Patent ID: 11861597
Assignee: WELLS FARGO BANK, N.A.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 6:
7. A system, comprising:
a database server; and
a hardware security module (HSM);
wherein the HSM is structured to:
generate a cryptogram by encrypting a keyed-hash message authentication code (HMAC) key by a master key encryption key (MK);
transmit, to a database server, the cryptogram;
destroy the cryptogram at the HSM, in response to the transmitting the cryptogram to the database server;
receive, from the database server, a password request message comprising the cryptogram and an identifier (ID) generated by the database server;
generate a wallet password based on the ID and the received cryptogram;
generate a digital wallet comprising a data encryption key (DK) retrievable only via the wallet password;
transmit, to the database server, the digital wallet comprising the DK without the wallet password;
destroy the wallet password in response to the transmitting the DK to the database server;
decrypt the received cryptogram into a decrypted HMAC key;
regenerate the wallet password using the ID and the decrypted HMAC key;
encrypt the regenerated wallet password; and
transmit, to the database server, the encrypted regenerated wallet password; and

wherein the database server is structured to:
decrypt the encrypted regenerated wallet password; and
retrieve the DK from the digital wallet using the decrypted regenerated wallet password.