# US 2026/0100837 A1 · Systems and methods for improving security in network environments > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0100837 A1 - Document ID: US20260100837A1 - Status: Published application - Kind: A1 - Application number: 19/415,700 - Filed: 2025-12-10 - Published: 2026-04-09 - Earliest claimed: 2024-02-14 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Suman Garrepalli; David Harrington; William Graf - Web page: https://patentgrep.com/patent/US20260100837A1 ## CPC - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods are described herein for improving security in network environments by dynamically generating access credentials off-line that are resilient to impersonation attempts. For example, the system may receive, at a local token service, a first external request from a remote token service for a first dynamically generated token. The system may retrieve, at the local token service, a first token template for the remote token service. The system may, based on the first token template, select a first object-based storage device and a second object-based storage device. The system may transmit, by the local token service, a first internal request to the first object-based storage device and a second internal request to the second object-based storage device. The system may populate the first token template with the first token portion and the second token portion to generate the first dynamically generated token. ## Claims ### Claim 1 A system for improving security in network environments by dynamically generating access credentials off-line that are resilient to impersonation attempts, the system comprising: one or more processors; and one or more non-transitory, computer-readable mediums comprising instructions recorded thereon that when executed by the one or more processors cause operations comprising: selecting, in response to a request for a first dynamically generated token, a first object-based storage device and a second object-based storage device, wherein the first object-based storage device and the second object-based storage device share a common object store; transmitting a first internal request to the first object-based storage device and a second internal request to the second object-based storage device; receiving, from the first object-based storage device, a first internal response, wherein the first internal response comprises a first token portion; receiving, from the second object-based storage device, a second internal response, wherein the second internal response comprises a second token portion; using the first token portion and the second token portion to generate the first dynamically generated token; and transmitting a first external response comprising the first dynamically generated token. ### Claim 2 A method for improving security in network environments by dynamically generating access credentials off-line that are resilient to impersonation attempts, the method comprising: receiving a first external request for a first dynamically generated token; transmitting a first internal request to a first object-based storage device and a second internal request to a second object-based storage device; receiving, from the first object-based storage device, a first internal response, wherein the first internal response comprises a first token portion; receiving, from the second object-based storage device, a second internal response, wherein the second internal response comprises a second token portion; and using the first token portion and the second token portion to generate the first dynamically generated token. ### Claim 3 (depends on 2) The method of claim 2, further comprising: retrieving, at a local token service, a first token template for the remote token service; and based on the first token template, selecting the first object-based storage device and the second object-based storage device. ### Claim 4 (depends on 2) The method of claim 2, further comprising: receiving a second external request for a second dynamically generated token; retrieving a token template; based on the token template, selecting a third object-based storage device and a fourth object-based storage device; transmitting an additional internal request to the third object-based storage device and a fourth internal request to the fourth object-based storage device; receiving, from the third object-based storage device, a third internal response, wherein the third internal response comprises a third token portion; receiving, from the fourth object-based storage device, a fourth internal response, wherein the fourth internal response comprises a fourth token portion; and populating the token template with the third token portion and the fourth token portion to generate the second dynamically generated token. ### Claim 5 (depends on 2) The method of claim 2, further comprising: retrieving a first object-based storage device identifier for the first object-based storage device; and inserting the first object-based storage device identifier into the first internal request. ### Claim 6 (depends on 2) The method of claim 2, further comprising: retrieving a first job identifier for the first external request; and inserting the first job identifier into the first internal request. ### Claim 7 (depends on 2) The method of claim 2, further comprising: retrieving a first user identifier for the first external request; and inserting the first user identifier into the first internal request. ### Claim 8 (depends on 2) The method of claim 2, further comprising: retrieving a first time window for the first external request; and inserting the first time window into the first internal request. ### Claim 9 (depends on 2) The method of claim 2, further comprising: retrieving a first role based on the first external request; and inserting the first role into the first internal request. ### Claim 10 (depends on 2) The method of claim 2, wherein using the first token portion and the second token portion to generate the first dynamically generated token further comprises: receiving a first hash value in the first internal response, wherein the first hash value is based on hashing a first portion of the first internal request and first data located at the first object-based storage device; and determining the first dynamically generated token based on the first hash value. ### Claim 11 (depends on 10) The method of claim 10, wherein using the first token portion and the second token portion to generate the first dynamically generated token further comprises: receiving a second hash value in the second internal response, wherein the second hash value is based on hashing a second portion of the second internal request and second data located at the second object-based storage device; and determining the first dynamically generated token based on hashing the first hash value and the second hash value. ### Claim 12 (depends on 2) The method of claim 2, wherein using the first token portion and the second token portion to generate the first dynamically generated token further comprises: retrieving a token protocol; and combining the first token portion and the second token portion based on the token protocol. ### Claim 13 (depends on 2) The method of claim 2, wherein receiving the first internal response further comprises receiving a first contribution to a multi-party computation, and wherein receiving the second internal response further comprises receiving a second contribution to the multi-party computation. ### Claim 14 (depends on 2) The method of claim 2, wherein transmitting the first internal request to the first object-based storage device further comprises: determining a first bucket name for the first object-based storage device; and determining a first object key for a location within the first object-based storage device. ### Claim 15 (depends on 2) The method of claim 2, wherein generating the first dynamically generated token further comprises: receiving a first token requirement in the first external request; and selecting a first token template from a plurality of token templates based on the first token requirement. ### Claim 16 One or more non-transitory, computer-readable mediums comprising instructions recorded thereon that when executed by one or more processors cause operations comprising: receiving, at a local token service, a first external request from a remote token service for a first dynamically generated token; retrieving, at the local token service, a first token template for the remote token service; based on the first token template, selecting a first object-based storage device and a second object-based storage device; transmitting, by the local token service, a first internal request to the first object-based storage device and a second internal request to the second object-based storage device; receiving, from the first object-based storage device, a first internal response, wherein the first internal response comprises a first token portion; receiving, from the second object-based storage device, a second internal response, wherein the second internal response comprises a second token portion; and populating the first token template with the first token portion and the second token portion to generate the first dynamically generated token. ### Claim 17 (depends on 16) The one or more non-transitory, computer-readable mediums of claim 16, wherein selecting the first object-based storage device based on the first token template further comprises: retrieving a first object-based storage device identifier for the first object-based storage device; and inserting the first object-based storage device identifier into the first internal request. ### Claim 18 (depends on 16) The one or more non-transitory, computer-readable mediums of claim 16, wherein selecting the first object-based storage device based on the first token template further comprises: retrieving a first job identifier for the first external request; and inserting the first job identifier into the first internal request. ### Claim 19 (depends on 16) The one or more non-transitory, computer-readable mediums of claim 16, wherein selecting the first object-based storage device based on the first token template further comprises: retrieving a first user identifier for the first external request; and inserting the first user identifier into the first internal request. ### Claim 20 (depends on 16) The one or more non-transitory, computer-readable mediums of claim 16, wherein selecting the first object-based storage device based on the first token template further comprises: retrieving a first time window for the first external request; and inserting the first time window into the first internal request.