US 11,539,507 B1Granted

Managing blockchain access

AssigneeUnited Services Automobile Association (USAA)

InventorsGunjan Vijayvergia, Steven J. Schroeder

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques are described for managing access to data stored in a blockchain, and for managing the communication of blockchain data to other entities. A private key may be generated and issued to an external entity to enable the external entity to access an internal (e.g., private blockchain). The external entity may be an external (e.g., public) blockchain, device, process, or user that is outside an internal network. The key may be associated with metadata that includes constraints, conditions, or rules governing access to the blockchain. An authorized entity may employ the key to request access to the blockchain via access management module(s), and the access management module(s) may employ the metadata to determine whether to approve the request. The access management module(s) may also employ rules governing outbound communication of data from internal blockchain(s) to external entities.

Claims16

Dependent claims

A computer-implemented method performed by at least one processor, the method comprising:

detecting, by the at least one processor, an attempt for data communication from a private distributed ledger to an external distributed ledger;
accessing, by the at least one processor, one or more rules governing external data communication associated with the private distributed ledger, wherein the one or more rules comprise one or more time constraints for the external data communication, one or more user identities, and one or more data types for the external data communication;
determining, by the at least one processor, that the attempt for the external data communication complies with at least one of the one or more rules;
identifying, by the at least one processor, one or more third parties that provide permission for the private distributed ledger to perform the external data communication;
requesting, by the at least one processor, the permission for the external data communication from the one or more third parties in response to determining that the attempt for the external data communication complies with the at least one of the one or more rules;
enabling, by the at least one processor, the private distributed ledger to perform the external data communication in response to receiving the permission from the one or more third parties;
and
blocking, by the at least one processor, the private distributed ledger from performing the external data communication in response to the attempt corresponding to the one or more user identities.

5 more elements

A system, comprising:

at least one processor;
and
a memory communicatively coupled to the at least one processor, the memory storing instructions which, when executed, cause the at least one processor to perform operations comprising:
detecting an attempt for data communication from a private distributed ledger to an external distributed ledger;
accessing one or more rules governing external data communication associated with the private distributed ledger, wherein the one or more rules comprise one or more time constraints for the external data communication, one or more user identities, and one or more data types for the external data communication;
determining that the attempt for the external data communication complies with at least one of the one or more rules;
identifying one or more third parties that provide permission for the private distributed ledger to perform the external data communication;
requesting the permission for the external data communication from the one or more third parties in response to determining that the attempt for the external data communication complies with the at least one of the one or more rules;
enabling the private distributed ledger to perform the external data communication in response to receiving the permission from the one or more third parties;
and
blocking the private distributed ledger from performing the external data communication in response to the attempt corresponding to the one or more user identities.

8 more elements

One or more non-transitory computer-readable storage media comprising instructions which, when executed by at least one processor of an access management device, cause the at least one processor to perform operations comprising:

receiving, in the access management device, a request for a first blockchain to access a portion of data stored in a second blockchain, wherein the request comprises a key and wherein the access management device is configured to manage access from the first blockchain to the second blockchain, wherein the second blockchain is only accessible via an internal network, and the first blockchain is external to the internal network;
accessing metadata associated with the key from a memory of the access management device, wherein the metadata comprises one or more time restrictions and identifies at least one third party associated with the second blockchain, wherein the one or more time restrictions correspond to a threshold number of instances, wherein the key is usable for accessing the portion of data stored in the second blockchain;
determining that the request complies with the one or more time restrictions by comparing the request with the one or more time restrictions;
determining compliance of the request with one or more restrictions of the metadata associated with the key to create an additional access response, wherein the compliance of the request comprises determining that the at least one third party has consented to the first blockchain accessing the second blockchain;
providing the first blockchain with access to the portion of data stored in the second blockchain in response to the request complying with the one or more time restrictions;
detecting an attempt to communicate data stored in the second blockchain to an external blockchain;
accessing one or more rules associated with the second blockchain, the one or more rules governing external communication of data from the second blockchain, and wherein the one or more rules comprise one or more user identities;
based on determining that the attempt complies with the one or more rules and whether the attempt corresponds to the one or more user identities, allowing communication of data in the second blockchain to the external blockchain;
and
blocking the attempt in response to the attempt corresponding to the one or more user identities.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/088,389Filed 3 Nov 2020 · continuation
Priority: 3 Dec 2015
Granted: 27 Dec 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 9/0637
Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation: modes of operation, e.g. cipher…
H04L 9/088
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: usage controlling of secret information,…
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…
H04L 9/30
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: public key, i.e.…