Ensuring secure provisioning of blockchain infrastructure

A computer program product for enhancing security of a blockchain infrastructure, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a device to cause the device to:

• continuously update a plurality of ledger nodes within the blockchain infrastructure via a set of conduit nodes,
• wherein each conduit node within the set of conduit nodes shares a secure provision ledger with at least one other conduit node in the set of conduit nodes,
• wherein the secure provision ledger includes a set of prescribed security updates for the blockchain infrastructure,
• wherein each conduit node within the set of conduit nodes propagates the set of prescribed security updates to a subset of the plurality of ledger nodes to advise the subset of the plurality of ledger nodes to install the prescribed security updates, and
• wherein each conduit node within the set of conduit nodes enforces compliance with the set of prescribed security updates by performing a compliance check of the subset of the plurality of ledger nodes to determine that the subset of the plurality of ledger nodes have installed the set of prescribed security updates.

A system for enhancing security of a blockchain infrastructure, the system comprising:

• a memory subsystem, with program instructions included thereon;
• and
• a processor in communication with the memory subsystem, wherein the program instructions cause the processor to:
• continuously update a plurality of ledger nodes within the blockchain infrastructure via a set of conduit nodes,
• wherein each conduit node within the set of conduit nodes shares a secure provision ledger with at least one other conduit node in the set of conduit nodes,
• wherein the secure provision ledger includes a set of prescribed security updates for the blockchain infrastructure,
• wherein each conduit node within the set of conduit nodes propagates the set of prescribed security updates to a subset of the plurality of ledger nodes to advise the subset of the plurality of ledger nodes to install the prescribed security updates, and
• wherein each conduit node within the set of conduit nodes enforces compliance with the set of prescribed security updates by performing a compliance check of the subset of the plurality of ledger nodes to determine that the subset of the plurality of ledger nodes have installed the set of prescribed security updates.