# US 2026/0095331 A1 · Using a tree structure to segment and distribute records across one or more decentralized, acyclic graphs of cryptographic hash pointers > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0095331 A1 - Document ID: US20260095331A1 - Status: Published application - Kind: A1 - Application number: 19/348,550 - Filed: 2025-10-02 - Published: 2026-04-02 - Earliest claimed: 2019-10-30 - Assignees: ALTR Solutions, Inc. - Applicants: ALTR Solutions, Inc. - Inventors: Christopher Edward Struttmann; James Douglas Beecham - Web page: https://patentgrep.com/patent/US20260095331A1 ## CPC - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - G06F 16/9024: {Graphs; Linked lists (G06F16/9027 takes precedence)} - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00) - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Provided is a process including: receiving, with one or more processors, a first request to store a record from a computing entity; encoding, with one or more processors, the record in a first plurality of segments; arranging, with one or more processors, the first plurality of segments in respective content nodes of a first content graph, wherein at least some content nodes of the first content graph have two or more content edges of the first content graph pointing to two or more respective other content nodes of the first content graph; and storing, with one or more processors, the content nodes of the first content graph in a verification graph. ## Claims ### Claim 1 A tangible, non-transitory, machine-readable medium storing instructions that when executed by one or more processors effectuate operations configured to expedite retrieval of records written to persistent storage, the operations comprising: receiving, with one or more processors, a request to read data stored in a relational database, the request being received from a computing entity and comprising a user identifier; accessing, with one or more processors, one or more log entries associated with prior read requests made using the user identifier; determining, with one or more processors, whether the data to be returned in response to the request is to be obfuscated based on an access policy associated with the user identifier, the access policy comprising one or more access control rules that define conditions for access to values stored in respective fields of the relational database; and returning, with one or more processors, a response to the request comprising data from the relational database with one or more values in the response obfuscated in accordance with the access control rules. ### Claim 2 (depends on 1) The medium of claim 1, further comprising: monitoring, with one or more processors, a number of read requests associated with the user identifier, each read request having an associated time duration; and determining, with one or more processors, whether a number of read requests having time durations that exceed a defined duration threshold satisfies a predefined count threshold. ### Claim 3 (depends on 2) The medium of claim 2, further comprising providing, upon determining that the number of requests satisfies the duration threshold, an alarm. ### Claim 4 (depends on 3) The medium of claim 3, wherein providing the alarm comprises: creating a notification comprising an indication of the user identifier and the number of requests; and transmitting the notification to a designated recipient or system. ### Claim 5 (depends on 1) The medium of claim 1, further comprising: evaluating, with one or more processors, a set of access control rules associated with the data, wherein: the access control rules are defined in association with one or more user attributes stored in an access policy repository; and the user attributes include at least three of a department identifier, clearance level, jurisdictional scope, or group membership of the computing entity. ### Claim 6 (depends on 5) The medium of claim 5, wherein evaluating the set of access control rules comprises retrieving a policy from a repository stored separately from the relational database and applying the policy to determine access to one or more data entries in the relational database. ### Claim 7 (depends on 1) The medium of claim 1, wherein the obfuscation to be performed based on the access policy is applied to at least some of the returned data in response to the request. ### Claim 8 (depends on 1) The medium of claim 1, wherein the obfuscation comprises applying at least one of the following techniques to one or more values in the returned data: applying a cryptographic hash to a value, redacting the value, replacing the value with a constant, inserting a placeholder value in place of an original value, or omitting the value from the response. ### Claim 9 (depends on 1) The medium of claim 1, further comprising parsing, with one or more processors, a structured query language statement included in the request to identify one or more query fields associated with data stored in the relational database. ### Claim 10 (depends on 1) The medium of claim 1, wherein the data returned in response to the request is obfuscated in accordance with the access control rules, and wherein the returned data is obfuscated without modifying the data stored in the relational database. ### Claim 11 (depends on 1) The medium of claim 1, further comprising: parsing, with one or more processors, a structured query language statement included in the request to identify one or more fields associated with the data stored in the relational database; and determining, with one or more processors, whether any of the fields identified in the request are associated with a sensitivity classification defined in metadata associated with the relational database. ### Claim 12 (depends on 11) The medium of claim 11, further comprising enforcing, with one or more processors, a masking rule or access restriction based on the sensitivity classification prior to returning the response. ### Claim 13 (depends on 11) The medium of claim 11, further comprising selecting, with one or more processors, a masking rule or access restriction to be applied based on the sensitivity classification associated with the identified fields. ### Claim 14 (depends on 1) The medium of claim 1, wherein: the data stored in the relational database is stored in one or more content nodes of a content graph; the content graph comprises a plurality of content nodes connected by directed content edges, wherein each directed content edge includes a cryptographic hash pointer based on one or more attributes of a target content node, the cryptographic hash pointer comprising a hash of content of the target content node and an identifier of the target content node; modification of content stored in any content node results in one or more cryptographic hash pointers within the content graph being inconsistent with a previously calculated hash value; and the content graph is decentralized across a plurality of storage compute nodes, wherein different subsets of the content nodes are stored at different compute nodes that are configured to replicate and verify content using the cryptographic hash pointers. ### Claim 15 (depends on 1) The medium of claim 1, wherein the computing entity is an application executing on a user device. ### Claim 16 (depends on 1) The medium of claim 1, further comprising: monitoring, with one or more processors, a number of read requests associated with the user identifier that result in obfuscation of one or more values based on the access control rules; and determining, with one or more processors, whether a count of such read requests satisfies a threshold condition associated with the access policy. ### Claim 17 (depends on 1) The medium of claim 1, further comprising exporting, with one or more processors, one or more access log entries associated with the request to read the data to a storage object maintained in a cloud-based object storage service, wherein the access log entries comprise a user identifier, a timestamp, and a reference to a field of the relational database accessed in response to the request. ### Claim 18 (depends on 1) The medium of claim 1, wherein determining whether the data to be returned in response to the request is to be obfuscated based on an access policy comprises steps for classifying values as higher security values or lower security values. ### Claim 19 (depends on 1) The medium of claim 1, wherein determining whether the data to be returned in response to the request is to be obfuscated based on an access policy comprises steps for determining a risk metric. ### Claim 20 A method to expedite retrieval of records written to persistent storage, comprising: receiving, with one or more processors, a request to read data stored in a relational database, the request being received from a computing entity and comprising a user identifier; accessing, with one or more processors, one or more log entries associated with prior read requests made using the user identifier; determining, with one or more processors, whether the data to be returned in response to the request is to be obfuscated based on an access policy associated with the user identifier, the access policy comprising one or more access control rules that define conditions for access to values stored in respective fields of the relational database; and returning, with one or more processors, a response to the request comprising data from the relational database with one or more values in the response obfuscated in accordance with the access control rules.