US 10,320,843 B1Granted

Methods, systems, and devices for encrypted electronic storage and confidential network transfer of private data through a trustless distributed ledger technology system

AssigneeSymbiont.Io, Inc.

InventorsLukasz Dobrek, Adam Krellenstein, Pankaj Surana, Aaron Todd, Yiqun Yin

Life of this patent

Estimating the term…

Loading patent…

Abstract

In some embodiments, systems, methods, and devices disclosed herein enable trusted sharing of private data and/or transactions via a distributed ledger, while maintaining data consistency properties. Some embodiments provide and utilize one or more independent and/or dependent channels. In particular, in some embodiments, one or more independent and/or dependent channels can exist on a single distributed ledger, wherein participants or nodes that are members of a particular channel can view and access the information in a given network transaction. To other participants or nodes not on the particular channel, however, only an encrypted or redacted version of the information can be viewable, thereby not disclosing the transaction information to such participants or nodes. In some embodiments, consistency properties may be preserved even in the presence of selective sharing of transaction information with proofs of validity.

Claims18

Dependent claims

A trustless decentralized distributed networked node system for selectively sharing data across a plurality of nodes while maintaining consistency of the data across the plurality of nodes, the system comprising:

a first channel operating on at least a first node that is part of the plurality of nodes, the first channel comprising a first set of transactions encrypted with a first encryption key, wherein the first set of transactions is broadcasted and stored in the plurality of nodes in encrypted form;
the plurality of nodes forming a trustless decentralized distributed networked node system;
the first channel comprising a first set of one or more participants with permission to use the first encryption key, wherein the first encryption key enables the first set of one or more participants to decrypt the first set of transactions;
a second channel operating on at least a second node that is part of the plurality of nodes, the second channel comprising a second set of transactions encrypted with a second encryption key, wherein the second set of transactions are broadcasted and stored in the plurality of nodes in encrypted form;
the second channel comprising a second set of one or more participants with permission to use the second encryption key, wherein the second encryption key enables the second set of one or more participants to decrypt the second set of transactions;
at least the second node configured to receive a new transaction encrypted with the second encryption key, the new transaction comprising a set of inputs, the set of inputs comprising the first encryption key and at least one operation, the at least one operation requiring access to the first set of transactions encrypted with the first encryption key;
at least the second node configured to execute the new transaction by using the first encryption key to decrypt the first set of transactions to generate data for executing the at least one operation to calculate state information for the second channel;
and
at least the second node configured to produce and store the state information for the second channel in the second node,
wherein the first channel is further configured to disallow further access to the first channel by a participant by freezing the first channel and changing the first encryption key to a third encryption key,
wherein each of the first node and the second node comprises a computer processor and an electronic storage medium.

8 more elements

a first channel operating on at least a first node that is part of the plurality of nodes, the first channel generated by a first participant providing an encryption key to a second participant, the first participant operating on at least a first node of the plurality of nodes, the second participant operating on at least a second node of the plurality of nodes;
the plurality of nodes forming a trustless decentralized distributed networked node system;
the first channel configured to receive a first transaction generated by either the first or second participants, the first channel configured to encrypt the first transaction and broadcast the encrypted first transaction to the plurality of nodes for storage on the plurality of nodes, the first transaction encrypted by the encryption key to enable participants with access to the encryption key to decrypt and execute the first transaction on the plurality of nodes;
the first channel configured to permit a third participant with access to the encryption key to decrypt and execute the encrypted first transaction through the trustless decentralized distributed networked node system to calculate state information for the first channel, the third participant operating on at least a third node of the plurality of nodes, wherein the third participant receives access to the encryption key from either the first participant or the second participant;
and
the first channel configured to disallow a fourth participant without access to the encryption key to decrypt or execute the encrypted first transaction, the fourth participant operating on at least a fourth node of the plurality of nodes,
wherein the first channel is further configured to disallow further access to the first channel by a participant by freezing the first channel and changing the encryption key to another encryption key,
wherein each of the first node and the second node comprises a computer processor and an electronic storage medium.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/213,251Filed 7 Dec 2018 · us provisional application
Priority: 8 Dec 2017
Granted: 11 Jun 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 63/18
Network architectures or network communication protocols for network security: using different networks or channels, e.g. using out of band channels
G06F 21/602
Protecting data: providing cryptographic facilities or services
H04L 9/0822
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…

Family

Application62/596,573Us provisional application · filed 8 Dec 2017
Application62/596,580Us provisional application · filed 8 Dec 2017
US 10,320,843 B1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key