# US 2019/0378129 A1 · Encapsulated security tokens for electronic transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0378129 A1
- Document ID: US20190378129A1
- Status: Published application
- Kind: A1
- Application number: 16/547,833
- Filed: 2019-08-22
- Published: 2019-12-12
- Earliest claimed: 2012-05-04
- Assignees: Institutional Cash Distributors Technology, LLC
- Applicants: Institutional Cash Distributors Technology, LLC
- Inventors: MARK A. HEYNER
- Web page: https://patentgrep.com/patent/US20190378129A1

## CPC

- G06Q 20/3829: {involving key management}
- G06F 21/60: Protecting data
- G06F 21/602: {Providing cryptographic facilities or services}
- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- G06Q 20/3823: {combining multiple encryption tools for a transaction}
- G06Q 20/3825: {Use of electronic signatures}
- G06Q 20/385: {using an alias or single-use codes}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- H04L 9/3247: {involving digital signatures}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Functional data for use in one or more digital transactions are secured by using an encapsulated security token (EST). In certain embodiments, the EST is created by encapsulating digital data including the functional data using at least two cryptographic systems of two parties. The encapsulation and subsequent de-encapsulation can utilize cryptographic systems of the parties that involve a private key for signing and decryption and a public key for encryption and signature verification. If constructed carefully over a series of rigorous events, the resulting EST can be practically impossible to counterfeit. In addition, a propagation of rights can be tracked for auditing and rights can be easily terminated or modified.

## Claims

### Claim at position 1

1-69. (canceled)

### Claim 70

A method for use in authenticating functional data presented in connection with a digital transaction, comprising the steps of:
receiving first functional data for a proposed digital transaction from a first user;
receiving an encapsulated security token from said first user, said encapsulated security token having been generated by encapsulating at least first digital data using at least first and second cryptographic systems including first and second digital signatures and first and second signature verifications respectively;
de-encapsulating said encapsulated security token using at least said first and second signature verifications to obtain said first digital data; and
using said first functional data and said first digital data to control said proposed digital transaction.

### Claim 71 (depends on 70)

A method as set forth in claim 70, wherein said first digital data includes core functional data, and said step of using comprises comparing said core functional data to said first functional data.

### Claim 72 (depends on 70)

A method as set forth in claim 70, wherein said first digital data comprises, at least in part, one or more additional encapsulated security tokens generated by encapsulating at least second digital data including at least a second element of core functional data using a further digital signature system including a further digital signature and a further signature verification.

### Claim 73 (depends on 72)

A method as set forth in claim 72, wherein said step of using further comprises de-encapsulating said one or more additional encapsulated security tokens to obtain said at least second digital data and comparing at least said second element of core functional data to said first functional data.

### Claim 74

An apparatus for use in authenticating functional data presented in connection with a digital transaction, comprising:
one or more processors operative for:
1) receiving first functional data for a proposed digital transaction from a first user;
2) receiving an encapsulated security token from said first user, said encapsulated security token having been generated by encapsulating at least first digital data using at least first and second cryptographic systems including first and second digital signatures and first and second signature verifications respectively;
3) de-encapsulating said encapsulated security token using at least said first and second signature verifications to obtain said first digital data; and
4) using said first functional data and said first digital data to control said proposed digital transaction.

### Claim 75 (depends on 74)

An apparatus as set forth in claim 74, wherein said first digital data includes core functional data, and said step of using comprises comparing said core functional data to said first functional data.