Blockchain-based unexpected data detection

• US 10,567,156 B2
• Filed: 11/30/2017
• Issued: 02/18/2020
• Est. Priority Date: 11/30/2017
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Castinado, Joseph, Checco, John C., Lawrence, Patrick Nicholas
• Primary Examiner(s): Giddins, Nelson S.
• Application Number:
  US15/828,052
• Publication Number:
  US 20190165930A1
• Time in Patent Office: 810 Days
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/108 characterised by resources being split in blocks or fragments
• CPC Class Codes: H04L 9/0618 Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Methods, systems, and apparatuses for blockchain-based unexpected data detection are described herein. In some arrangements, a node within a decentralized peer-to-peer (e.g., P2P) network may receive a plurality of network function requests corresponding to the decentralized network. The node may analyze the plurality of network function requests to identify whether the requests included unexpected data and/or irregular data, and/or are associated with flagged wallets and/or smart contracts.

Claims

1. A method, comprising:

at a computing device configured to operate in a peer-to-peer (P2P) network, the computing device including at least one or more processors and memory storing at least a portion of a blockchain of the P2P network;

receiving a first plurality of network function requests, wherein each of the first plurality of network function requests is associated with a particular wallet;

creating a first pending block of the blockchain of the P2P network, wherein the first pending block includes the first plurality of network function requests;

scanning each of the first plurality of network function requests based on one or more security criteria;

based on the scanning, identifying at least one network function request of the first plurality of network function requests that violates at least one of the one or more security criteria;

responsive to identifying the at least one network function request that violates at least one of the one or more security criteria, flagging at least one wallet associated with the at least one network function request;

comparing an identifier corresponding to the at least one flagged wallet with a plurality of identifiers corresponding to previously flagged wallets, wherein each of the previously flagged wallets is associated with a flag rating;

based on the comparison, identifying that the identifier corresponding to the at least one flagged wallet matches with at least one of the plurality of identifiers corresponding to the previously flagged wallets; and

updating the flag rating associated with the at least one flagged wallet matched with at least one of the previously flagged wallets;

receiving, from a user of the computing device, entry of information corresponding to a network function request involving the at least one flagged wallet, wherein the network function request and the first plurality of network function requests include one or more of balance sheet transaction requests and smart contract operation requests; and

displaying the flag rating associated with the at least one flagged wallet.

2. The method of claim 1, further comprising:

adding the first pending block to the blockchain of the P2P network; and

receiving a second plurality of network function requests related to a second pending block of the blockchain of the P2P network, wherein at least one of the second plurality of network function requests references the at least one flagged wallet.

3. The method of claim 2, further comprising:

removing the at least one of the second plurality of network function requests from the second pending block based on the reference to the at least one flagged wallet; and

adding the second pending block to the blockchain of the P2P network without performing a function corresponding to the at least one of the second plurality of network function requests.

4. The method of claim 2, further comprising:

wherein the at least one of the second plurality of network function requests that references the at least one flagged wallet is a smart contract request associated with the at least one flagged wallet,

identifying a block of the blockchain comprising a smart contract corresponding to the smart contract request;

parsing the smart contract to identify one or more operations associated with the smart contract;

determining that at least one of the one or more operations is a malicious operation;

executing the smart contract without performing the malicious operation; and

adding the second pending block to the blockchain of the P2P network.

5. A computing device configured to operate in a peer-to-peer (P2P) network, comprising:

one or more processors; and

memory storing at least a portion of a blockchain of the P2P network and computer-readable instructions that, when executed by the one or more processors, cause the computing device to;

receive a first plurality of network function requests, wherein each of the first plurality of network function requests is associated a particular wallet;

create a first pending block of the blockchain of the P2P network, wherein the first pending block includes the first plurality of network function requests;

scan each of the first plurality of network function requests based on one or more security criteria;

based on the scanning, identify at least one network function request of the first plurality of network function requests that violates at least one of the one or more security criteria; and

responsive to identifying the at least one network function request that violates at least one of the one or more security criteria, flag at least one wallet associated with the at least one network function request;

compare an identifier corresponding to the at least one flagged wallet with a plurality of identifiers corresponding to previously flagged wallets, wherein each of the previously flagged wallets is associated with a flag rating;

based on the comparison, identify that the identifier corresponding to the at least one flagged wallet matches with at least one of the plurality of identifiers corresponding to the previously flagged wallets; and

update the flag rating associated with the at least one flagged wallet matched with at least one of the previously flagged wallets;

receive, from a user of the computing device, entry of information corresponding to a network function request involving the at least one flagged wallet, wherein the network function request and the first plurality of network function requests include one or more of balance sheet transaction requests and smart contract operation requests; and

displaying the flag rating associated with the at least one flagged wallet.

6. The computing device of claim 5, wherein the memory stores further computer-readable instructions that, when executed by the one or more processors, cause the computing device to:

add the first pending block to the blockchain of the P2P network; and

receive a second plurality of network function requests related to a second pending block of the blockchain of the P2P network, wherein at least one of the second plurality of network function requests references the at least one flagged wallet.

7. The computing device of claim 6, wherein the memory stores further computer-readable instructions that, when executed by the one or more processors, cause the computing device to:

remove the at least one of the second plurality of network function requests from the second pending block based on the reference to the at least one flagged wallet; and

add the second pending block to the blockchain of the P2P network without performing a function corresponding to the at least one of the second plurality of network function requests.

8. The computing device of claim 6, wherein the at least one of the second plurality of network function requests that references the at least one flagged wallet is a smart contract request associated with the at least one flagged wallet.

9. One or more non-transitory computer-readable media storing instructions that, when executed by a computing device configured to operate in a peer-to-peer (P2P) network, the computing device including at least one or more processors and memory storing at least a portion of a blockchain of the (P2P) network, cause the computing device to:

receive a first plurality of network function requests related to a first pending block of the blockchain of the P2P network, wherein each of the first plurality of network function requests are associated with one or more wallets;

scan each of the first plurality of network function requests based on one or more security criteria;

based on the scanning, identify at least one network function request of the first plurality of network function requests that violates at least one of the one or more security criteria; and

responsive to identifying the at least one network function request that violates at least one of the one or more security criteria, flag at least one wallet associated with the at least one network function request;

compare an identifier corresponding to the at least one flagged wallet with a plurality of identifiers corresponding to previously flagged wallets, wherein each of the previously flagged wallets is associated with a flag rating;

based on the comparison, identify that the identifier corresponding to the at least one flagged wallet matches with at least one of the plurality of identifiers corresponding to the previously flagged wallets;

update the flag rating associated with the at least one flagged wallet matched with at least one of the previously flagged wallets;

receive, from a user of the computing device, entry of information corresponding to a network function request involving the at least one flagged wallet, wherein the network function request and the first plurality of network function requests include one or more of balance sheet transaction requests and smart contract operation requests; and

displaying the flag rating associated with the at least one flagged wallet.

10. The one or more non-transitory computer-readable media of claim 9, storing additional instructions that, when executed by the computing device, cause the computing device to:

add the first pending block to the blockchain of the P2P network; and

receive a second plurality of network function requests related to a second pending block of the blockchain of the P2P network, wherein at least one of the second plurality of network function requests references the at least one flagged wallet.

11. The one or more non-transitory computer-readable media of claim 10, storing additional instructions that, when executed by the computing device, cause the computing device to:

remove the at least one of the second plurality of network function requests from the second pending block based on the reference to the at least one flagged wallet; and

add the second pending block to the blockchain of the P2P network without performing a function corresponding to the at least one of the second plurality of network function requests.

12. The one or more non-transitory computer-readable media of claim 10, storing additional instructions that, when executed by the computing device, cause the computing device to:

wherein the at least one of the second plurality of network function requests that references the at least one flagged wallet is a smart contract request associated with the at least one flagged wallet,

identify a block of the blockchain comprising a smart contract corresponding to the smart contract request;

parse the smart contract to identify one or more operations associated with the smart contract;

determine that at least one of the one or more operations is a malicious operation;

execute the smart contract without performing the malicious operation; and

add the second pending block to the blockchain of the P2P network.