Decentralized edge node authentication
AssigneeBank of America Corporation
InventorSiten Sanghvi
Life of this patent
Estimating the term…
Abstract
This application describes a security framework that allows a data payload transmitted on a network to be validated locally by any node on the network. A node that first receives the data payload may validate the information included in the data payload and generate a digital certificate based on the information. Each node that receives the data payload from the originating node may validate the digital signature using a locally accessible cryptographic key. The framework may support multiple security tiers by configuring nodes to mask information included in a data payload before transmitting the requested data payload to another node.
Claims15
A routing framework for reducing congestion on a network, the routing framework comprising:
- an authenticating node comprising first computer executable instructions stored in a non-transitory memory, that when executed by a first processor on the authenticating node:
- detect receipt of a data payload;
- compute a security clearance for the data payload;
- and
- tokenize the security clearance by adding a digital certificate to the data payload;
- a first receiving node comprising second computer executable instructions, that when executed by a second processor on the first receiving node:
- receive the data payload from the authenticating node;
- and
- authenticate the digital certificate before forwarding the data payload to a second receiving node;
- wherein the digital certificate is a first digital certificate, and the second receiving node is configured to:
- receive the data payload from the first receiving node;
- generate a second digital certificate for the data payload;
- and
- replace the first digital certificate with the second digital certificate before forwarding the data payload to a third receiving node.
A method for enhancing security of data transmitted on a network, the method comprising:
- authenticating a data payload received at a first node on the network;
- generating a digital certificate signed by the first node;
- in response to successfully authenticating, packaging the data payload and the digital certificate into a container;
- forwarding the container to a second node on the network;
- at the second node, confirming that the digital certificate has been signed by the first node;
- and
- in response to the confirming, forwarding the container to a third node on the network;
- wherein the confirming further comprises:
- encrypting first information included in the data payload using a first public cryptographic key;
- and
- encrypting second information included in the data payload using a second private cryptographic key;
- and
- wherein, a first private cryptographic key for decrypting the first information is only available to trusted nodes on the network and a second public cryptographic key for decrypting the second information is available to untrusted nodes on the network.
Dependencies are inferred from the claim text.