Secure token passing via hash chains
AssigneeIntuit Inc.
InventorsGlenn Scott, Induprakas Keri
Life of this patent
Estimating the term…
Abstract
Embodiments presented herein provide systems and methods for creating and modifying a hash chain. A hash chain is created to track resource-privilege transfers between entities. A root node of the hash chain identifies the resource and specifies a digest of a possession token held by a first entity that initially possesses the privilege. A transfer of the privilege to a second entity can be recorded by adding an expansion node to the hash chain. If the second entity successfully reveals a possession token that a hashing function associated with the hash chain maps to the digest, an expansion node is linked to the root node. The expansion node indicates the possession token and a successor digest that is based on a successor possession token.
Claims20
A method comprising:
- receiving a request to add an expansion node to a hash chain associated with a resource, wherein:
- the expansion node signifies a transfer of a privilege associated with the resource from a first entity to a second entity,
- the request includes a confirmation possession token of the first entity,
- the first entity comprises one of a set of entities, and
- the second entity comprises a plurality of entities;
- generating a confirmation hash digest based on the confirmation possession token via a hashing function associated with the hash chain;
- verifying the confirmation hash digest matches a predecessor hash digest indicated in a predecessor node of the hash chain, wherein the hashing function maps a predecessor possession token to the predecessor hash digest;
- and
- linking the expansion node to the predecessor node, wherein the expansion node indicates the predecessor possession token and a successor hash digest, wherein the successor hash digest is based on a successor possession token.
A system comprising:
- one or more processors;
- and
- memory storing one or more applications that, when executed on the one or more processors, perform an operation comprising:
- receiving a request to add an expansion node to a hash chain associated with a resource, wherein:
- the request signifies a transfer of a privilege associated with the resource from a first entity to a second entity,
- the request includes a confirmation possession token of the first entity,
- the first entity comprises one of a set of entities, and
- the second entity comprises a plurality of entities
- generating a confirmation hash digest based on the confirmation possession token via a hashing function associated with the hash chain,
- verifying the confirmation hash digest matches a predecessor hash digest indicated in a predecessor node of the hash chain, wherein the hashing function maps a predecessor possession token to the predecessor hash digest, and
- linking the expansion node to the predecessor node, wherein the expansion node indicates the predecessor possession token and a successor hash digest, wherein the successor hash digest is based on a successor possession token.
A non-transitory computer-readable storage medium containing instructions that, when executed by one or more processors, perform an operation comprising:
- receiving a request to add an expansion node to a hash chain associated with a resource, wherein:
- the request signifies a transfer of a privilege associated with the resource from a first entity to a second entity,
- the request includes a confirmation possession token of the first entity,
- the first entity comprises one of a set of entities, and
- the second entity comprises a plurality of entities;
- generating a confirmation hash digest based on the confirmation possession token via a hashing function associated with the hash chain;
- verifying the confirmation hash digest matches a predecessor hash digest indicated in a predecessor node of the hash chain, wherein the hashing function maps a predecessor possession token to the predecessor hash digest;
- and
- linking the expansion node to the predecessor node, wherein the expansion node indicates the predecessor possession token and a successor hash digest, wherein the successor hash digest is based on a successor possession token.
Dependencies are inferred from the claim text.