Managing communications among consensus nodes and client nodes

A non-transitory, computer-readable medium storing instructions executable by one or more computing devices to perform operations for isolating a first communication connection from a second communication connection, comprising:

• identifying, by a first consensus node, a first certificate authority (CA) group of one or more CAs and a second CA group of one or more CAs, wherein the first CA group and the second CA group are mutually exclusive;
• receiving, by the first consensus node, a first plurality of public key certificates from the first CA group and a second plurality of public key certificates from the second CA group, wherein the first plurality of public key certificates is stored on the first consensus node in a first truststore and comprises (i) a first public key certificate issued to the first consensus node and (ii) a second public key certificate issued to a second consensus node, wherein the second plurality of public key certificates is stored on the first consensus node in a second truststore and comprises (i) a third public key certificate issued to the first consensus node and (ii) a fourth public key certificate issued to a client node, and wherein the first truststore does not include the third public key certificate and the fourth public key certificate and the second truststore does not include the first public key certificate and the second public key certificate;
• establishing the first communication connection between the first consensus node and the second consensus node based on the first truststore and by using the first public key certificate and the second public key certificate, wherein communications through the first communication connection are encrypted using the first public key certificate and the second public key certificate;
• and
• establishing the second communication connection between the first consensus node and the client node based on the second truststore and by using the third public key certificate and the fourth public key certificate, wherein communications through the second communication connection are encrypted using the third public key certificate and the fourth public key certificate.

A system, comprising:

• one or more computers;
• and
• one or more computer-readable memories coupled to the one or more computers and having instructions stored thereon which are executable by the one or more computers to perform operations for isolating a first communication connection from a second communication connection, comprising:
• identifying, by a first consensus node, a first certificate authority (CA) group of one or more CAs and a second CA group of one or more CAs, wherein the first CA group and the second CA group are mutually exclusive;
• receiving, by the first consensus node, a first plurality of public key certificates from the first CA group and a second plurality of public key certificates from the second CA group, wherein the first plurality of public key certificates is stored on the first consensus node in a first truststore and comprises (i) a first public key certificate issued to the first consensus node and (ii) a second public key certificate issued to a second consensus node, wherein the second plurality of public key certificates is stored on the first consensus node in a second truststore and comprises (i) a third public key certificate issued to the first consensus node and (ii) a fourth public key certificate issued to a client node, and wherein the first truststore does not include the third public key certificate and the fourth public key certificate and the second truststore does not include the first public key certificate and the second public key certificate;
• establishing the first communication connection between the first consensus node and the second consensus node based on the first truststore and by using the first public key certificate and the second public key certificate, wherein communications through the first communication connection are encrypted using the first public key certificate and the second public key certificate;
• and
• establishing the second communication connection between the first consensus node and the client node based on the second truststore and by using the third public key certificate and the fourth public key certificate, wherein communications through the second communication connection are encrypted using the third public key certificate and the fourth public key certificate.