Symmetric encryption for private smart contracts among multiple parties in a private peer-to-peer network

• US 10,735,183 B1
• Filed: 06/28/2018
• Issued: 08/04/2020
• Est. Priority Date: 06/30/2017
• Status: Active Grant

• Current Assignee: Experian Information Solutions Incorporated (Experian plc)
• Original Assignee: Experian Information Solutions Incorporated (Experian plc)
• Inventors: Mehta, Vijay, Phan, Alexander
• Primary Examiner(s): Lemma, Samson B
• Application Number:
  US16/022,354
• Time in Patent Office: 768 Days
• Field of Search: 713171
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 67/1074 for supporting data block transmission mechanisms file transfer H04L67/06
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Features for providing a secure method of symmetric encryption for private smart contacts among multiple parties in a private peer-to-peer network. The features include a master key representing a unique blockchain ledger. The master key may be shared among multiple participants in a private peer-to-peer network. Sharing of the master key may include communicating the master key in an encrypted message (e.g., email) using public key infrastructure (PKI). In some implementations, more complex distribution features may be includes such as quantum entanglement. The features support instantiation of a smart contract using a specific master key. The request may be submitted as an entry to the ledger with appropriate metadata and/or payload information for identifying and processing the request.

Claims

1. A system for secure distributed electronic ledgering, the system comprising:

a master encryption key store storing a plurality of master encryption keys associated with respective client devices;

a distributed electronic ledger storing a record generated by a client device included in the client devices, wherein the record includes;

(i) a first portion including unencrypted metadata;

(ii) a second portion including an internal encryption key encrypted with a master encryption key; and

(iii) a third portion including a request for a service, the request encrypted with the internal encryption key;

a computer-readable memory storing executable instructions; and

one or more computer processors in communication with the computer-readable memory, wherein the one or more computer processors are configured to execute the executable instructions to at least;

determine that the record has been added to the distributed electronic ledger based at least in part on the unencrypted metadata;

retrieve the master encryption key from the master encryption key store based at least in part on the unencrypted metadata;

decrypt the second portion of the record using the master encryption key to obtain the internal encryption key;

decrypt the third portion of the record to obtain the request;

transmit the request to a service selected based at least in part on the request;

receive a response from the service;

insert at least a portion of the response into the third portion of the record;

encrypt the third portion of the record using an encryption key; and

store the record in the distributed electronic ledger.

2. The system of claim 1, wherein the encryption key used for encrypting the third portion comprises the internal encryption key.

3. The system of claim 1, wherein the one or more computer processors are further configured to execute the executable instructions to at least:

generate a revised internal encryption key in response to obtaining the internal encryption key; and

encrypt the second portion of the record using the revised internal encryption key, and

wherein the encryption key used for encrypting the third portion comprises the revised internal encryption key.

4. The system of claim 1, wherein the distributed electronic ledger is further configured to transmit the record via a network to a remote distributed electronic ledger hosted by one of the client devices.

5. The system of claim 4, wherein the network comprises a private peer-to-peer network.

6. The system of claim 1, wherein the one or more computer processors are further configured to execute the executable instructions to at least:

identify a set of records stored in the distributed electronic ledger including a value in respective unencrypted metadata portions;

for individual records in the set of records;

(i) retrieve the master encryption key from the master encryption key store based at least in part on unencrypted metadata of a first portion of an individual record;

(ii) decrypt a second portion of the individual record using the master encryption key to obtain an individual internal encryption key;

(iii) decrypt a third portion of the individual record using the individual internal encryption key to obtain individual record payload data; and

(iv) validate the individual record payload data.

7. The system of claim 6, wherein the one or more computer processors are further configured to execute the executable instructions to at least:

initiate a transfer of resources from a first source identified by the individual record payload data to a destination associated with the service.

8. A system for secure distributed electronic ledgering, the system comprising:

a computer-readable memory storing executable instructions; and

one or more computer processors in communication with the computer-readable memory, wherein the one or more computer processors are configured to execute the executable instructions to at least;

determine that a record has been added to a distributed electronic ledger based at least in part on unencrypted metadata included in a first portion of the record, wherein the record further includes;

(a) a second portion including an internal encryption key encrypted with a master encryption key, and (b) a third portion including a request for a service, the request encrypted with the internal encryption key;

retrieve the master encryption key from a data store based at least in part on the unencrypted metadata;

decrypt the second portion of the record using the master encryption key to obtain the internal encryption key;

decrypt the third portion of the record to obtain the request;

transmit the request to a service selected based at least in part on the request;

receive a response from the service;

insert at least a portion of the response into the third portion of the record;

encrypt the third portion of the record using an encryption key; and

store the record in the distributed electronic ledger.

9. The system of claim 8, wherein the encryption key used for encrypting the third portion comprises the internal encryption key.

10. The system of claim 8, wherein the one or more computer processors are further configured to execute the executable instructions to at least:

generate a revised internal encryption key in response to obtaining the internal encryption key; and

encrypt the second portion of the record using the revised internal encryption key, and

wherein the encryption key used for encrypting the third portion comprises the revised internal encryption key.

11. The system of claim 8, wherein the distributed electronic ledger is further configured to transmit the record via a network to a remote distributed electronic ledger hosted by a client device storing the master encryption key.

12. The system of claim 11, wherein the network comprises a private peer-to-peer network.

13. The system of claim 8, wherein the one or more computer processors are further configured to execute the executable instructions to at least:

identify a set of records stored in the distributed electronic ledger including a value in respective unencrypted metadata portions;

for individual records in the set of records;

(i) retrieve the master encryption key from the data store based at least in part on unencrypted metadata of a first portion of an individual record;

(ii) decrypt a second portion of the individual record using the master encryption key to obtain an individual internal encryption key;

(iii) decrypt a third portion of the individual record using the individual internal encryption key to obtain individual record payload data; and

(iv) validate the individual record payload data.

14. The system of claim 13, wherein the one or more computer processors are further configured to execute the executable instructions to at least:

initiate a transfer of a resource from a first source identified by the individual record payload data to a destination associated with the service.