Systems and methods for establishing data provenance by generating one-time signatures

A system, comprising:

• at least one hardware processor programmed to:
• generate a request for a one-time signature, the request based on data to be stored on a server, wherein the request includes a public certificate for the one-time signature that is mapped to one or more accounts indicating an identity of a client;
• provide, via an application programming interface (API) associated with a signing environment, the request and the data to be stored on the server to the signing environment to generate the one-time signature;
• receive, via the API, a response message comprising the one-time signature in response to generation of the one-time signature by a hardware security module (HSM) for the data to be stored on the server, the HSM configured to generate the one-time signature based on a mapping between a seed and an account of a plurality of accounts;
• generate an entry for a distributed ledger associated with the server based on the one-time signature, the entry indicating an association between the data to be stored on the server and the one-time signature;
• and
• transmit to the server at least a portion of the entry for inclusion in the distributed ledger associated with the server.

A non-transitory computer-readable medium storing instructions thereon that, when executed by at least one processor, cause the at least one processor to:

• generate a request for a one-time signature, the request based on data to be stored on a server;
• include a public certificate in the request for the one-time signature that is mapped to one or more accounts indicating an identity of a client;
• provide, via an application programming interface (API) associated with a signing environment, the request and the data to be stored on the server to the signing environment to generate the one-time signature;
• receive, via the API, a response message comprising the one-time signature in response to generation of the one-time signature by a hardware security module (HSM) for the data to be stored on the server, the HSM configured to generate the one-time signature based on a mapping between a seed and an account of a plurality of accounts;
• generate an entry for a distributed ledger associated with the server based on the one-time signature, the entry indicating an association between the data to be stored on the server and the one-time signature;
• and
• transmit to the server at least a portion of the entry for inclusion in the distributed ledger associated with the server.