DECENTRALIZED IDENTITY MANAGEMENT SYSTEM

• US 20200137064A1
• Filed: 10/29/2018
• Published: 04/30/2020
• Est. Priority Date: 10/29/2018
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Wu, Pengfei, Todd, Stephen J., Wang, Kun
• Granted Patent: US 11,038,891 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A given node associated with a plurality of nodes registers a decentralized identity for the given node on a decentralized identity blockchain. The registered decentralized identity is controlled by the given node and defined by an identity record stored on the decentralized identity blockchain. The registered decentralized identity for the given node is used to access one or more resources of a given decentralized application.

Claims

1. A method comprising:

registering, by a given node associated with a plurality of nodes, a decentralized identity for the given node on a decentralized identity blockchain, wherein the registered decentralized identity is controlled by the given node and defined by an identity record stored on the decentralized identity blockchain; and

using the registered decentralized identity, for the given node, to access one or more resources of a given decentralized application;

wherein the given node is implemented via at least one processing device comprising a processor coupled to a memory.

2. The method of claim 1, wherein the identity record comprises a human readable name of the given node.

3. The method of claim 1, wherein the identity record comprises a public key corresponding to a private key held by the given node.

4. The method of claim 3, wherein the private key is usable by the given node to prove that the given node controls the identity.

5. The method of claim 4, wherein the public key stored in the identity is usable by at least a subset of the plurality of nodes to verify that the given node controls the identity.

6. The method of claim 1, wherein the identity record comprises a decentralized file system address pointing to immutable data stored remote from the decentralized identity blockchain.

7. The method of claim 6, wherein the immutable data comprises data associated with the given node that infrequently or never changes.

8. The method of claim 1, wherein the identity record comprises a decentralized name space address pointing to mutable data stored remote from the decentralized identity blockchain.

9. The method of claim 8, wherein the mutable data comprises certificate-related data associated with the given node.

10. The method of claim 1, wherein the identity record comprises information associated with the given node in a key-value pair format.

11. The method of claim 1, wherein the step of using the registered decentralized identity, for the given node, to access one or more resources of a given decentralized application further comprises:

sending a request from the given node to the given decentralized application to enable the given decentralized application to authenticate the given node by accessing the decentralized identity blockchain to obtain certificate-related data associated with the given node; and

receiving an indication of authentication at the given node from the given decentralized application wherein access to the one or more resources of the given decentralized application is based on the indication of authentication.

12. The method of claim 11, wherein the given decentralized application is maintained in accordance with a decentralized application blockchain in communication with the decentralized identity blockchain.

13. An article of manufacture comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the processing device to perform steps of:

registering, by a given node associated with a plurality of nodes, a decentralized identity for the given node on a decentralized identity blockchain, wherein the registered decentralized identity is controlled by the given node and defined by an identity record stored on the decentralized identity blockchain; and

using the registered decentralized identity, for the given node, to access one or more resources of a given decentralized application

14. An apparatus comprising at least one processing device, wherein the at least one processing device comprises a processor coupled to a memory configured to:

register a decentralized identity, by a given node associated with a plurality of nodes, on a decentralized identity blockchain, wherein the registered decentralized identity is controlled by the given node and defined by an identity record stored on the decentralized identity blockchain; and

use the registered decentralized identity, for the given node, to access one or more resources of a given decentralized application.

15. The apparatus of claim 14, wherein the identity record comprises a human readable name of the given node.

16. The apparatus of claim 14, wherein the identity record comprises a public key corresponding to a private key held by the given node.

17. The apparatus of claim 16, wherein the private key is usable by the given node to prove that the given node controls the identity.

18. The apparatus of claim 17, wherein the public key stored in the identity is usable by at least a subset of the plurality of nodes to verify that the given node controls the identity.

19. The apparatus of claim 14, wherein the identity record comprises a decentralized file system address pointing to immutable data stored remote from the decentralized identity blockchain.

20. The apparatus of claim 14, wherein the identity record comprises a decentralized name space address pointing to mutable data stored remote from the decentralized identity blockchain.