# US 2019/0319968 A1 · Shared Network for Information Security Data Exchange

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0319968 A1
- Document ID: US20190319968A1
- Status: Published application
- Kind: A1
- Application number: 15/952,998
- Filed: 2018-04-13
- Published: 2019-10-17
- Earliest claimed: 2018-04-13
- Assignees: Accenture Global Solutions Limited
- Applicants: Accenture Global Solutions Limited
- Inventors: Swen Mehta
- Web page: https://patentgrep.com/patent/US20190319968A1

## CPC

- G06Q 20/389: {Keeping log of transactions for guaranteeing non-repudiation of a transaction}
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- G06Q 20/0655: {e-cash managed centrally}
- G06Q 20/36: using electronic wallets or electronic money safes
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Implementations are directed to receiving, by a security data exchange platform, security data from an enterprise of a plurality of enterprises, the security data representative of a data security threat against the enterprise, processing the security data to determine a score assigned to the security data, the score being determined based on baseline threat data, providing a data summary to a distributed ledger platform having a private distributed ledger, the data summary being stored to the private distributed ledger, being representative of the security data, and having a smaller memory footprint than the security data, determining, a token value to be associated with the security data, the token value being determined using a smart contract executed on the distributed ledger platform, and being based on the data summary of the security data, and updating, by the distributed ledger platform, a wallet associated with the enterprise to include the token value.

## Claims

### Claim 1

A computer-implemented method executed by one or more processors, the method comprising:
receiving, by a security data exchange platform, security data from an enterprise of a plurality of enterprises, the security data representative of a data security threat against the enterprise;
processing, by the security data exchange platform, the security data to determine a score assigned to the security data, the score being determined based on baseline threat data;
providing a data summary to a distributed ledger platform having a private distributed ledger, the data summary being stored to the private distributed ledger, being representative of the security data, and having a smaller memory footprint than the security data;
determining, by the distributed ledger platform, a token value to be associated with the security data, the token value being determined using a smart contract executed on the distributed ledger platform, and being based on the data summary of the security data; and
updating, by the distributed ledger platform, a wallet associated with the enterprise to include the token value, the token value being redeemable in a digital security network marketplace for data security services.

### Claim 2 (depends on 1)

The method of claim 1, wherein, prior to determining the score, the enterprise is validated to provide assurance that the security data is coming from a legitimate source, and proliferation of improper data can be avoided.

### Claim 3 (depends on 1)

The method of claim 1, wherein, prior to determining the score, the security data is masked to remove confidential information associated with the enterprise.

### Claim 4 (depends on 3)

The method of claim 3, wherein masking of the security data at least partially includes assigning a public/private key pair to the security data, and removing an identifier of the enterprise.

### Claim 5 (depends on 1)

The method of claim 1, wherein the baseline threat data comprises data representative of multiple data security threats experienced by one or more enterprises, the security data received from the enterprise being compared to the baseline threat data to determine the score.

### Claim 6 (depends on 1)

The method of claim 1, wherein the score is representative of a relative value of the security data.

### Claim 7 (depends on 1)

The method of claim 1, wherein the distributed ledger comprises a private blockchain.

### Claim 8 (depends on 1)

The method of claim 1, wherein at least one user of the enterprise is an authorized user, and is enabled access to stored security data of the enterprise.

### Claim 9 (depends on 1)

The method of claim 1, wherein a wallet associated with the enterprise is updated to include the token value responsive to access by an authorized user to the stored security data of the enterprise.

### Claim 10 (depends on 1)

The method of claim 1, further comprising predicting, by the security data exchange platform, future data security threats against an enterprise of the plurality of enterprises based on the stored security data in the distributed ledger platform.

### Claim 11

One or more non-transitory computer-readable storage media coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, by a security data exchange platform, security data from an enterprise of a plurality of enterprises, the security data representative of a data security threat against the enterprise;
processing, by the security data exchange platform, the security data to determine a score assigned to the security data, the score being determined based on baseline threat data;
providing a data summary to a distributed ledger platform having a private distributed ledger, the data summary being stored to the private distributed ledger, being representative of the security data, and having a smaller memory footprint than the security data;
determining, by the distributed ledger platform, a token value to be associated with the security data, the token value being determined using a smart contract executed on the distributed ledger platform, and being based on the data summary of the security data; and
updating, by the distributed ledger platform, a wallet associated with the enterprise to include the token value, the token value being redeemable in a digital security network marketplace for data security services.

### Claim 12 (depends on 11)

The computer-readable storage media of claim 11, wherein, prior to determining the score, the enterprise is validated to provide assurance that the security data is coming from a legitimate source, and proliferation of improper data can be avoided.

### Claim 13 (depends on 11)

The computer-readable storage media of claim 11, wherein, prior to determining the score, the security data is masked to remove confidential information associated with the enterprise.

### Claim 14 (depends on 13)

The computer-readable storage media of claim 13, wherein masking of the security data at least partially includes assigning a public/private key pair to the security data, and removing an identifier of the enterprise.

### Claim 15 (depends on 11)

The computer-readable storage media of claim 11, wherein the baseline threat data comprises data representative of multiple data security threats experienced by one or more enterprises, the security data received from the enterprise being compared to the baseline threat data to determine the score.

### Claim 16 (depends on 11)

The computer-readable storage media of claim 11, wherein the score is representative of a relative value of the security data.

### Claim 17 (depends on 11)

The computer-readable storage media of claim 11, wherein the distributed ledger comprises a private blockchain.

### Claim 18 (depends on 11)

The computer-readable storage media of claim 11, wherein at least one user of the enterprise is an authorized user, and is enabled access to stored security data of the enterprise.

### Claim 19 (depends on 11)

The computer-readable storage media of claim 11, wherein a wallet associated with the enterprise is updated to include the token value responsive to access by an authorized user to the stored security data of the enterprise.

### Claim 20 (depends on 11)

The computer-readable storage media of claim 11, wherein operations further comprise predicting, by the security data exchange platform, future data security threats against an enterprise of the plurality of enterprises based on the stored security data in the distributed ledger platform.

### Claim 21

A system, comprising:
one or more processors; and
a computer-readable storage device coupled to the one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, by a security data exchange platform, security data from an enterprise of a plurality of enterprises, the security data representative of a data security threat against the enterprise,
processing, by the security data exchange platform, the security data to determine a score assigned to the security data, the score being determined based on baseline threat data,
providing a data summary to a distributed ledger platform having a private distributed ledger, the data summary being stored to the private distributed ledger, being representative of the security data, and having a smaller memory footprint than the security data,
determining, by the distributed ledger platform, a token value to be associated with the security data, the token value being determined using a smart contract executed on the distributed ledger platform, and being based on the data summary of the security data, and
updating, by the distributed ledger platform, a wallet associated with the enterprise to include the token value, the token value being redeemable in a digital security network marketplace for data security services.

### Claim 22 (depends on 21)

The system of claim 21, wherein, prior to determining the score, the enterprise is validated to provide assurance that the security data is coming from a legitimate source, and proliferation of improper data can be avoided.

### Claim 23 (depends on 21)

The system of claim 21, wherein, prior to determining the score, the security data is masked to remove confidential information associated with the enterprise.

### Claim 24 (depends on 23)

The system of claim 23, wherein masking of the security data at least partially includes assigning a public/private key pair to the security data, and removing an identifier of the enterprise.

### Claim 25 (depends on 21)

The system of claim 21, wherein the baseline threat data comprises data representative of multiple data security threats experienced by one or more enterprises, the security data received from the enterprise being compared to the baseline threat data to determine the score.

### Claim 26 (depends on 21)

The system of claim 21, wherein the score is representative of a relative value of the security data.

### Claim 27 (depends on 21)

The system of claim 21, wherein the distributed ledger comprises a private blockchain.

### Claim 28 (depends on 21)

The system of claim 21, wherein at least one user of the enterprise is an authorized user, and is enabled access to stored security data of the enterprise.

### Claim 29 (depends on 21)

The system of claim 21, wherein a wallet associated with the enterprise is updated to include the token value responsive to access by an authorized user to the stored security data of the enterprise.

### Claim 30 (depends on 21)

The system of claim 21, wherein operations further comprise predicting, by the security data exchange platform, future data security threats against an enterprise of the plurality of enterprises based on the stored security data in the distributed ledger platform.
