Blockchain system with severable data and cryptographic proof
AssigneeCisco Technology, Inc.
InventorsJeffrey C. VENABLE, SR., Ramanathan JAGADEESAN
Life of this patent
Estimating the term…
Abstract
The present disclosure provides an approach for a blockchain system in which (a) data of past transactions can be removed from the storage of network nodes based on node permissions, and (b) in which data can be made invisible to users based on user-specific or group-specific permissions. The blockchain system stores cryptographic proofs of data on an immutable ledger. The data itself is maintained within the blockchain system such that it can be partially or fully removed, while maintaining the integrity of the ledger.
Claims20
A method of performing a data operation on a first blockchain node of a plurality of blockchain nodes of a blockchain system, the blockchain system comprising an immutable blockchain and a mutable data set that are distributed among the plurality of blockchain nodes, wherein the immutable blockchain comprises cryptographic proofs of data of the mutable data set, the method comprising:
- receiving the data operation from an entity, wherein the data operation is a read operation;
- and
- based on permissions associated with the entity, executing the data operation by accessing the mutable data set, wherein executing the data operation comprises:
- obtaining, using an identifier of a data object included in the data operation, a copy of the data object;
- based on the permissions, redacting a portion of the copy of the data object;
- and
- transmitting the redacted copy of the data object and a hash tree comprising one or more cryptographic proofs of the data object, wherein the one or more cryptographic proofs comprises a signature of one or more nodes of the blockchain system.
A non-transitory computer readable medium comprising instructions to be executed in a processor of a computer system, the instructions when executed in the processor cause the computer system to carry out a method of performing a data operation on a first blockchain node of a plurality of blockchain nodes of a blockchain system, the blockchain system comprising an immutable blockchain and a mutable data set that are distributed among the plurality of blockchain nodes, wherein the immutable blockchain comprises cryptographic proofs of data of the mutable data set, the method comprising:
- receiving the data operation from an entity, wherein the data operation is a read operation;
- and
- based on permissions associated with the entity, executing the data operation by accessing the mutable data set, wherein executing the data operation comprises:
- obtaining, using an identifier of a data object included in the data operation, a copy of the data object;
- based on the permissions, redacting a portion of the copy of the data object;
- and
- transmitting the redacted copy of the data object and a hash tree comprising one or more cryptographic proofs of the data object, wherein the one or more cryptographic proofs comprises a signature of one or more nodes of the blockchain system.
A blockchain system comprising:
- a plurality of blockchain nodes;
- an immutable blockchain distributed among the plurality of blockchain nodes;
- a mutable data set distributed among the plurality of blockchain nodes, wherein the immutable blockchain comprises cryptographic proofs of data of the mutable data set;
- and
- a hardware-implemented processor programmed to carry out a method of performing a data operation on a first blockchain node of the plurality of blockchain nodes, the method comprising:
- receiving the data operation from an entity, wherein the data operation is a read operation;
- and
- based on permissions associated with the entity, executing the data operation by accessing the mutable data set, wherein executing the data operation comprises:
- obtaining, using an identifier of a data object included in the data operation, a copy of the data object;
- based on the permissions, redacting a portion of the copy of the data object;
- and
- transmitting the redacted copy of the data object and a hash tree comprising one or more cryptographic proofs of the data object, wherein the one or more cryptographic proofs comprises a signature of one or more nodes of the blockchain system.
Dependencies are inferred from the claim text.