# US 2021/0243201 A1 · Blockchain-based verification framework > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243201 A1 - Document ID: US20210243201A1 - Status: Published application - Kind: A1 - Application number: 16/973,240 - Filed: 2018-06-14 - Published: 2021-08-05 - Earliest claimed: 2018-06-14 - Assignees: Hewlett Packard Enterprise Development LP - Applicants: Hewlett Packard Enterprise Development LP - Inventors: Sebastien Tandel; Gustavo Bervian Brand; Juliano Cardoso Vacaro; Dorian Conde Langbeck - Web page: https://patentgrep.com/patent/US20210243201A1 ## CPC - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/3247: {involving digital signatures} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A verification framework is decentralized by implementing a database of Known Good States through a blockchain and smart contracts. In this manner, the system may provide an open platform to attest the integrity of various components, which may originate from different vendors. As such, the system supports attestation for multi-vendor infrastructures. In some instances, the system may leverage crypto-economics to monetize the platform. For instance, verifiers may be rewarded according to terms of a smart contract implemented on the blockchain network. Moreover, in some instances, the components may be delivered via an immutable file system, such as the InterPlanetary File System (“IPFS”). The IPFS is a decentralized file system based on a peer-to-peer protocol, improving file distribution efficiency. Components stored using IPFS each are assigned a unique identifier, which is a hash digest composition over the file's blocks. Thus, any modifications to the components may be detected via hash comparisons. ## Claims ### Claim 1 A method comprising: receiving a first information relating to a measurement of a component to be validated from a first node; receiving a second information relating to the measurement of the component to be validated from a second node; determining that the first information matches the second information; and generating an entry including the first information in a distributed ledger. ### Claim 2 (depends on 1) The method of claim 1, wherein the measurement of the component comprises a deterministic signature of the component. ### Claim 3 (depends on 2) The method of claim 2, wherein the first node comprises a first blockchain node of a blockchain network that stores deterministic signatures of components in the distributed ledger and wherein the second node comprises a second blockchain node of the blockchain network. ### Claim 4 (depends on 3) The method of claim 3, further comprising: counting a number of nodes, including the first node and the second node, that generated matching information for the measurement of the component. ### Claim 5 (depends on 4) The method of claim 4, further comprising: apportioning a reward to each of the nodes that generated matching information for the measurement of the component. ### Claim 6 (depends on 4) The method of claim 4, further comprising: receiving a request to verify a state of the component; and providing the number in response to the request. ### Claim 7 (depends on 3) The method of claim 3, the method further comprising: verifying that the first information matches the second information prior to generating the entry in the distributed ledger. ### Claim 8 (depends on 7) The method of claim 7, wherein receiving the first information comprises receiving a proposed blockchain block that includes the first information broadcasted from the first node to the blockchain network for inclusion in the distributed ledger. ### Claim 9 (depends on 8) The method of claim 8, further comprising: obtaining a smart contract of the blockchain network; identifying a reward for the first node for generating the blockchain block based on the smart contract; and causing the reward to be provided to the first node. ### Claim 10 A system comprising: a computer system having one or more processors programmed to: receive a first information relating to a measurement of a component to be validated from a first node; receive a second information relating to the measurement of the component to be validated from a second node; determine that the first information matches the second information; and generate an entry including the first information in a distributed ledger. ### Claim 11 (depends on 10) The system of claim 10, wherein the measurement of the component comprises a deterministic signature of the component. ### Claim 12 (depends on 11) The system of claim 11, wherein the first node comprises a first blockchain node of a blockchain network that stores deterministic signatures of components in the distributed ledger and wherein the second node comprises a second blockchain node of the blockchain network. ### Claim 13 (depends on 12) The system of claim 12, wherein the computer system is further programmed to: count a number of nodes, including the first node and the second node, that generated matching information for the measurement of the component. ### Claim 14 (depends on 13) The system of claim 13, wherein the computer system is further programmed to: apportion a reward to each of the nodes that generated matching information for the measurement of the component. ### Claim 15 (depends on 14) The system of claim 14, wherein the computer system is further programmed to: receive a request to verify a state of the component; and provide the number in response to the request. ### Claim 16 (depends on 12) The system of claim 12, wherein the computer system is further programmed to: verify that the first information matches the second information prior to generating the entry in the distributed ledger. ### Claim 17 (depends on 16) The method of claim 16, wherein to receive the first information, the computer system is further programmed to: receive a proposed blockchain block that includes the first information broadcasted from the first node to the blockchain network for inclusion in the distributed ledger. ### Claim 18 (depends on 17) The system of claim 17, wherein the computer system is further programmed to: obtain a smart contract of the blockchain network; identify a reward for the first node for generating the blockchain block based on the smart contract; and cause the reward to be provided to the first node. ### Claim 19 A method comprising: receiving a request from a requester, the request comprising a first information relating to a measurement of a component to be validated; determining whether the first information matches a content stored in a distributed ledger used to validate a plurality of components including the component; generating a validation result indicating whether the first information matches the content stored in the distributed ledger; and providing the validation result to the requester. ### Claim 20 (depends on 19) The method of claim 19, wherein providing the validation result further comprises: providing a number of verifiers that verified the content stored in the distributed ledger used to validate the plurality of components.