# US 11,907,406 B2 · Computer-implemented method and system of tamper-evident recording of a plurality of service data items

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,907,406 B2
- Document ID: US11907406B2
- Status: Granted
- Kind: B2
- Application number: 16/322,409
- Filed: 2017-07-31
- Published: 2019-06-06
- Granted: 2024-02-20
- Earliest claimed: 2016-08-01
- Assignees: Cryptowerk Corp.
- Applicants: Cryptowerk Corp.
- Inventors: Holger Assenmacher
- Web page: https://patentgrep.com/patent/US11907406B2

## CPC

- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- G06F 16/9014: {hash tables}
- G06F 21/602: {Providing cryptographic facilities or services}
- G06Q 20/065: {using e-cash}
- G06Q 30/0185: {Product, service or business identity fraud}
- H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]}
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/3236: {using cryptographic hash functions}
- H04L 9/3247: {involving digital signatures}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L 69/04: Protocols for data compression, e.g. ROHC
- G06Q 2220/00: Business processing using cryptography
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A computer-implemented method and a corresponding system of tamper-evident recording of a plurality of service data items are provided. Each service data item is associated with a data item verification fingerprint. A processing routine is conducted, in which an aggregated verification fingerprint is computed from at least a plurality of data item verification fingerprints using at least one one-way compression function, so that the aggregated verification fingerprint has a bit length, which is less than a bit length of a concatenation of the data item verification fingerprints. The aggregated verification fingerprint is then stored in at least one blockchain, so that a tamper-evident verification of each service data item is possible, while the storage of the aggregated verification fingerprint is decoupled from the service data items.

## Claims

### Claim 1

A computer-implemented method of tamper-evident recording of a plurality of service data items, each service data item being associated with a data item verification fingerprint, wherein a processing routine is conducted, in which
an aggregated verification fingerprint is computed from at least a plurality of data item verification fingerprints using at least one one-way compression function, so that the aggregated verification fingerprint has a bit length, which is less than a bit length of a concatenation of the data item verification fingerprints; and wherein
the aggregated verification fingerprint is stored in a plurality of blockchains for decoupling the storage of the aggregated verification fingerprint from the service data items;
the step of computing the aggregated verification fingerprint comprises computing a hash tree from the plurality of data item verification fingerprints;
for at least a first data item verification fingerprint of the plurality of data item verification fingerprints, a first authentication path comprising one or more hashes and a second authentication path comprising one or more hashes is determined in the hash tree, which first authentication path is associated with a branch path from the first data item verification fingerprint to the root hash in a first blockchain in which the aggregated verification fingerprint is stored, and which second authentication path is associated with a branch path from the first data item verification fingerprint in a second blockchain in which the aggregated verification fingerprint is stored;
the one or more hashes of said first authentication path are stored in a verification database;
the aggregated verification fingerprint is stored in at least a first block of the plurality of blockchains, wherein an identifier of the first block is stored in the verification database; and
the first data item verification fingerprint is stored in the verification database with the one or more hashes of said first authentication path and is correlated with the one or more hashes of said first authentication path.

### Claim 2 (depends on 1)

The method of claim 1, wherein the plurality of service data items is not stored in said at least one blockchain.

### Claim 3 (depends on 1)

The method of claim 1, wherein the plurality of data item verification fingerprints is not stored in said at least one blockchain.

### Claim 4 (depends on 1)

The method of claim 1, wherein the aggregated verification fingerprint is stored in a plurality of forked blocks of one or more blockchains.

### Claim 5 (depends on 1)

The method of claim 1, wherein the processing routine is conducted repeatedly to subsequently store a plurality of aggregated verification fingerprints in the plurality of blockchains.

### Claim 6 (depends on 1)

The method of claim 1, wherein the hash tree is a binary tree, a tertiary tree, or a higher order tree.

### Claim 7 (depends on 1)

The method of claim 1, wherein the step of computing the aggregated verification fingerprint comprises computing a plurality of hash trees from the verification data item fingerprints, wherein at least a first hash tree is computed using a first cryptographic hash function and a second hash tree is computed using a second cryptographic hash function, wherein the first and second cryptographic hash functions differ from each other.

### Claim 8 (depends on 1)

The method of claim 1, wherein the computing of the hash tree comprises computing of a root hash and one or more branch node hashes.

### Claim 9 (depends on 1)

The method of claim 1, wherein the aggregated verification fingerprint comprises at least the root hash of the hash tree.

### Claim 10 (depends on 1)

The method of claim 1, wherein at least one or more hashes of said first authentication path are transmitted to a service device.

### Claim 11 (depends on 1)

The method of claim 1, wherein the aggregated verification fingerprint is stored in at least a first block of the plurality of blockchains, wherein an identifier of the first block is transmitted to one or more service devices, associated with the plurality of service data items.

### Claim 12 (depends on 1)

The method of claim 1, wherein the plurality of service data items are received; and for each received service data item, an associated data item verification fingerprint is computed using a fingerprint function.

### Claim 13 (depends on 1)

The method of claim 1, further comprising verifying the stored aggregated verification fingerprint in the plurality of blockchains.

### Claim 14 (depends on 1)

The method of claim 1, wherein the plurality of service data items each comprise one or more of the group of electronic documents, image data, generic tokens, asset tokens, and digital currency tokens.

### Claim 15 (depends on 1)

A non-transitory computer-readable medium including contents that are configured to cause a processing device to conduct the method of claim 1.

### Claim 16

A system of tamper-evident recording of service data, comprising at least a processing device, the processing device comprising:
a network interface, configured to connect to a communication network for sending and receiving data;
a service module, connected with the network interface and configured to receive a plurality of service data items and for each service data item, to compute an associated data item verification fingerprint using a fingerprint function;
a compression module, configured to compute an aggregated verification fingerprint from at least a plurality of data item verification fingerprints using at least one one-way compression function, so that the aggregated verification fingerprint has a bit length, which is less than a bit length of a concatenation of the data item verification fingerprints; and
a blockchain connector module, connected with the compression module and the network interface and configured to connect with a plurality of blockchains and to transmit the aggregated verification fingerprint to the plurality of blockchains to allow storing the aggregated verification fingerprint in the plurality of blockchains decoupled from the service data items;
wherein the compression module is further configured to compute the aggregated verification fingerprint through computation of a hash tree from the plurality of data item verification fingerprints;
wherein for at least a first data item verification fingerprint of the plurality of data item verification fingerprints, a first authentication path comprising one or more hashes and a second authentication path comprising one or more hashes are determined in the hash tree, which first authentication path is associated with a branch path from the first data item verification fingerprint to the root hash in a first blockchain in which the aggregated verification fingerprint is stored, and which second authentication path is associated with a branch path from the first data item verification fingerprint in a second blockchain in which the aggregated verification fingerprint is stored;
wherein the blockchain connector module is further configured to:
store the one or more hashes of said first authentication path in a verification database;
store the aggregated verification fingerprint in at least a first block of the plurality of blockchains, wherein an identifier of the first block is stored in the verification database; and
store the first data item verification fingerprint in the verification database with the one or more hashes of said first authentication path and correlated the first data item verification fingerprint with the one or more hashes of said first authentication path.

### Claim 17 (depends on 1)

The method of claim 1, wherein the first data item verification fingerprint, the one or more hashes of said first authentication path, one or more transaction identifiers of a current aggregated verification fingerprint, an identifier of the plurality of blockchains, and an identifier of a hash function used to generate the hashes are bundled together in the verification database.

### Claim 18 (depends on 16)

The system of claim 16, wherein the first data item verification fingerprint, the one or more hashes of said first authentication path, one or more transaction identifiers of a current aggregated verification fingerprint, an identifier of the plurality of blockchains, and an identifier of a hash function used to generate the hashes are bundled together in the verification database.

### Claim 19 (depends on 17)

The method of claim 17, wherein the transaction identifiers include links to the block and a transaction, into which the aggregated verification fingerprint was successfully written.

### Claim 20 (depends on 18)

The system of claim 18, wherein the transaction identifiers include links to the block and a transaction, into which the aggregated verification fingerprint was successfully written.