Patent ID: 11962691
Assignee: FMR LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computerized method for generating a multi-signature access token on a network for signature validation, the method comprising:
executing a first keystore on a first host;
generating, by the first keystore having a first security implementation, a first asymmetric key pair that includes a first private key and a first public key;
executing a second keystore on a second host;
generating, by the second keystore having a second security implementation, a second asymmetric key pair that includes a second private key and a second public key, wherein the first security implementation of the first keystore and the second security implementation of the second keystore are different security implementations;
accessing, by only an authorization service on the network, the first private key and the second private key;
distributing the first public key and the second public key to any device or service on the network;
receiving a user request that includes request data and which is associated with user information;
generating, by the authorization service, a first signature by applying the first private key to the user information;
generating, by the authorization service, a second signature by applying the second private key to the user information;
generating, by the authorization service, an access token that includes (1) the user information, (2) the first signature, and (3) the second signature;
transmitting the access token to a selected target service of a plurality of target services;
generating, by the selected target service, (1) a first validation value by applying the first public key to the first signature and (2) a second validation value by applying the second public key to the second signature;
determining, by the selected target service, that the user request is valid when the first validation value correlates to the user information and the second validation value correlates to the user information; and
determining, by the selected target service, that the user request is invalid when the first validation value does not correlate to the user information or the second validation value does not correlate to the user information.