Patent ID: 11962691
Assignee: FMR LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A system for generating a multi-signature access token for signature validation, the system comprising:
a memory;
a processor coupled to the memory;
a first keystore executing on a first host and configured to have a first security implementation and further configured to generate a first asymmetric key pair that includes a first private key and a first public key;
a second keystore executing on a second host and configured to have a second security implementation and further configured to generate a second asymmetric key pair that includes a second private key and a second public key, wherein the first security implementation and the second security implementation are different security implementations;
an authorization service configured to access the first private key and the second private key, wherein only the authorization service of the system accesses the first private key and the second private key;
the authorization service configured to:
generate a first signature by applying the first private key to user information corresponding to a user request which includes request data;
generate a second signature by applying the second private key to the user information;
generate an access token that includes (1) the user information, (2) the first signature, and (3) the second signature;
transmit the access token to a target service;

the target service configured to:
generate (1) a first validation value by applying the first public key to the first signature and (2) a second validation value by applying the second public key to the second signature;
determine that the user request is valid when the first validation value correlates to the user information and the second validation value correlates to the user information; and
determine that the user request is invalid when the first validation value does not correlate to the user information or the second validation value does not correlate to the user information.