# US 10,320,843 B1 · Methods, systems, and devices for encrypted electronic storage and confidential network transfer of private data through a trustless distributed ledger technology system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,320,843 B1
- Document ID: US10320843B1
- Status: Granted
- Kind: B1
- Application number: 16/213,251
- Filed: 2018-12-07
- Granted: 2019-06-11
- Earliest claimed: 2017-12-08
- Assignees: Symbiont.Io, Inc.
- Applicants: Symbiont.Io, Inc.
- Inventors: Lukasz Dobrek; Adam Krellenstein; Pankaj Surana; Aaron Todd; Yiqun Yin
- Web page: https://patentgrep.com/patent/US10320843B1

## CPC

- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- G06F 21/602: {Providing cryptographic facilities or services}
- H04L 9/0822: {using key encryption key}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0827: {involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18)}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2209/76: Proxy, i.e. using intermediary entity to perform cryptographic operations
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

In some embodiments, systems, methods, and devices disclosed herein enable trusted sharing of private data and/or transactions via a distributed ledger, while maintaining data consistency properties. Some embodiments provide and utilize one or more independent and/or dependent channels. In particular, in some embodiments, one or more independent and/or dependent channels can exist on a single distributed ledger, wherein participants or nodes that are members of a particular channel can view and access the information in a given network transaction. To other participants or nodes not on the particular channel, however, only an encrypted or redacted version of the information can be viewable, thereby not disclosing the transaction information to such participants or nodes. In some embodiments, consistency properties may be preserved even in the presence of selective sharing of transaction information with proofs of validity.

## Claims

### Claim 1

A trustless decentralized distributed networked node system for selectively sharing data across a plurality of nodes while maintaining consistency of the data across the plurality of nodes, the system comprising:
a first channel operating on at least a first node that is part of the plurality of nodes, the first channel comprising a first set of transactions encrypted with a first encryption key, wherein the first set of transactions is broadcasted and stored in the plurality of nodes in encrypted form;
the plurality of nodes forming a trustless decentralized distributed networked node system;
the first channel comprising a first set of one or more participants with permission to use the first encryption key, wherein the first encryption key enables the first set of one or more participants to decrypt the first set of transactions;
a second channel operating on at least a second node that is part of the plurality of nodes, the second channel comprising a second set of transactions encrypted with a second encryption key, wherein the second set of transactions are broadcasted and stored in the plurality of nodes in encrypted form;
the second channel comprising a second set of one or more participants with permission to use the second encryption key, wherein the second encryption key enables the second set of one or more participants to decrypt the second set of transactions;
at least the second node configured to receive a new transaction encrypted with the second encryption key, the new transaction comprising a set of inputs, the set of inputs comprising the first encryption key and at least one operation, the at least one operation requiring access to the first set of transactions encrypted with the first encryption key;
at least the second node configured to execute the new transaction by using the first encryption key to decrypt the first set of transactions to generate data for executing the at least one operation to calculate state information for the second channel; and
at least the second node configured to produce and store the state information for the second channel in the second node,
wherein the first channel is further configured to disallow further access to the first channel by a participant by freezing the first channel and changing the first encryption key to a third encryption key,
wherein each of the first node and the second node comprises a computer processor and an electronic storage medium.

### Claim 2 (depends on 1)

The system of claim 1, wherein each of the first node and the second node comprises a log database for storing the first set of transactions in encrypted form and the second set of transactions in encrypted form in identical order.

### Claim 3 (depends on 2)

The system of claim 2, wherein the first node further comprises:
a crypto proxy for decrypting the first set of transactions using the first encryption key;
a state machine for executing the decrypted first set of transactions to obtain state information for the first channel; and
a state database for storing the obtained state information for the first channel.

### Claim 4 (depends on 2)

The system of claim 2, wherein the second node further comprises:
a crypto proxy for decrypting the new transaction using the second encryption key to obtain the at least one operation and the first encryption key,
wherein the crypto proxy is further configured to retrieve the first set of transactions in encrypted form from the log database and decrypt the first set of transactions using the first encryption key to generate data for executing the at least one operation;
a state machine for replaying the decrypted first set of transactions to obtain state information for the first channel,
wherein the state machine is further configured to execute the at least one operation based at least in part on the obtained state information for the first channel to calculate state information for the second channel; and
a state database for storing the calculated state information for the second channel.

### Claim 5 (depends on 2)

The system of claim 2, wherein each of the first node and the second node further comprises a state database for storing state information, wherein the state database of the first node comprises state information for the first channel but not the second channel, and wherein the state database of the second node comprises state information for the first channel and the second channel.

### Claim 6 (depends on 2)

The system of claim 2, wherein the second channel is dependent on the first channel.

### Claim 7 (depends on 1)

The system of claim 1, wherein the first encryption key is a symmetric encryption key.

### Claim 8 (depends on 1)

The system of claim 1, wherein the second node only has read-only access to the first channel.

### Claim 9

A trustless decentralized distributed networked node system for selectively sharing data across a plurality of nodes while maintaining consistency of the data across the plurality of nodes, the system comprising:
a first channel operating on at least a first node that is part of the plurality of nodes, the first channel generated by a first participant providing an encryption key to a second participant, the first participant operating on at least a first node of the plurality of nodes, the second participant operating on at least a second node of the plurality of nodes;
the plurality of nodes forming a trustless decentralized distributed networked node system;
the first channel configured to receive a first transaction generated by either the first or second participants, the first channel configured to encrypt the first transaction and broadcast the encrypted first transaction to the plurality of nodes for storage on the plurality of nodes, the first transaction encrypted by the encryption key to enable participants with access to the encryption key to decrypt and execute the first transaction on the plurality of nodes;
the first channel configured to permit a third participant with access to the encryption key to decrypt and execute the encrypted first transaction through the trustless decentralized distributed networked node system to calculate state information for the first channel, the third participant operating on at least a third node of the plurality of nodes, wherein the third participant receives access to the encryption key from either the first participant or the second participant; and
the first channel configured to disallow a fourth participant without access to the encryption key to decrypt or execute the encrypted first transaction, the fourth participant operating on at least a fourth node of the plurality of nodes,
wherein the first channel is further configured to disallow further access to the first channel by a participant by freezing the first channel and changing the encryption key to another encryption key,
wherein each of the first node and the second node comprises a computer processor and an electronic storage medium.

### Claim 10 (depends on 9)

The system of claim 9, wherein providing the encryption key by the first participant to the second participant comprises:
encrypting by the first participant the encryption key with a public key of the second participant; and
generating and broadcasting by the first participant a transaction to the plurality of nodes,
wherein the second participant decrypts the encrypted encryption key using the private key of the second participant.

### Claim 11 (depends on 9)

The system of claim 9, wherein providing the encryption key by the first participant to the second participant comprises sending the encryption key directly to the second participant.

### Claim 12 (depends on 9)

The system of claim 9, wherein each of the first node, the second node, the third node, and the fourth node comprises a log database for storing the first set of transactions in encrypted form in identical order.

### Claim 13 (depends on 12)

The system of claim 12, wherein each of the first node and the second node further comprises:
a crypto proxy for decrypting the first set of transactions using the encryption key;
a state machine for executing the decrypted first set of transactions to obtain state information for the first channel; and
a state database for storing the obtained state information for the first channel.

### Claim 14 (depends on 13)

The system of claim 13, wherein the third node further comprises:
a crypto proxy for decrypting the first set of transactions using the encryption key;
a state machine for replaying the decrypted first set of transactions to obtain state information for the first channel; and
a state database for storing the obtained state information for the first channel.

### Claim 15 (depends on 14)

The system of claim 14, wherein the third node further comprises a secret database having the encryption key stored thereon.

### Claim 16 (depends on 14)

The system of claim 14, wherein the state information for the first channel obtained by replaying the decrypted first set of transactions by the state machine on the third node is identical to the state information for the first channel obtained by executing the decrypted first set of transactions by the state machine on the first node or the second node.

### Claim 17 (depends on 13)

The system of claim 13, wherein each of the third node and the fourth node further comprises a state database for storing state information, wherein the state database of the third node comprises state information for the first channel, and wherein the state database of the fourth node does not comprise state information for the first channel.

### Claim 18 (depends on 9)

The system of claim 9, wherein the encryption key is a symmetric encryption key.