US 10,862,894 B2Granted

Decentralized access control for authorized modifications of data using a cryptographic hash

AssigneeFogchain Inc.

InventorNathanael Phillip Coonrod

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments of network devices for access control are described. In some embodiments, an access control processor of a first node receives a request from a requestor node on an unsecure network to join a first group of nodes on a secure network, where the first node coordinates network activities of the first group of nodes including a plurality of partitioned nodes of a network. In response to receiving the request, the access control processor assigns the requestor node to a first pool of the first group of nodes that are configured to perform authorized modifications of data including a cryptographic hash to protect the data against unauthorized modifications. In some embodiments, the access control processor initiates the authorized modifications of the data using one or more nodes assigned to the first pool and one or more nodes of a second pool of the first group of nodes.

Claims27

Dependent claims

An access control method comprising:

by at least one processor of a first node:
via a network interface, receiving a request packet from a requestor node on an unsecured network to join a first group of nodes, the first node configured to monitor data shared in the first group of nodes comprising a plurality of partitioned nodes of a secured network;
in response to the received request packet, assigning the requestor node to a first pool of the first group of nodes within the secured network using a secured network protocol through the network interface, wherein one or more nodes of the first pool are configured to perform one or more authorized modifications of data, the data comprising a blockchain including at least one cryptographic hash configured to protect the data against unauthorized modifications;
initiating the one or more authorized modifications of the data using one or more nodes assigned to the first pool including the requestor node and one or more nodes of a second pool of the first group of nodes, wherein the one or more nodes of the second pool are different than the one or more nodes of the first pool, and wherein the one or more nodes of the first pool and second pool are configured to perform additional authorized modifications of the data;
determining performance of the requestor node, the performance indicative of a level of protection of data from malicious destruction as a result of at least one authorized modification of the data by the requestor node;
and
in response to determining that the performance of the requestor node satisfies a threshold, reassigning the requestor node to the second pool.

4 more elements

An access control method comprising:

by at least one processor of a first node:
receiving a request from a requestor node to join a first group of nodes, the first node coordinating network activities of the first group of nodes comprising a plurality of partitioned nodes of a network;
in response to receiving the request, assigning the requestor node to a first pool of the first group of nodes, wherein one or more nodes of the first pool are configured to perform computations for a blockchain without receiving blockchain tokens for the performed computations;
initiating computations for the blockchain using one or more nodes assigned to the first pool and a second pool of the first group of nodes, wherein the second pool includes one or more different nodes than the first pool;
initiating distribution of tokens to the one or more nodes assigned to the second pool of the first group of nodes based on the performed computations for the blockchain;
assessing network traffic for the first group of nodes;
determining that the network traffic for the first group of nodes satisfies a threshold;
in response to determining that the network traffic for the first group of nodes satisfies the threshold, repartitioning the first group of nodes into a first subset of nodes and a second subset of nodes;
assigning the first subset of nodes to the first group of nodes;
assigning the second subset of node to a second group of nodes;
and
assigning a node of the second subset of nodes to manage activities for the second group of nodes.

9 more elements

An access control system comprising:

a first node including at least one processor and at least one memory storing computer executable instructions that, when performed by the at least one processor, cause the at least one processor to:
receive a request from a requestor node to join a first group of nodes, the first node coordinating network activities of the first group of nodes comprising a plurality of partitioned nodes of a network;
in response to receiving the request, assign the requestor node to a first pool of the first group of nodes, wherein one or more nodes of the first pool are configured to perform computations for a blockchain without receiving blockchain tokens for the performed computations;
initiate computations for the blockchain using one or more nodes assigned to the first pool and a second pool of the first group of nodes, wherein the second pool includes one or more different nodes than the first pool;
initiate distribution of tokens to the one or more nodes assigned to the second pool of the first group of nodes based on the performed computations for the blockchain;
receive a performance characteristic based on performed blockchain computations for the requestor node assigned to the first pool of the first group of nodes;
determine that the performance characteristic for the requestor node satisfies a first threshold;
and
assign the requestor node from the first pool to the second pool.

6 more elements

An access control method comprising:

by at least one processor of a first node:
receiving a request from a requestor node to join a first group of nodes, the first node coordinating network activities of the first group of nodes comprising a plurality of partitioned nodes of a network;
in response to receiving the request, assigning the requestor node to a first pool of the first group of nodes, wherein one or more nodes of the first pool are configured to perform computations for a blockchain without receiving blockchain tokens for the performed computations;
initiating computations for the blockchain using one or more nodes assigned to the first pool and a second pool of the first group of nodes, wherein the second pool includes one or more different nodes than the first pool;
initiating distribution of tokens to the one or more nodes assigned to the second pool of the first group of nodes based on the performed computations for the blockchain;
determining that a predetermined time period elapsed before receiving results of the computation from a node in the second pool;
assigning a node on the first pool to perform the computation for the blockchain;
and
updating a performance characteristic for the node in the second pool and the node on the first pool.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/005,272Filed 11 Jun 2018
Published: US 2019/0379673 A112 Dec 2019
Granted: 8 Dec 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/64
Protecting data: protecting data integrity, e.g. using checksums, certificates or signatures
H04L 63/104
For controlling access to devices or network resources: grouping of entities
G06F 21/602
Protecting data: providing cryptographic facilities or services
H04L 9/0891
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: revocation or update of secret…

Family

US 2019/0379673 A1Pre-grant publication · published 12 Dec 2019
US 10,862,894 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key