryption standard (“AES”) encryption, a triple data encryption standard (“TDES”), Rivest Sahmir Adleman (“RSA”) encryption, a Blowfish encryption, a Twofish encryption, a format preserving encryption (“FPE”) or an elliptic curve cryptography (“EEC”) encryption.

### Claim 17 (depends on 11)

The apparatus of claim 11 wherein when re-encrypting the third encryption scheme:
the encryption engine is further configured to:
segment the dataset into a plurality of data segments; and
encrypt each data segment with a different encryption scheme from the plurality of encryption schemes; and
the memory is further configured to store each data segment in a different location within the memory.

### Claim 18 (depends on 11)

The apparatus of claim 11 wherein the access points includes at least one network connection.

### Claim 19 (depends on 11)

The apparatus of claim 11 wherein:
the computing platform is a classical computing platform;
the quantum randomizing engine and the quantum optimization engine are configured to execute on a quantum computing platform; and
the quantum computing platform is in electronic communication with the classical computing platform.

### Claim 20 (depends on 11)

The apparatus of claim 11 wherein when identifying the access points:
the artificial intelligence engine is further configured to identify a plurality of access points;
the quantum optimization engine is further configured to assign a score to each of the plurality of access points; and
the artificial intelligence engine is further configured to select a group of access points that are assigned a score greater than/equal to a threshold score.