BLOCKCHAIN-BASED SYSTEMS, METHODS, AND APPARATUS FOR SECURING ACCESS TO INFORMATION STORES

• US 20190050855A1
• Filed: 07/24/2018
• Published: 02/14/2019
• Est. Priority Date: 07/24/2017
• Status: Abandoned Application

• Current Assignee: Kadena LLC
• Original Assignee: Kadena LLC
• Inventors: Martino, William, Popejoy, Stuart
• Application Number:
  US16/044,464
• Publication Number:
  US 20190050855A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/065 using e-cash
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Systems, apparatus, methods, and articles of manufacture are described herein for allowing secured access as a service to information in a distributed ledger system (e.g., a blockchain).

Claims

1. A system for controlling access to information stored in a distributed ledger environment, the system comprising:

a processing device; and

a memory device in communication with the processor, the memory device storing operating instructions and programmatic code defining a blockchain application operable to manage a distributed ledger, wherein executing of the operating instructions by the processing device results in;

receiving a first smart contract comprising a first data table, a first keyset, and a first code module,

wherein successful execution of the first code module is required for access to the first data table;

executing the first smart contract;

determining whether the first smart contract executed successfully; and

performing one of;

permitting access to the first data table if the first smart contract executed successfully, or

denying access to the first data table if the first smart contract did not execute successfully.

2. The system of claim 1, wherein the first code module defines a call to a second smart contract, the second smart contract comprising a second data table, a second keyset, and a second code module.

3. The system of claim 2, wherein the second smart contract comprise a coroutine defining a multi-step function.

4. The system of claim 2, wherein the second smart contract defines a multi-step oracle process.

5. The system of claim 2, wherein the second smart contract defines an automated push-based oracle process.

6. The system of claim 2, wherein the second smart contract defines an automated pull-based oracle process.

7. The system of claim 2, wherein the first smart contract is authored by a first entity and the second smart contract is authored by a second entity.

8. The system of claim 1, wherein successful execution of the second code module is required for access to the second data table.

9. The system of claim 1, wherein executing of the operating instructions by the processing device further results in compiling the first smart contract.

10. The system of claim 8, wherein compiling the first smart contract comprising importing a second code module of a second smart contract inline in the first code module.

11. The system of claim 1, wherein executing of the operating instructions by the processing device further results in:

receiving a key; and

verifying authorization to execute the first smart contract based on the received key and the first keyset; and

executing defined logic of the first smart contract.

12. The system of claim 1, wherein executing of the operating instructions by the processing device further results in:

receiving a key; and

verifying authorization to execute a second smart contract based on the received key and the second keyset.

13. The system of claim 1, wherein executing of the operating instructions by the processing device further results in:

determining that the first smart contract executed successfully; and

committing a change to the distributed ledger.

14. The system of claim 1, wherein executing the first smart contract comprises:

initiating a first step of the first code module;

yielding execution of the first code module;

receiving a message;

in response to receiving the message, resuming execution of the first smart contract in a second step.

15. The system of claim 1, wherein executing the first smart contract comprises:

in a first step, calling a second smart contract by the first smart contract;

yielding execution of the first smart contract;

receiving a response by the second smart contract;

in response to receiving the response, in a second step, resuming execution of the first smart contract; and

validating the response from the second smart contract.

16. A method for controlling access to information stored in a distributed ledger environment, comprising:

receiving a first smart contract comprising a first data table, a first keyset, and a first code module,

wherein the first code module defines a call to a second smart contract, the second smart contract comprising a second data table, a second keyset, and a second code module,

wherein successful execution of the first code module is required for access to the first data table, and

wherein successful execution of the second code module is required for access to the second data table;

executing the first smart contract;

determining whether the first smart contract executed successfully; and

performing one of;

permitting access to the first data table if the first smart contract executed successfully, or

denying access to the first data table if the first smart contract did not execute successfully.

17. The method of claim 16, wherein the first code module defines a call to a second smart contract, the second smart contract comprising a second data table, a second keyset, and a second code module.

18. The method of claim 17, wherein the second smart contract comprise a coroutine defining a multi-step function.

19. The method of claim 17, wherein the second smart contract defines a multi-step oracle process.

20. The method of claim 17, wherein the second smart contract defines an automated push-based oracle process.

21. The method of claim 17, wherein the second smart contract defines an automated pull-based oracle process.

22. The method of claim 17, wherein the first smart contract is authored by a first entity and the second smart contract is authored by a second entity.

23. The method of claim 16, wherein successful execution of the second code module is required for access to the second data table.

24. The method of claim 16, further comprising:

compiling the first smart contract.

25. The system of claim 24, wherein compiling the first smart contract comprising importing a second code module of a second smart contract inline in the first code module.

26. The method of claim 16, further comprising:

receiving a key; and

verifying authorization to execute the first smart contract based on the received key and the first keyset; and

executing defined logic of the first smart contract.

27. The method of claim 16, further comprising:

receiving a key; and

verifying authorization to execute a second smart contract based on the received key and the second keyset.

28. The method of claim 16, further comprising:

determining that the first smart contract executed successfully; and

committing a change to the distributed ledger.

29. The method of claim 16, wherein executing the first smart contract comprises:

initiating a first step of the first code module;

yielding execution of the first code module;

receiving a message;

in response to receiving the message, resuming execution of the first smart contract in a second step.

30. The method of claim 16, wherein executing the first smart contract comprises:

in a first step, calling a second smart contract by the first smart contract;

yielding execution of the first smart contract;

receiving a response by the second smart contract;

in response to receiving the response, in a second step, resuming execution of the first smart contract; and

validating the response from the second smart contract.