# US 11,451,373 B2 · Dynamic management of user identifications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,451,373 B2
- Document ID: US11451373B2
- Status: Granted
- Kind: B2
- Application number: 16/837,104
- Filed: 2020-04-01
- Published: 2021-10-07
- Granted: 2022-09-20
- Earliest claimed: 2020-04-01
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: James Arthur Lindeman; Danny Soroker; Lisa Frankel
- Web page: https://patentgrep.com/patent/US11451373B2

## CPC

- H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/3236: {using cryptographic hash functions}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An example operation may include one or more of authenticating a user, by a first system node, based on a first set of user credentials, computing, by the first system node, a second set of user credentials for a second system node, testing the second system node, by the first system node, to determine if the second system node has a user with the second set of the user credentials, and responsive to the second system node not having the user with the second set of the user credentials, creating a user with the second set of the user credentials.

## Claims

### Claim 1

A system node in a blockchain network, the system node comprising:
a processor that when executing one or more instructions stored in an associated memory is configured to:
authenticate a first user of the system node based on a first set of credentials of the first user;
compute a second set of credentials for the first user for a second system node in the blockchain network;
identify that the second system node does not have a second user that is different than the first user and that uses the second set of credentials; and
responsive to the identification, create a new user of the second system node using the second set of credentials to allow the first user to access the second system node as the new user.

### Claim 2 (depends on 1)

The system node of claim 1, wherein the processor is further configured to:
authenticate the first user with the second system node using the second set of credentials to access services of the second system node.

### Claim 3 (depends on 1)

The system node of claim 1, wherein the processor is further configured to:
generate a hash of the first set of credentials.

### Claim 4 (depends on 3)

The system node of claim 3, wherein the processor is further configured to:
generate the second set of credentials based on the hash.

### Claim 5 (depends on 1)

The system node of claim 1, wherein the processor is further configured to:
dynamically create, monitor, and delete user identifiers (IDs) in the second system node.

### Claim 6 (depends on 5)

The system node of claim 5, wherein the processor is further configured to:
record a creation, a deletion, and a modification of the user IDs on a blockchain.

### Claim 7 (depends on 6)

The system node of claim 6, wherein the processor is further configured to:
enforce policies for the creation, the modification, and the deletion of the user IDs.

### Claim 8

A method, comprising:
authenticating, by a first system node in a blockchain network, a first user of the first system node based on a first set of credentials of the first user;
computing, by the first system node, a second set of credentials for the first user for a second system node in the blockchain network;
identifying, by the first system node, that the second system node does not have a second user that is different than the first user and that uses the second set of credentials; and
responsive to the identifying, creating, by the first system node, a new user of the second system node using the second set of credentials to allow the first user to access the second system node as the new user.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
authenticating the first user with the second system node using the second set of credentials to access services of the second system node.

### Claim 10 (depends on 8)

The method of claim 8, further comprising:
generating a hash of the first set of credentials.

### Claim 11 (depends on 10)

The method of claim 10, further comprising:
generating the second set of credentials based on the hash.

### Claim 12 (depends on 8)

The method of claim 8, further comprising:
dynamically creating, monitoring, and deleting user identifiers (IDs) in the second system node.

### Claim 13 (depends on 12)

The method of claim 12, further comprising:
recording a creation, a deletion, and a modification of the user IDs on a blockchain.

### Claim 14 (depends on 13)

The method of claim 13, further comprising:
executing a smart contract to enforce policies for the creation, the modification, and the deletion of the user IDs.

### Claim 15

A non-transitory computer readable medium comprising one or more instructions that when executed by a processor of a first system node in a blockchain network cause the processor to perform:
authenticating a first user of the first system node based on a first set of credentials of the first user;
computing a second set of credentials for the first user for a second system node in the blockchain network;
identifying that the second system node does not have a second user that is different than the first user and that uses the second set of credentials; and
responsive to the identifying, creating a new user of the second system node using the second set of credentials to allow the first user to access the second system node as the new user.

### Claim 16 (depends on 15)

The non-transitory computer readable medium of claim 15, wherein the one or more instructions further cause the processor to perform:
authenticating the first user with the second system node using the second set of credentials to access services of the second system node.

### Claim 17 (depends on 15)

The non-transitory computer readable medium of claim 15, wherein the one or more instructions further cause the processor to perform:
generating a hash of the first set of credentials.

### Claim 18 (depends on 17)

The non-transitory computer readable medium of claim 17, wherein the one or more instructions further cause the processor to perform:
generating the second set of credentials based on the hash.

### Claim 19 (depends on 15)

The non-transitory computer readable medium of claim 15, wherein the one or more instructions further cause the processor to perform:
dynamically creating, monitoring, and deleting user identifiers (IDs) in the second system node.

### Claim 20 (depends on 19)

The non-transitory computer readable medium of claim 19, wherein the one or more instructions further cause the processor to perform:
recording a creation, a deletion, and a modification of the user IDs on a blockchain.
