# US 2019/0245697 A1 · Securing blockchain access through a gateway

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0245697 A1
- Document ID: US20190245697A1
- Status: Published application
- Kind: A1
- Application number: 16/263,714
- Filed: 2019-01-31
- Published: 2019-08-08
- Earliest claimed: 2018-02-05
- Assignees: Nokia Technologies Oy
- Applicants: Nokia Technologies Oy
- Inventors: Haithem El Abed; Bessem Sayadi
- Web page: https://patentgrep.com/patent/US20190245697A1

## CPC

- G06Q 20/065: {using e-cash}
- H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model}
- G06Q 20/027: {involving a payment switch or gateway}
- G06Q 20/223: {based on the use of peer-to-peer networks}
- H04L 9/0618: {Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation}
- H04L 9/3236: {using cryptographic hash functions}
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04W 12/10: Integrity
- G06Q 2220/00: Business processing using cryptography
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

For securing a blockchain access through a gateway (GAT) on behalf of a communication device (CD) in a wireless telecommunication network (TN), an apparatus (AM) operating with the gateway: receives a request (Req) sent from a communication device (CD) through the gateway (GAT), the request containing an identifier (IdCD) of the communication device, an identifier (IdR) of the request and a key (K), checks a distributed blockchain that includes information regarding the communication device and that is stored in a first blockchain network (BN1) and retrieving a value (V) corresponding to the key (K), creates a smart contract based on the key (K), the value (V), a timestamp (T), the identifier (IdCD) of the communication device, and the identifier (IdR) of the request, the smart contract being defined to confirm the validity of value (V) corresponding to the key (K) in the first blockchain network (BN1), appends the smart contract to a second blockchain network (BN2), the smart contract having to be executed on the first blockchain network (BN1) by at least one validator having access to the first blockchain network (BN1) and second blockchain network (BN2), signs a response (Res) containing the key (K), the value (V), and the identifier (IdR) of the request with a certificate (Cert), sends the response (Res) to the communication device (CD) through the gateway (GAT).

## Claims

### Claim 1

A method for securing a blockchain access through a gateway on behalf of a communication device in a wireless telecommunication network, the method comprising the following steps in an apparatus operating with the gateway:
receiving a request sent from a communication device through the gateway, the request containing an identifier of the communication device, an identifier of the request and a key,
checking a distributed blockchain that includes information regarding the communication device and that is stored in a first blockchain network and retrieving a value corresponding to the key,
creating a smart contract based on the key, the value, a timestamp, the identifier of the communication device, and the identifier of the request, the smart contract being defined to confirm the validity of value corresponding to the key in the first blockchain network,
appending the smart contract to a second blockchain network, the smart contract having to be executed on the first blockchain network by at least one validator having access to the first blockchain network and second blockchain network,
signing a response containing the key, the value, and the identifier of the request with a certificate,
sending the response to the communication device through the gateway.

### Claim 2 (depends on 1)

The method as claimed in claim 1, wherein the apparatus is implemented in a multiple Platform as a Service of a wireless network having specialized components providing customized functionalities.

### Claim 3 (depends on 1)

The method as claimed in claim 1, wherein the certificate was previously retrieved from a code generator.

### Claim 4 (depends on 1)

The method as claimed in claim 1, wherein the certificate is received from the code generator by a dedicated module for signing the response after verification that the dedicated module is running in a secure environment.

### Claim 5 (depends on 1)

The method as claimed in claim 1, wherein the apparatus sends a notification to the validators for getting a reward after having checked that the smart contract has been executed in the first blockchain network.

### Claim 6 (depends on 1)

The method as claimed in claim 1, wherein the step of appending the smart contract to the second blockchain network can be executed in a same secure execution environment as the step of signing the response.

### Claim 7 (depends on 4)

The method as claimed in claim 4, wherein the authentication module increments a counter for each signing operation, this counter being used as an identifier inside the smart contract.

### Claim 8

An apparatus for securing a blockchain access through a gateway on behalf of a communication device in a wireless telecommunication network, the apparatus comprising:
one or more network interfaces to communicate with a network;
a processor coupled to the network interfaces and configured to execute one or more processes; and
a memory configured to store a process executable by the processor, the process when executed operable to:
receive a request from a communication device, the request containing an identifier of the communication device, an identifier of the request and a key,
checking a distributed blockchain that includes information regarding the communication device and that is stored in a first blockchain network and retrieving a value corresponding to the key,
creating a smart contract based on the key, the value, a timestamp, the identifier of the communication device, and the identifier of the request, the smart contract being defined to confirm the validity of value corresponding to the key in the first blockchain network,
appending the smart contract to a second blockchain network, the smart contract having to be executed on the first blockchain network by at least one validator having access to the first blockchain network and second blockchain network,
signing a response containing the key, the value, and the identifier of the request with a certificate,
sending the response to the communication device.

### Claim 9 (depends on 1)

A computer-readable medium having embodied thereon a computer program for executing a method for securing a blockchain access through a gateway according to claim 1.