Cross-domain state synchronization
AssigneeInternational Business Machines Corporation
InventorsTimothy Olson, Petr Novotny
Life of this patent
Estimating the term…
Abstract
An example operation may include one or more of receiving a gossip message originated from a domain anchor peer in a first security domain, verifying that block content within the gossip message does not violate a cross-domain security policy, in response to verifying the block content, updating an endpoint of the gossip message with an address of a domain anchor peer in a second security domain, and transmitting the updated gossip message to the domain anchor peer in the second security domain.
Claims20
A multi-domain relay apparatus comprising:
- a hardware processor configured to establish a first communication channel between an anchor peer in a first security domain and the multi-domain relay apparatus, and a second communication channel between an anchor peer in a second security domain and the multi-domain relay apparatus, wherein the first and second security domains are logically isolated from each other and share a blockchain ledger;
- and
- a network interface configured to receive a gossip message originated from the anchor peer in the first security domain, wherein the gossip message comprises block content from the blockchain ledger,
- wherein the hardware processor is further configured to verify, via the multi-domain relay apparatus, that the block content within the gossip message does not violate a cross-domain security policy of the first and second security domains, and in response to verification of the block content, update an endpoint of the gossip message with an address of the anchor peer in the second security domain, and
- the hardware processor is further configured to control the network interface to transmit the updated gossip message to the anchor peer in the second security domain.
A method comprising:
- establishing a first communication channel between an anchor peer in a first security domain and a multi-domain relay and a second communication channel between an anchor peer in a second security domain and the multi-domain relay, wherein the first and second security domains are logically isolated from each other and share a blockchain ledger;
- receiving a gossip message originated from the anchor peer in the first security domain, wherein the gossip message comprises block content from the blockchain ledger;
- verifying, via the multi-domain relay, that block content within the gossip message does not violate a cross-domain security policy of the first and second security domains;
- in response to verifying the block content, updating an endpoint of the gossip message with an address of the anchor peer in the second security domain;
- and
- transmitting the updated gossip message to the anchor peer in the second security domain.
A non-transitory computer readable medium comprising instructions, that when read by a processor, cause the processor to perform a method comprising:
- establishing a first communication channel between an anchor peer in a first security domain and a multi-domain relay and a second communication channel between an anchor peer in a second security domain and the multi-domain relay, wherein the first and second security domains are logically isolated from each other and share a blockchain ledger;
- receiving a gossip message originated from the anchor peer in the first security domain, wherein the gossip message comprises block content from the blockchain ledger;
- verifying, via the multi-domain relay, that block content within the gossip message does not violate a cross-domain security policy of the first and second domains;
- in response to verifying the block content, updating an endpoint of the gossip message with an address of the anchor peer in the second security domain;
- and
- transmitting the updated gossip message to the anchor peer in the second security domain.
Dependencies are inferred from the claim text.